Privacy Policy
Content
- General Information
- Privacy Information for Customers and Website Visitors
- Definitions
- Rights of Data Subjects
- Information for Visitors of Our Website
- Collection of Personal Data When Visiting Our Website
- Contact Form and Other Forms
- Job Application
- Children
- Integration of Videos, Services, and Third-Party Content
- Information on Google Services
- Google Analytics
- Data Deletion
- Data Security
- Name and Contact of the Data Controller according to the FADP
- Legal Basis for Processing
- Data Subject Rights
General Information
The websites of Restaurant blindekuh (hereinafter referred to as “Restaurant blindekuh“) are subject to Swiss data protection law, particularly in accordance with the Federal Act on Data Protection (FADP) and the Telecommunications Act (TCA).
These privacy notices may be updated at any time by publication on this website. Access to this website is secured by transport encryption (SSL / TLS).
The websites of Restaurant blindekuh are aimed at companies and individuals domiciled in Switzerland. Foreign individuals are, of course, welcome to visit this website, but they are not our target audience.
Below, you will find information on what data we process, for what purpose, and on what legal basis.
Privacy Information for Customers and Website Visitors
We consider it our primary task to maintain the confidentiality of the personal data you provide and to protect it from unauthorized access. Therefore, we apply great care and modern security standards to ensure a high level of protection for your personal data. We have implemented technical and organizational measures to ensure that data protection regulations are observed by us and by our external service providers.
These privacy notices apply to this domain:
The legislator requires that personal data be processed lawfully, in good faith, and in a manner comprehensible to the data subject (“lawfulness, fairness, transparency”). To ensure this, we inform you about the individual legal definitions that are also used in these privacy notices.
Definitions
Personal data according to Swiss FADP (Article 3)
All information relating to an identified or identifiable person, such as: name, first name, AHV number, address, email address, IP address, telephone number.
Data subject according to Swiss FADP (Article 3)
Natural or legal persons whose data is processed.
Processing according to Swiss FADP (Article 3)
Processing includes any handling of personal data, regardless of the means (e.g., electronic or paper) and procedures used, in particular the storage, disclosure, acquisition, deletion, saving, modification, destruction, and use of personal data.
Legitimate interests include, in particular, the business interest in being able to provide this website, information security, the enforcement of our own legal claims, and compliance with Swiss law.
Restaurant blindekuh processes personal data only for as long as it is necessary for the respective purpose or purposes.
In the case of longer retention obligations due to legal and other obligations to which Restaurant blindekuh is subject, processing will be restricted accordingly.
Rights of Data Subjects
Visitors to this website and other persons whose personal data is processed by Restaurant blindekuh can request, free of charge, confirmation of whether personal data is processed by Restaurant blindekuh and, if so, information about the processing of their personal data, have the processing of their personal data restricted, have their personal data corrected, deleted (“right to be forgotten”) or blocked, revoke granted consents, and object to the processing of their personal data. If personal data cannot be deleted due to retention obligations or other regulations, its processing will be blocked/restricted.
Please note that for such requests, we must ensure that it is indeed the data subject before providing any information.
Persons whose personal data is processed by Restaurant blindekuh have a right to lodge a complaint with the competent supervisory authority for data protection.
The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
Automated decision-making does not take place on our websites.
Information for Visitors of Our Website
In the following, we inform you about the collection of personal data when using our website. Personal data includes, for example, name, address, email addresses, and user behavior.
If you contact us by email or phone, the data you provide (your email address, possibly your name and phone number) will be stored by us to answer your questions. We delete the data collected in this context after storage is no longer necessary, or processing is restricted if legal retention obligations exist.
Collection of Personal Data When Visiting Our Website
Every time you access our website, data and information from your device’s system are automatically collected and stored in so-called server log files. This data consists of information relating to website visitors (identified or identifiable natural and legal persons). This data is automatically transmitted by your browser when you access our website. The following information is collected:
IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), access status/HTTPS status code, amount of data transferred in each case, website from which the request originates, browser, operating system and its interface, as well as language and version of the browser software.
The purpose of this processing is the accessibility of our website from your device and the enabling of a correct display of our website on your device or in your browser. The data also serves to optimize our website and to ensure the security of our systems.
Our host server is the recipient of the data. It acts for us within the framework of a data processing agreement; the data is stored in Switzerland.
Address: METANET AG, Josefstrasse 218, 8005 Zurich
Information on data protection can be found here:
https://www.metanet.ch/about_metanet/rechtliches
The FADP is the legal basis for processing. We have a legitimate interest in presenting you with a website optimized for your browser and enabling communication between our server and your end device.
This data is not merged with other data sources. We reserve the right to review this data retrospectively if we become aware of concrete indications of unlawful use.
This data collection primarily serves to evaluate and prevent attack attempts on the website. Hosting providers are also legally obliged in certain situations to be able to provide information about where access originated, in order to counter criminal activities.
Google Web Fonts are also used for the display of the website. This involves calling the Google web server.
Google is Swiss-US Privacy Shield certified and thus guarantees compliance with data protection.
Information on Google and its privacy notices:
Address: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland
Information on data protection and Privacy Shield can be found here:
https://policies.google.com/privacy?gl=de
https://www.privacyshield.gov/list
The FADP is the legal basis for processing. We have a legitimate interest in presenting you with a website optimized for your browser.
Contact Form and Other Forms
Our website contains a contact form that you can use to contact us electronically. If you contact us via this contact form, the data you enter in the input fields will be processed by us.
First Name
Last Name
Phone Number
Email
Subject
Message
When submitting the form, the following data is also stored:
Your IP address
Date and time of submission
Under “Contact”, you also have the option to reach us by phone or email. If you send us an email, all information provided therein will be processed to answer your inquiry.
The purpose of processing personal data within the scope of mandatory and voluntary information is to process the contact request and to be able to contact you regarding your inquiry.
The legal basis for processing the personal data you provide in the context of contact is the FADP.
The other personal data processed during submission (IP address, date and time of submission) serves to prevent misuse of our contact form.
The legal basis for this is our legitimate interest according to the FADP. We have a legitimate interest in preventing or being able to prove misuse of our contact form.
The data will be deleted as soon as it is no longer required for the purpose of its collection.
The recipient of the data is our server host, who acts for us within the framework of a data processing agreement.
The data will be stored for as long as necessary to process your request and then, if necessary, retained or deleted in accordance with legal requirements.
We do not pass on this data to third parties without your consent.
The provision of personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide it means that you cannot use our contact form.
Job Application
On our website, we also offer you the opportunity to apply for job vacancies and to send us your application by email or post.
If you send us your application, we will process the information you provide to us as part of the application (e.g., your email address if you send us your application by email).
If you send us your application electronically, we process your email address to process the application and to be able to contact the applicant to answer the inquiry. If sent by post, we process the data you provide. The purpose of processing the personal data resulting from the application documents you send is to identify a suitable applicant.
The legal basis for processing your email address is the FADP. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to answer your inquiries. The legal basis for processing the personal data resulting from the application is also the FADP.
The application email and the submitted documents will be retained until a decision has been made for or against the applicant and will then be deleted. If you have sent us your application documents by post, we will return your submitted application documents to you after the application process is complete.
The provision of personal data is required for submitting an application. Failure to provide it means that we cannot process and consider your application.
Children
Our offer is generally aimed at adults. Persons under 18 years of age should not transmit personal data to us without the consent of their parents or guardians.
Integration of Videos, Services, and Third-Party Content
It may happen that third-party content, such as videos from YouTube or Vimeo, map material from Google Maps, RSS feeds, or graphics from other websites, is integrated within this online offer. This always presupposes that the providers of this content (hereinafter referred to as “third-party providers”) perceive the user’s IP address. Because without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore required for the display of this content. We endeavor to use only such content whose respective providers use the IP address solely for the delivery of the content. However, we have no influence if the third-party providers store the IP address, e.g., for statistical purposes. As far as we are aware, we inform users about this.
If you do not want to disclose your data, please log out of your Google account or use a plugin like Ghostery to block data exchange. You can find Google’s privacy policy here.
Integration of Videos
Videos can be used on the website, in the member area, or for advertising purposes. Videos are a good way to make content more understandable. Local hosting of videos is not powerful enough, which is why we use an external provider for this.
Vimeo
For some of our videos, we therefore use Vimeo. Due to technical reasons, clicking on our embedded videos leads to calls to Vimeo’s servers. Vimeo sets a cookie in your browser. The purpose of this cookie is to save your settings, e.g., your chosen volume or playback status. This cookie belongs to the category of functional cookies. Vimeo determines which data from your browser or end device is used. Vimeo’s privacy policy applies in this regard.
Information on Vimeo and its privacy notices:
Address: Vimeo, Inc., 555 West 18th Street, New York, NY 10011, U.S.A.
Vimeo participates in the Swiss-US Privacy Shield program and thus guarantees compliance with data protection regulations.
Vimeo offers the following information on data protection:
https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active
YouTube
We also use YouTube videos on our website. YouTube is a service provided by YouTube LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
YouTube is integrated by embedding the service on our website using an “iframe”. When this iframe is loaded, YouTube or Google may collect and process information (including personal data). It cannot be ruled out that YouTube or Google may also transmit this information to a server in a third country.
Information on Google’s existing Privacy Shield certification and other relevant data on data processing by Google in connection with the use of Google services can be found in this privacy policy under the section “Information on Google Services”.
By integrating YouTube, we aim to present various videos on our website so that you can watch them directly on our website.
The legal basis for the processing of personal data described here is the FADP. Our legitimate interest required for this lies in the great benefit that YouTube offers. By integrating external videos, we relieve our servers and can use corresponding resources elsewhere. This can, among other things, increase the stability of our servers. YouTube or Google also has a legitimate interest in the collected (personal) data to improve its own services.
Further information can be found in the privacy notices of YouTube or Google, which you can access here: www.google.com/policies/privacy/
Information on Google’s privacy settings can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in
Information on Google Services
We use various services from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, on our website.
Further information on the individual specific Google services that we use on this website can be found in the additional privacy notices.
By integrating Google services, Google may collect and process information (including personal data).
It cannot be ruled out that Google may also transmit the information to a server in a third country.
As shown by Google’s Privacy Shield certification (found at https://www.privacyshield.gov/list under the search term “Google”), Google has committed to complying with the Swiss-US Privacy Shield Framework regarding the collection, use, and storage of personal data from Switzerland.
Google, including Google LLC and its wholly-owned subsidiaries in the USA, has declared through certification that it complies with the Privacy Shield Principles.
Further information can be found at https://www.google.de/policies/privacy/frameworks/.
We ourselves cannot influence what data Google actually collects and processes. However, Google states that, among other things, the following information (including personal data) can generally be processed:
- Log data (in particular the IP address)
- Location-related information
- Unique application numbers
- Cookies and similar technologies
If you are logged into your Google account, Google may add the processed information to your account and treat it as personal data, depending on your account settings; see in particular https://www.google.de/policies/privacy/partners.
Google states, among other things, the following:
“We may combine personal data from one service with information and personal data from other Google services. This makes it easier for you, for example, to share content with friends and acquaintances. Depending on your account settings, your activities on other websites and in apps may be linked to your personal data to improve Google’s services and Google-displayed advertising.” (https://www.google.com/intl/de/policies/privacy/index.html)
You can prevent this data from being directly added by logging out of your Google account or by making the appropriate account settings in your Google account.
Further information can be found in Google’s privacy notices, which you can access here: https://www.google.com/policies/privacy/
Information on Google’s privacy settings can be found at https://privacy.google.com/take-control.html
Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies”, text files that are stored on your device and enable an analysis of your use of the websites you visit. Google Analytics can also use so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on websites. The information generated by cookies and web beacons about the use of our website (including the users’ IP address) is transmitted to a Google server, possibly in the USA or other third countries, and stored there. This information may be passed on by Google to Google’s contractual partners.
Information on Google’s existing Privacy Shield certification and other relevant data on data processing by Google in connection with the use of Google services can be found in this privacy policy under the section “Information on Google Services”.
The following types of data are processed by Google:
Online identifiers (including cookie identifiers)
IP address
Device identifiers
Furthermore, you can find more detailed information on the processed information at https://www.google.com/intl/de/policies/privacy/#infocollect under “Data we receive due to your use of our services”, and at https://privacy.google.com/businesses/adsservices/.
We only use Google Analytics with activated IP anonymization (“anonymize IP”). This shortens your IP address within Europe by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Furthermore, we have concluded a data processing agreement with Google for the use of Google Analytics (Art. 28 GDPR). Google processes the data on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide us with other services related to website and internet usage. Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google.
By integrating Google Analytics, we aim to analyze user behavior on our website and to be able to react to it. This allows us to continuously improve our offer.
The legal basis for the processing of personal data described here is the FADP.
As part of the data processing agreement, Google is authorized to engage subcontractors. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/.
The processed information is stored only for as long as necessary for the intended purpose or as required by law.
Further information on data handling in connection with Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
Information on Google’s privacy settings can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in
Data Deletion
We generally delete personal data when there is no longer a need for further storage. A need may exist, in particular, if the data is still required to fulfill contractual services, to check and grant or defend warranty and, if applicable, guarantee claims. In the case of legal retention obligations, deletion is only considered after the expiry of the respective retention obligation.
Data Security
We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification, or distribution of your data by unauthorized persons. Despite regular controls, complete protection against all dangers is not possible.
Name and Contact of the Data Controller according to the FADP
Inquiries from supervisory authorities and data subjects usually reach us by email, but are also possible by post:
Restaurant blindekuh
Mühlebachstrasse 148
CH-8008 Zurich
Phone 044 421 50 50
zuerich@blindekuh.ch
Data Subject Rights
You generally have the same rights as we have described in the privacy policy for our website:
(1) Right of access
(2) Right to rectification
(3) Right to erasure
(4) Right to restriction of processing
(5) Right to data portability
(6) Right to object
(7) Right to lodge a complaint with a supervisory authority
According to the FADP, you have the right to revoke consents once given at any time – this applies to the future and does not affect the lawfulness of processing carried out on the basis of the consent until revocation.
If you wish to assert your rights against us, please contact us at the email address zuerich@blindekuh.ch and explain your specific concern as precisely as possible.
You have a right to object to processing by cookies. You can exercise this, for example, as follows:
You can restrict or completely prevent the setting of cookies in your browser settings. You can also arrange for cookies to be automatically deleted when the browser window is closed. Under the links listed below, you can find out how to change or delete cookie settings in the most common browsers:
Apple Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
Microsoft Internet Explorer:
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox:
In some browsers, such as Google Chrome or Firefox, you can find out the storage duration of cookies by displaying the cookies (usually by clicking on the “i” next to the address bar).