Privacy Policy

Controller

The controller responsible for your personal data is:

Information We Collect

When you use our sandwich ordering service, we collect:

• Order Information: Name, email address, pickup date and time preferences
• Menu Selections: Sandwiches and drinks you choose, quantities, and special requests
• Usage Data: How you interact with our website, pages visited, and time spent (with consent)
• Technical Information: Browser type, device information, and anonymized IP address

How We Use Your Information

We process your data only for:

• Order Processing: Preparing your sandwiches and managing pickup times
• Communication: Sending order confirmations and pickup notifications
• Capacity Management: Ensuring our kitchen can fulfill all orders
• Service Improvement: Understanding popular items and optimizing our menu (with consent)

Data Storage and Security

• Supabase: Database storage with industry-standard encryption
• Local Storage: Cart information stored only on your device
• Access: Only authorized staff can access your order data

Retention

Identifiable order data is kept for 1 year to handle payments, complaints, or other follow-up.

After 1 year, name and email are automatically anonymized. Only order statistics (e.g., items sold, quantities) remain for business analysis.

Cookies

We use essential cookies required to operate the ordering system (e.g., session, cart, authentication). These do not require consent as they are strictly necessary for the site to function.

We do not use analytics or marketing cookies at this time. If we introduce optional cookies in the future, we will ask for your consent and update this notice.

Third-Party Services

We may share data with trusted providers:

• Supabase (database and authentication, servers may be outside Switzerland)
• Vercel (website hosting, servers may be outside Switzerland)
• Payrexx / Twint (payment processing, independent controllers under their own policies)
• Google Analytics (only if you consent)

Where data is processed outside Switzerland, we ensure adequate protection through standard contractual clauses.

Your Rights

Under Swiss data protection law, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion (unless required by law to keep it)
• Withdraw consent at any time

You can exercise these rights by contacting us at info@national-wattwil.ch.

Contact Us

For privacy-related questions or to exercise your rights, contact us at: