Contents
1. Data controller
The controller of your personal data is:
- Golden Puffs
- Address : Zurich, Switzerland
- Email : info@goldenpuffs.ch
For any question about your data or the exercise of your rights, you can contact us at the address above.
2. Data we collect
Depending on how you interact with us, we collect the following categories of data:
2.1 When requesting a catering quote
- Identity: first name, last name;
- Contact details: email, phone;
- Professional data: company name, job title (where applicable);
- Request details: date, location, estimated number of guests, event type, free-text message;
- Technical data: IP address, browser, submission timestamp.
2.2 When subscribing to the newsletter
- Email address;
- Subscription date, subscription source, subscription status.
2.3 When contacting us generally
- Identity: first name, last name;
- Email, message subject, message content.
2.4 When browsing the site
- Technical data: IP address (partial/anonymised), browser type, operating system, pages visited, visit duration, traffic source;
- Cookies: see section 8.
3. Why we collect it
Your data is processed for the following purposes:
- Responding to your requests : handling your quote request, your question, or your enquiry;
- Delivering the service : contract management, logistics, invoicing;
- Newsletter : sending you our seasonal letter (only if you have consented);
- Improving the site : understanding how our site is used in order to improve it (anonymised statistics);
- Legal obligations : accounting retention, fraud prevention;
- Security : preventing misuse of the site and our services.
We carry out no automated profiling producing legal effects concerning you, and no individual automated decision-making.
4. Legal basis for processing
We process your data on the following legal bases:
- Performance of a contract or pre-contractual measures (quote, catering service);
- Explicit consent (newsletter, non-strictly-necessary cookies);
- Legitimate interest (site security, anonymised statistics, handling incoming contacts);
- Legal obligation (accounting retention, tax filings).
5. Retention period
Your data is kept only for as long as strictly necessary for the purposes of processing:
- Quote request with no follow-up : 12 months from the last exchange;
- Contractual data (active client) : duration of the contractual relationship + 10 years (Swiss accounting obligations);
- Newsletter : until unsubscription, then deletion within 30 days;
- General contact : 24 months;
- Server and technical logs : 12 months maximum;
- Cookies : see section 8.
6. Sharing with third parties
We never sell, rent or transfer your data to third parties for commercial purposes.
We share strictly necessary data with the following categories of providers, under a contractual commitment to confidentiality and compliance:
- Site host : Vercel Inc. (United States);
- Transactional email solution : to send replies to your requests;
- Newsletter platform : a provider compliant with revFADP/GDPR;
- Audience measurement tools : see section 8;
- Accounting providers : for administrative and tax management;
- Authorities : only where required by law (court order, tax audit).
7. Transfers outside Switzerland
Some of our technical providers may be established in the European Union or the United States. When your data is transferred outside Switzerland or the EEA, we ensure that such transfers take place within a framework offering an adequate level of protection, in accordance with the revFADP and the GDPR:
- Countries benefiting from an adequacy decision (Switzerland, EU/EEA, etc.);
- Standard contractual clauses recognised by the Swiss Federal Commissioner and the European Commission;
- Certification mechanisms or binding internal rules where applicable.
8. Cookies and trackers
The Golden Puffs site uses cookies to ensure it works and to improve your experience. We distinguish between:
- Strictly necessary cookies : essential to the operation of the site (session, security). No consent required.
- Anonymised audience-measurement cookies : to understand traffic. Enabled only with your consent.
- Third-party cookies (social media, partners) : enabled only with your explicit consent.
You can change your preferences at any time via the "Cookies" link at the bottom of the page or directly in your browser settings. Cookies have a maximum lifespan of 13 months.
9. Your rights
In accordance with the Swiss revFADP and the GDPR, you have the following rights over your personal data:
- Right of access : to obtain confirmation that your data is being processed, and to receive a copy of it;
- Right to rectification : to have inaccurate or incomplete data corrected;
- Right to erasure : to request the deletion of your data, subject to legal retention obligations;
- Right to restriction : to request the suspension of processing in certain situations;
- Right to portability : to receive your data in a structured format usable by another controller;
- Right to object : to object to processing based on our legitimate interest;
- Right to withdraw your consent at any time (newsletter, cookies);
- Right to lodge a complaint : with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or the competent supervisory authority in your country of residence (EU).
To exercise your rights, write to us at info@goldenpuffs.ch. We will respond within a maximum of 30 days. Proof of identity may be requested in the event of reasonable doubt about your identity.
10. Security
We implement appropriate technical and organisational measures to protect your data against any unauthorised access, alteration, disclosure or destruction, in particular:
- TLS/HTTPS encryption across the entire site and all forms;
- Data access restricted to authorised persons (Justine, Nick, contracted providers);
- Strong passwords and two-factor authentication on critical tools;
- Regular, encrypted backups;
- Periodic review of access rights and providers.
In the event of a data breach likely to result in a high risk to your rights and freedoms, we undertake to inform you as soon as possible, in accordance with our legal obligations.
11. Minors
The Golden Puffs site is not specifically directed at minors under 16. We do not knowingly collect data concerning minors. If you are a parent or guardian and discover that a minor has provided us with data, please contact us for immediate deletion.
12. Changes to this policy
This privacy policy may evolve to reflect legal changes, changes in our practices, or new site features. The applicable version is the one published on this page on the date of your visit. Material changes will be communicated visibly (banner, email to newsletter subscribers).
For any question or to exercise your rights: info@goldenpuffs.ch