Privacy Policy

Last updated: 22.01.2024

We place great importance on ensuring that the handling of personal data is transparent. This privacy policy provides information about which personal data we collect, for what purpose, and to whom we disclose it. To ensure a high level of transparency, this privacy policy is regularly reviewed and updated.

1. Services We Use

  • Google Analytics
  • Google Call Conversion Tracking
  • Google Tag Manager
  • Google Tag Manager for WordPress
  • Google Ads
  • Google Ads Conversion Tracking
  • Google Customer Reviews
  • Google My Business
  • WordPress
  • Google Maps
  • Google Forms
  • Google Site Kit

2. Contact Information

If you have any questions or concerns regarding the protection of your data by us, you can contact us at any time via email at kontakt@felix-zuerich.ch.
The entity responsible for data processing carried out through this website is:

drinks to enjoy Gastro AG
Kalkbreitestrasse 8
8003 Zurich
Switzerland

Data Protection Officer:
Felix Haag
Email: kontakt@felix-zuerich.ch
Phone: +41 (0)44 545 18 13

3. General Principles

3.1 What Data Do We Collect About You and From Whom Do We Receive This Data?

Primarily, we process personal data that you provide to us or that we collect while operating our website. In some cases, we may also receive personal data about you from third parties. These may include the following categories:

  • Personal identification data (name, address, date of birth, etc.);
  • Contact data (mobile number, email address, etc.);
  • Financial data (e.g., account details);
  • Online identifiers (e.g., cookie IDs, IP addresses);
  • Location and traffic data;
  • Audio and visual recordings;
  • Special category data (e.g., biometric data or health information).

3.2 Under What Conditions Do We Process Your Data?

We process your data confidentially and in accordance with the purposes outlined in this privacy policy. We ensure transparent and proportionate data processing.

If, in exceptional cases, we are unable to adhere to these principles, data processing may still be lawful if there is a justification. Such justifications include:

  • Your consent;
  • The execution of a contract or pre-contractual measures;
  • Our legitimate interests, provided your interests do not override them.

3.3 How Can You Withdraw Your Consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.

You may withdraw your consent at any time by sending an email to the address provided in the imprint. Data processing carried out before the withdrawal remains unaffected.

3.4 In What Cases Can We Share Your Data with Third Parties?

a. Principle

We may need to use third-party services or affiliated companies and entrust them with processing your data (so-called processors). Categories of recipients include:

  • Accounting, fiduciary, and auditing firms;
  • Consulting firms (legal, tax, etc.);
  • IT service providers (web hosting, support, cloud services, website design, etc.);
  • Payment service providers;
  • Providers of tracking, conversion, and advertising services.

We ensure that these third parties and our affiliates comply with data protection requirements and treat your personal data confidentially.

In certain cases, we may also be obligated to disclose your personal data to authorities.

b. Visiting Our Social Media Channels

We may embed links to our social media channels on our website. These are typically visible via corresponding icons. Clicking on the icons will redirect you to our social media channels.

In this case, the social media providers will know that you are accessing their platform from our website. These providers may use the collected data for their own purposes. We point out that we have no knowledge of the content of the data transmitted or its use by the operators.

c. Transfer Abroad

As part of data processing, your personal data may be transferred to companies abroad. These companies are bound by the same data protection obligations as we are. The transfer can take place worldwide.

If the level of data protection does not correspond to that in Switzerland, we conduct a prior risk assessment and contractually ensure that the same level of protection as in Switzerland is guaranteed (e.g., through the EU Commission‘s new standard contractual clauses or other legally required measures). If our risk assessment yields a negative result, we take additional technical measures to protect your data.

You can access the EU Commission‘s standard contractual clauses at the following link:
https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How long do we keep your data?

We store personal data only for as long as necessary to fulfill the specific purposes for which the data was collected.

Data that we collect during your visit to our website will be kept for twelve months. An exception applies to analysis and tracking data, which may be kept for a longer period.

Contractual data is stored for a longer period due to legal obligations. In particular, we are required to retain business communications, signed contracts, and accounting records for up to 10 years. Once we no longer need such data to provide services, the data will be locked and used solely for accounting and tax purposes.

3.6 How Do We Protect Your Data?

We store your data securely and take all reasonable measures to protect it from loss, access, misuse, or alteration.

Our contractors and employees with access to your data are obligated to comply with data protection regulations. In some cases, it may be necessary to forward your inquiries to affiliated companies. In such cases, your data will also be treated confidentially.

We use SSL (Secure Socket Layer) encryption within our website, combined with the highest encryption level supported by your browser.

3.7 What Are Your Rights?

a. Right to Information

You can request information at any time about the data we have stored about you. Please send your request for information along with proof of identity to kontakt@felix-zuerich.ch.

You also have the right to receive your data in a standard file format if we process your data automatically and if:

  • You have given your consent for the processing of this data; or
  • You disclosed the data in connection with concluding or executing a contract.

We may restrict or deny access to information or data release if this conflicts with our legal obligations, our legitimate interests, public interests, or those of third parties.

Processing your request is subject to the legal processing period of 30 days. However, we may extend this period due to high request volume, legal or technical reasons, or because we need further information from you. You will be informed in a timely manner, at least in text form, about any extension.

b. Deletion and Correction

You can request the deletion or correction of your data at any time. We may deny the request if legal requirements mandate longer or unchanged retention or if a justification opposes your request.

Please note that exercising your rights may conflict with contractual agreements and have corresponding implications for the contract execution (e.g., early termination or cost consequences).

c. Legal Recourse

If you are affected by the processing of personal data, you have the right to enforce your rights through the courts or to file a complaint with the appropriate supervisory authority. The competent authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch.

3.8 Changes to the Privacy Policy

We may change this privacy policy at any time. The changes will be published, but you will not be separately notified.

4. Individual Data Processing Operations

4.1 Providing the Website and Creating Log Files

What Information Do We Receive and How Do We Use It?

When you visit our website, certain data is automatically stored on our servers or on the servers of services and products that we use and/or have installed. These data are stored for system administration, statistical, security, or tracking purposes and include:

  • The name of your internet service provider;
  • Your IP address (if applicable);
  • The version of your browser software;
  • The operating system of the computer used to access the URL;
  • The date and time of access;
  • The website from which you accessed the URL;
  • The search terms you used to find the URL.

Why Are We Allowed to Process This Data?

This data cannot be assigned to a specific individual, and it is not combined with other data sources. Log files are stored to ensure the functionality of the website and to maintain the security of our IT systems. This constitutes our legitimate interest.

How Can You Prevent Data Collection?

Data is stored only as long as necessary to achieve the purpose of its collection. Accordingly, data is deleted after each session. The storage of log files is essential for the operation of the website, so you cannot object to it.

4.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). Google Analytics uses „cookies,“ text files stored on your computer that allow an analysis of your use of the website.

The information generated by the cookie about your use of this website is generally transmitted to and stored by Google on servers in the USA. If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by adjusting your browser settings. However, please note that doing so may limit your ability to use all features of this website fully. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

4.3 Google Call Conversion Tracking

We use Google Call Conversion Tracking, an analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). This service allows us to measure the effectiveness of specific ads by tracking how many calls are generated through those ads.

When you reach our website through a Google ad and call the provided phone number, Google can recognize this and record it as a „conversion“ for us. No personal data of the caller, such as the phone number or name, is transmitted to us.

Google uses cookies and similar technologies to provide the service and track calls. These cookies are used to identify and track the ad that led the user to the website and the source of the call.

If you do not wish to participate in tracking, you can opt-out by disabling the Google Conversion Tracking cookie in your internet browser settings. You will then not be included in the conversion tracking statistics.

4.4 Google Tag Manager

To manage website tags via an interface, we use Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not process personal data. The service triggers other tags, which in turn may collect data. Google Tag Manager does not have access to this data. If deactivation is applied at the domain or cookie level, it will apply to all tracking tags implemented with Google Tag Manager.

By using Google Tag Manager, scripts (called tags) can be automatically triggered on our website, and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you are using, the subpages of our website you visit, and other interactions during your website visit.

4.5 Google Tag Manager for WordPress

On our website, we use the plugin “Google Tag Manager for WordPress,” which integrates Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) into our WordPress-based website. This plugin allows us to manage and integrate various scripts and codes via a central interface.

The Google Tag Manager itself (which implements the tags) is a cookie-free domain and does not process personal data. The service triggers other tags, which in turn may collect data. Google Tag Manager does not have access to this data. If deactivation is applied at the domain or cookie level, it will apply to all tracking tags implemented with Google Tag Manager.

By using the “Google Tag Manager for WordPress” plugin, scripts (called tags) can be automatically triggered on our website, and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you are using, the subpages of our website you visit, and other interactions during your website visit.

4.6 Google Ads

We use the service Google Ads on our website, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Ads allows us to place advertisements in Google search results as well as within the Google ad network.

4.7 Google Ads Conversion Tracking

We use the online advertising program “Google Ads” on our website and, in this context, the Conversion Tracking (visit action evaluation). Google Ads Conversion Tracking is an analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

When you click on an ad displayed by Google, a cookie for conversion tracking is set on your device. These cookies have a limited validity, contain no personal data, and thus cannot be used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, both Google and we can recognize that you clicked on the ad and were redirected to this page.

The information collected via the conversion cookie is used to generate conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive information that would allow us to personally identify users.

You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, please note that in this case, you may not be able to fully use all features of this website. You will not be included in the conversion tracking statistics.

Additionally, you can disable personalized advertising in Google’s ad settings. Instructions can be found at https://support.google.com/My-Ad-Center-Help/answer/12155764.

4.8 Google Customer Reviews

We use the service Google Customer Reviews on our website, offered by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Customer Reviews allows our customers to provide feedback on their purchasing experiences with us and helps us improve our service quality and customer experience.

After a purchase on our website, you may be invited to participate in a Google Customer Reviews survey. If you choose to participate, Google will provide you with a survey in which you can rate your experiences with us. The information you provide will be processed and aggregated by Google to give us an overall picture of customer satisfaction.

When using Google Customer Reviews, data, including your IP address, survey date and time, and your ratings, is transmitted to Google and stored on Google’s servers. These servers may be located in the USA or other countries.

If you do not wish to participate in Google Customer Reviews, you can simply ignore or decline the invitation to the survey.

For more information on Google’s data collection and privacy practices in relation to Google Customer Reviews, see Google’s privacy policy

at https://www.google.de/intl/de/policies/privacy/ and the specific information on Google Customer Reviews.

4.9 Google My Business

We use features of Google My Business on our website, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google My Business allows businesses to manage their presence on Google, including Google Search and Google Maps, and interact with customers.

By visiting our website or interacting with our Google My Business listing, such as leaving reviews or asking questions, data, particularly your IP address and the contents of your interactions, is transmitted to Google and stored on Google’s servers. These servers may be located in the USA or other countries.

Google uses this information to provide Google My Business services, facilitate user interactions with businesses, and provide us with reports and analytics on interactions and the performance of our business listing.

4.10 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage, and publish content.

When using our WordPress-based website, various data, including your IP address, the date and time of access, as well as information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure the smooth operation of the website.

Some WordPress features, such as comments or contact forms, may collect additional personal data when used.

4.11 Google Maps

We use Google Maps on our website, a map service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Maps allows us to embed interactive maps directly into the website, enabling you to conveniently use the map feature, such as for location searches or route planning.

When visiting the website, Google receives information that you have visited the relevant subpage of our website. Additional data, particularly your IP address, is transmitted to Google and stored on Google’s servers. These servers may be located in the USA or other countries. This happens regardless of whether Google provides a user account that you are logged into or whether there is no user account.

Google stores your data as usage profiles and uses it for advertising, market research, and/or customized website design. Such evaluations are carried out, particularly (even for users who are not logged in) for providing targeted advertising.

You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.

4.12 Google Forms

For surveys and online forms, we use Google Forms, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Forms allows us to create individual forms for surveys and data collection, which you can fill out via links or directly on our website.

When you fill out a Google Form provided by us, the data you enter, as well as your IP address, is transmitted to Google and stored on Google’s servers. These servers may be located in the USA or other countries.

Please note that the data you enter in Google Forms is processed and stored by Google. If you have concerns about the data storage by Google or wish to prevent the transmission of your data to Google, you should not fill out the form.

4.13 Google Site Kit

For managing and analyzing our website, we use the plugin “Google Site Kit,” provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Site Kit allows us to integrate and centrally manage various Google services, such as Google Analytics, Google Search Console, Google AdSense, and others directly into our WordPress website.

By using Google Site Kit, various data, including your IP address, information about the browser you are using, the subpages of our website you visit, and other interactions during your website visit, is transmitted to Google and stored on Google’s servers. These servers may be located in the USA or other countries.

Google uses this information to provide us with detailed reports and analytics on website traffic, website performance, visitor interactions, and other relevant metrics.

4.14 Contact Form

When you send us inquiries via the contact form, the information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent.

4.15 SSL Encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL encryption is activated, the data you transmit to us cannot be read by third parties.

4.16 Cookies

This website uses cookies. These are small text files that make it possible to store specific, user-related information on the user’s device while using the website. Cookies allow us to determine the frequency of use and the number of users of the pages, analyze user behavior, and make our offer more user-friendly. Cookies remain stored beyond the end of a browser session and can be accessed again on a return visit. If you do not wish this, you should configure your internet browser to refuse cookies.

4.17 Newsletter Data

If you want to receive the newsletter offered on this website, we need your email address and information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. No other data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. You can revoke your consent to store the data, the email address, and its use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter.

4.18 Objection to Advertising Emails

The use of contact data published in the context of the imprint obligation for sending unsolicited advertising and informational materials is hereby objected to. The operators of the sites expressly reserve the right to take legal action in case of unsolicited sending of advertising information, such as spam emails.

4.19 Facebook

This website uses features of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When visiting our pages with Facebook plugins, a connection is established between your browser and Facebook’s servers. Data is transmitted to Facebook. If you have a Facebook account, these data may be linked to it. If you do not wish to associate these data with your Facebook account, please log out of Facebook before visiting our site. Interactions, especially using a comment function or clicking on a “Like” or “Share” button, are also transmitted to Facebook. More information can be found at https://de-de.facebook.com/about/privacy.

4.20 Instagram

Our pages include functions from the Instagram service. These features are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data and how Instagram uses it. For more information, see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

4.21 YouTube

This website uses plugins from the YouTube page operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages with a YouTube plugin, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. For more information on how user data is handled, see YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

4.22 Processing of Personal Data by aleno

Collection of Guest Data for Reservations
In order to accept and manage online reservation requests through our website, we use the restaurant management system aleno, which is provided by aleno AG based in Switzerland. The use of aleno allows us to electronically collect personal information about our guests (“Guest Data“). The Guest Data includes the following information:

  • First and last name
  • Phone number and email address
  • Number of people, desired time, and date of the visit
  • Home address (optional)
  • Company name (optional)

The collection of Guest Data enables us to process the reservation request and ensure that the desired table is reserved under your name, and we can contact you if needed. The legal basis for using aleno to electronically collect reservations is the protection of our legitimate interests in accordance with Article 6, Paragraph 1, Letter f of the GDPR. The guest data we collect is not automatically deleted after the reservation is completed, but instead used to create a personal guest profile. More information about the guest profile can be found in section […] below. You have the right at any time to request the deletion of your guest data. If deletion occurs before the reservation date, the corresponding reservation will be automatically canceled.

Collection of Credit Card Information for Reservations
Online reservation requests are only binding once we have confirmed the table, date, and time via email or phone. To ensure that we are not harmed in the case of an unexcused no-show, we may request a credit card as a payment guarantee. In this case, we collect the following information (“Payment Information“):

  • Credit card issuer name
  • Cardholder name
  • Expiration date of the credit card
  • Credit card number and CVV code

If you provide your payment information during an online reservation request, the data is automatically anonymized by aleno. As a result, the payment information is not considered personal data under the Federal Data Protection Act (DSG) or the EU General Data Protection Regulation (GDPR). The payment information is also transmitted directly to the hosting provider of aleno AG. We do not have access to the anonymized payment information and do not store it in our system.

Creation of Guest Profiles
The guest data collected to process and manage an online reservation is used to create a personal profile for our guests within the aleno restaurant management system (“Guest Profile“). This allows us to use the guest data to personalize our services. After your visit to our restaurant, we may expand the guest profile with additional personal data to further personalize your experience (“Profile Data“). These Profile Data may include the following information:

  • Personal data to customize the guest experience, including preferred language, allergies, special requests, birthday, customer category, and status.
  • Information about past restaurant visits, including date and time of the visit, duration of stay, number of guests, table type and location, spending amount, and any no-show occurrences.
  • Consolidated information about all past restaurant visits, including total number of visits, total spending, and total number of no-shows.

The creation of a guest profile and the collection of profile data allows us to tailor our services to you, ensuring that you feel at home with us and that we can meet your individual needs. The legal basis for using aleno to create a guest profile is the protection of our legitimate interests in accordance with Article 6, Paragraph 1, Letter f of the GDPR. The guest data and profile data contained in the guest profile will be deleted or anonymized once they are no longer used for their original purpose. You have the right at any time to request the deletion of your guest profile and the guest and profile data contained within it.

Responsibility and Further Information
In the context of the collection and processing of guest data, payment information, and profile data related to the use of the aleno restaurant management system, we act as the controller according to Article 4, Paragraph 7 of the GDPR, deciding on the purposes and means of processing the collected personal data and being responsible for ensuring and fulfilling the rights of the data subjects.

The guest data, payment information, and profile data are transmitted to aleno AG after collection and processed by them. aleno AG qualifies as a processor under Article 4, Paragraph 8 of the GDPR, processing personal data on behalf of the controller. Therefore, we have entered into a data processing agreement with aleno AG, fully complying with the GDPR requirements in using aleno.

For more information on the collection and handling of your personal data in connection with the use of aleno, please refer to the privacy policy of aleno AG, which can be accessed via the following link: https://www.aleno.me/de/ppa.

4.23 Copyrights

The copyright and all other rights to content, images, photos, or other files on the website belong exclusively to the operator of this website or the specifically mentioned rights holders. Reproduction of any files requires prior written consent from the copyright holder. Anyone who commits a copyright infringement without the consent of the respective rights holder may be criminally liable and may be required to pay damages.

General Disclaimer

All information on our website has been carefully checked. We strive to offer our information in an up-to-date, correct, and complete manner. However, the occurrence of errors cannot be completely excluded, so we cannot guarantee the completeness, accuracy, and currency of the information, including journalistic-editorial content. Claims for liability for material or immaterial damages caused by the use of the offered information are excluded, unless there is demonstrably deliberate or grossly negligent fault. The publisher may change or delete texts at its discretion and without notice and is not obligated to update the content of this website. The use or access to this website is at the user’s own risk. The publisher, its clients, or partners are not responsible for any damages, whether direct, indirect, incidental, pre-determined, or consequential, allegedly arising from the use of this website, and thus do not assume liability for them. The publisher also assumes no responsibility and liability for the content and availability of third-party websites accessible via external links from this website. The content of linked pages is solely the responsibility of their operators. The publisher explicitly distances itself from all third-party content that may be criminal or legally questionable or violates good morals.

Changes

We may adjust this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you about the update via email or other appropriate means.