Privacy Policy

1. Responsible party

The responsible party for data processing on this website is:

2. Applicable law

The processing of personal data is subject to the Swiss Federal Act on Data Protection (FADP, DPO).
For visitors from the EU/EEA, the provisions of the General Data Protection Regulation (GDPR) also apply.

3. Definitions

• Personal data: All information relating to an identified or identifiable person (e.g. name, email, IP address).
• Processing: Any handling of personal data (collection, storage, transmission, deletion, etc.).

4. Categories of processed data

Depending on the use of our website and services, we process in particular:

• Contact and communication data Name, phone number, address, email
• Content from contact and order forms Event or catering requests
• Order and payment data Invoice and delivery information, payment status, Stripe token (no complete credit card data)
• Technical data IP address, browser information, operating system, access times, referrer, log files
• Tracking and analysis data Page views, click paths, conversion events (e.g. form submissions), location (approximate), device data

5. Purposes of data processing

We process personal data for the following purposes:

• Processing of inquiries, orders and catering requests
• Communication and customer service
• Payment processing (Stripe)
• Lead generation, CRM and marketing communication (FluentCRM)
• Form processing (Fluent Forms)
• Technical provision of the website and security
• Web analysis, reach measurement and conversion tracking
• Fulfillment of legal storage and documentation obligations
• Enforcement of legal claims

6. Forms & contact (Fluent Forms / FluentCRM)

Form entries are stored on our server and automatically transferred to FluentCRM. The data is used to process the request, create a lead and for necessary follow-up questions. Deletion is possible at any time (see rights below).

7. Payment processing (Stripe)

We use Stripe for online payments. Stripe processes, among other things:

• Tokenized payment data
• Billing data
• Names, address, device data
• IP address and browser information (security purposes)

Data may be transferred to the EU and the USA. Stripe relies on standard contractual clauses and meets the requirements of the DSG and GDPR.

8. Web analysis & tracking

We use Google Tag Manager to manage tracking scripts and Google Analytics for usage statistics and conversion tracking.

Processed data:

• IP address (shortened/anonymized, if enabled)
• Interactions on the website
• Page views, scroll depth, clicks
• Form conversions
• Device and browser data

Data may be transferred to the USA. Google uses standard contractual clauses.

9. Cookies

We use the following types of cookies:

• Necessary cookies (functional website, security)
• Statistics cookies (Google Analytics)
• Marketing cookies (e.g. Google Ads Remarketing, if enabled)

Consents and settings can be adjusted or revoked at any time in the cookie banner (Complianz).

10. Other services & plugins

• Rank Math SEO: Processes technical data for search engine optimization.
• Hosting & Security: The hosting provider processes log files (IP address, access, error messages) for the secure provision of the website.
• Social media links: (LinkedIn, Pinterest, Instagram, Facebook). These are simple links without tracking, unless you actively click on them. If widgets are actively embedded, processing only takes place after consent in the cookie banner.
• Chaty: Transmits technical data and communication content when you interact via the chat widget.
• EWWW Image Optimizer: Processes technical image data, but no personal user data.

11. Disclosure to third parties

We only pass on data if this is necessary:

• Payment service provider (Stripe)
• Hosting and IT providers
• CRM and marketing software (FluentCRM)
• Analysis and tracking services (Google)
• Accounting and authorities as required
• Service providers who we contractually oblige to data protection

12. Transfer to countries without an adequate level of data protection

Data transfers to the USA or other third countries are based on:

• Standard contractual clauses
• Consent
• Legally required exceptions

13. Storage period

We only store personal data for as long as it is necessary for the respective purpose. Typical retention periods:

• Accounting documents: 10 years
• Form and CRM data: 12–24 months
• Tracking data: according to Google settings (e.g. 14 months)
• Log files: 30–180 days

14. Rights of data subjects

You have the right to:

• Information about your data
• Correction of incorrect data
• Deletion ("right to be forgotten")
• Restriction of processing
• Objection to certain processing
• Revocation of granted consents
• Data portability (GDPR)

For inquiries, please contact: info@vakeup.ch

15. Data security

We protect data through appropriate technical and organizational measures, including:

• SSL encryption
• Access restrictions
• Regelmässige Updates
• Server and system logging

16. Changes to this privacy policy

We update this statement as technical or legal changes necessitate. The latest version is available on www.vakeup.ch.