Privacy Policy

1. Controller

The controller responsible for processing personal data through this website is:

Email: marta@savouration.ch

Personal data is processed primarily in accordance with the Swiss Federal Act on Data Protection (“FADP”). The European Union General Data Protection Regulation (“GDPR”) applies where its territorial scope is met.

2. Visiting the website

When you visit this website, the hosting provider automatically processes technical information necessary to deliver and secure the website. This information may include:

• IP address;
• date and time of access;
• requested page or file;
• referrer URL;
• browser, operating system and device information;
• HTTP status code.

This data is processed to operate the website, maintain its security and investigate technical problems or misuse.

Where the GDPR applies, the legal basis is our legitimate interest in providing a secure and functional website in accordance with Article 6(1)(f) GDPR.

Server logs are archived monthly by the hosting provider and are kept for no longer than twelve months. They are then deleted, unless continued storage is necessary to investigate a security incident or to comply with a legal obligation.

3. Enquiries and contact forms

When you contact us through the enquiry form or by email, we process the information you provide. The enquiry form asks for:

• your name (mandatory);
• your email address (mandatory);
• company or team (optional);
• preferred date or flexible dates (optional);
• approximate group size (optional);
• the occasion (optional);
• anything else you would like us to know (optional).

The form does not create an account and your enquiry is not stored in a database on this website. It is delivered to us by email at the address given in Section 1, together with the language version of the website you used.

We use this information solely to assess and respond to your enquiry, communicate with you, prepare a proposal and take steps towards a possible business relationship.

Where the GDPR applies, processing is based on Article 6(1)(b) GDPR when necessary to take steps at your request before entering into a contract. Where you contact us on behalf of a company or organisation, processing is based on our legitimate interest in responding to business enquiries under Article 6(1)(f) GDPR.

Allergies, intolerances and dietary requirements are health-related data. Where you choose to share them so that we can prepare an experience that is safe for your group, we process them on the basis of your explicit consent, use them only for that purpose and delete them once the event has taken place. Please share only what is necessary, and no other sensitive personal data.

To protect the form against automated abuse, the server temporarily keeps a one-way hash of your IP address in order to limit how many enquiries can be sent from the same connection. This record is deleted after one hour and is never linked to the content of an enquiry.

Enquiries that do not result in a business relationship are normally deleted within twelve months after the last communication, unless longer retention is necessary to establish, exercise or defend legal claims.

Fields marked as mandatory are necessary for us to process your enquiry. Providing other information is voluntary. Without the required information, we may be unable to respond to your request.

4. Service providers and international transfers

We use the following service providers to operate the website and process enquiries:

• Hosting, server infrastructure, delivery of the enquiry form and email services: HOSTIDO.PL Gałązka sp.j., Poland;
• Analytics and advertising: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Your cookie choice is stored in your own browser. No external consent-management provider is used.

These providers process personal data only to the extent necessary to provide their services and in accordance with applicable contractual and legal data-protection requirements.

Personal data may also be disclosed to IT providers, professional advisers, venues, suppliers or other service partners where this is necessary to respond to an enquiry or provide a requested service.

We may disclose personal data where required by law, a competent authority or a court, or where necessary to establish, exercise or defend legal claims.

If personal data is transferred to a country outside Switzerland or the European Economic Area, the transfer takes place only where an adequate level of data protection is recognised or appropriate safeguards are in place, such as recognised standard contractual clauses or an applicable data privacy framework.

The website, the enquiry form and the email account are hosted in Poland, within the European Economic Area, which Switzerland recognises as providing an adequate level of data protection. No further safeguards are required for these services.

Google may process data in Ireland, Switzerland, the United States and other countries in which Google or its service providers operate. Where applicable, transfers are based on adequacy decisions, the Swiss-U.S. or EU-U.S. Data Privacy Framework, or recognised standard contractual clauses.

5. Cookies, analytics and advertising

This website uses only one cookie without your consent: the cookie that records whether you accepted or declined analytics and advertising. Nothing else is set until you decide.

With your consent, we also use Google Analytics 4 to understand how visitors use the website and to improve its content and performance. Google Analytics may process information such as:

• online identifiers;
• IP address and approximate location;
• browser, device and operating system information;
• visited pages and website interactions;
• date, time and duration of visits;
• referrer URL and campaign source.

When advertising campaigns or conversion-measurement functions are active, we may also use Google Ads to measure the effectiveness of advertisements and determine whether an advertisement resulted in an enquiry or another defined action. Where separately enabled, Google Ads may also be used for remarketing or personalised advertising.

Google Analytics and Google Ads are provided by:

Where the GDPR applies, analytics and advertising processing is based on your consent under Article 6(1)(a) GDPR.

Analytics and advertising technologies are not loaded at all until the relevant consent has been given. You can withdraw or change your consent at any time through Cookie settings in the website footer. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Detailed information about the cookies used, their providers, purposes and storage periods is available in our Cookie Policy.

Further information about Google’s processing of personal data is available in the Google Privacy Policy.

6. Retention of contractual and business records

If an enquiry results in a contractual relationship, the relevant contractual, business, invoicing and accounting records are retained for the periods required by Swiss law, generally ten years.

Other personal data is deleted or anonymised when it is no longer necessary for the purpose for which it was collected and no legal obligation or legitimate interest requires continued retention.

7. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. The website is delivered over an encrypted connection.

However, no method of electronic transmission or storage is completely secure. Email communication may involve security risks unless additional encryption is used.

8. Your rights

Depending on the applicable data-protection law, you may have the right to:

• obtain information about the personal data we process about you;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a commonly used electronic format or request its transfer;
• withdraw consent at any time where processing is based on consent.

These rights may be restricted where permitted by law, particularly where processing is necessary to comply with a legal obligation, protect the rights of others or establish, exercise or defend legal claims.

To exercise your rights, contact us using the email address stated in Section 1. We may request reasonable proof of identity where necessary.

9. Complaints

If you believe that your personal data has been processed unlawfully, you may contact the Swiss data-protection authority:

Where the GDPR applies, you may also lodge a complaint with the competent data-protection supervisory authority, particularly in the country where you live, work or where the alleged infringement occurred.

10. Changes to this Privacy Policy

We may update this Privacy Policy when the website, the services used or the applicable legal requirements change. The current version is published on this website together with the date of the latest update.