Privacy policy

Protecting your personal data is important to us. This statement explains what data Demo Restaurant processes when you use this website and the online ordering service, and what rights you have.

Data controller

Demo Restaurant
Musterstrasse 1, 1700 Fribourg
Phone: 026 000 00 00
E-Mail: info@demo.test

Scope

This privacy statement applies to the processing of personal data in connection with this website and orders placed through it. Swiss data protection law (DSG) applies; where applicable, we also observe the EU GDPR.

What data we process

Depending on use, we process the following categories of personal data:

• Order data: name, delivery or contact address, phone number, e-mail address as well as order and payment details.
• Account data (on registration): name, e-mail, phone, saved address, order history and a securely hashed password.
• Payment data: for card or TWINT payments, these are processed directly by the payment provider. We do not store full card data.
• Technical data: IP address, date and time of access, browser type and a technically necessary session cookie for the cart and login.

Purpose of processing

We process your data to handle and deliver your order, to contact you with questions, to manage your account, to fulfil legal obligations and to ensure the security and improvement of our service.

Legal bases

Processing is based on the performance of the contract (order), compliance with legal obligations (e.g. retention), our legitimate interest in secure operation and, where required, your consent.

Cookies

We use only technically necessary cookies (cart, session, login). No marketing or tracking cookies are used and no profiling takes place.

Disclosure to third parties

Your data is neither sold nor used for advertising. It is only shared where necessary for processing: with our hosting provider (Infomaniak, Switzerland), with delivery/service staff and with payment providers as part of payment processing.

Disclosure abroad

Data is hosted in Switzerland. In principle, no transfer abroad takes place, unless it is necessary for payment processing; in that case an adequate level of protection is ensured.

Retention period

We retain personal data only as long as necessary for the stated purposes or legal obligations:

• Order and invoice data: 10 years (statutory retention obligation under the Swiss Code of Obligations).
• Account data: until your customer account is deleted.
• Technical log data: usually a few days to a few months.

Data security

Transmission is encrypted (HTTPS/TLS). We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

Your rights

You have the right to access, rectification, erasure and restriction of processing, as well as the right to object and to data portability. To exercise these, contact info@demo.test.

You also have the right to lodge a complaint with the competent supervisory authority – in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

Changes to this privacy statement

We may update this privacy statement at any time. The version published on this page is the one that applies.

Last updated: June 2026

Note: this statement is a general template and does not replace individual legal advice.

← Back to menu