1) Who processes your data?

Data controller : [Full company name]
Address : [Street + Postcode + City]
E-mail : info@white-dinner.ch
Phone : [Phone number]
(Optional) VAT : [CHE-xxx.xxx.xxx].

We operate the site white-dinner.ch and process personal data to organize the event White Dinner Freiburg.

2) Applicable legal framework

We apply the LPD (Switzerland, revision 2023) and, where relevant (e.g. visitors located in the EU), the RGPD.
Target audience: mainly Switzerland, open to international.

3) What data do we collect?

3.1 Booking (WooCommerce)

• Identity & contact: first name, last name, e-mail, telephone, postal address.

• Order details: selected date, table size, free comments.

• Payment: transaction tokens/identifiers (managed by our payment providers).

• Legal basis: performance of contract (art. 31 LPD / art. 6(1)(b) RGPD), legal obligations (accounting, VAT) and legitimate interest (security, prevention of abuse).

3.2 Contact form (Elementor Forms)

• Content: name, e-mail, message.

• Legal basis: legitimate interest to respond (art. 31 LPD / art. 6(1)(f) RGPD) or pre-contractual measures.

3.3 Navigation & cookies

• Techniques (strictly necessary): session, basket, language.

• Audience measurement: Google Analytics 4.

• Marketing: Google Ads (if you agree).

• Legal basis: consent for non-essential cookies/trackers; legitimate interest for strictly necessary cookies.

Customer accounts : no - we use payment guest (no persistent profile).

4) Purposes of processing

• Manage reservations and payments; issue PDF invoice; send confirmation emails.

• Ensure event security and logistics (placement, reception).

• Respond to your requests (form).

• Analyze the audience (GA4) and measure our campaigns (Google Ads), only with your consent.

• Comply with our legal obligations (accounting, VAT).

5) Recipients & subcontractors

• Hosting : Infomaniak (Switzerland).

• Card payment : Stripe (EU/US depending on infrastructure).

• TWINT payment: via the extension Mamedev (TWINT); payment is operated by TWINT and/or its technical providers.

• PDF Invoices : plugin WooCommerce PDF Invoices & Packing Slips (WP Overnight).

• Transactional e-mails : native WordPress (Infomaniak server).

• Event partners (if required): catering, security, photography/video (access limited to useful data).

We frame this access with contracts and instructions that comply with the LPD/RGPD.

6) Transfers outside Switzerland/EU

Some providers (e.g. Stripe, Google) may process data outside Switzerland/EEA, in particular in the United States.
In this case, we rely on:

• the Standard Contractual Clauses (SCC/EU) and complementary measures,

• and/or the adjustment decided by the competent authorities (if applicable).

7) Shelf life

• Accounting & invoices : 10 years (legal obligation).

• Reservation data: 36 months, then anonymization/deletion.

• Contact form : 12 months.

• Cookies/trackers: according to their purpose (see §9).

8) Safety

We apply technical and organizational measures: TLS/HTTPS, backups, access control, regular updates, data minimization. As no system is invulnerable, we reduce risks to a reasonable minimum.

9) Cookies & similar technologies

We use a consent banner allowing choose your preferences (audience measurement, marketing).

• Requirements: site/basket operation (impossible to disable without impacting usage).

• Statistics : Google Analytics 4 (enabled only with your consent).

• Marketing : Google Ads (activated only with your consent).

You can withdraw/modify your consent at any time via the banner (link “Cookie settings”) or from your browser.

10) Photos & videos during the event

We can shoot photo/video for event and promotional purposes (website, networks, press). Legal basis: legitimate interest.
You may object before/during/after the event by writing to info@white-dinner.ch ; we will do our best to respect your choice (no-shot zones, blurring, removal).

11) Your rights

According to the LPD/RGPD, you have rights: access, rectification, deletion, opposition (including to marketing), limitation, portability (RGPD), and directives in the event of death (if applicable).
To exercise your rights: info@white-dinner.ch.
We may verify your identity before responding. Deadlines: as soon as possible, normally 30 days.

12) Minors

The site does not target under 16s. Purchases are made by adults (or minors accompanied/parental authorization).

13) Legal basis (summary)

• Contract: booking, payment, confirmation, customer service.

• Legal obligations: invoicing, VAT, accounting obligations.

• Legitimate interest: event security, abuse prevention, transactional communication, photos/videos (with right of opposition).

• Consent: cookies GA4 and Google Ads (non-essential).

14) Updates

We may amend this Policy at any time. The applicable version is the displayed here; the date at the top of the page indicates the last update.

15) Languages

The Policy may be available in FR/DE/EN. In case of discrepancy, the French version shall prevail.