Privacy policy

This privacy policy applies to the website of Papaburrito (www.papaburrito.ch). It does not apply to other Internet offers to which we merely refer by means of a link.
We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website

Personal data in this sense is all data with which you can be personally identified. We always treat your personal data confidentially and in accordance with the statutory data protection regulations. In particular, we are proud to comply with the provisions of the Swiss Data Protection Act (DSG) as well as the European Union's General Data Protection Regulation (GDPR) and this privacy policy.

Who is responsible for data collection on this website?

The data processing on this website is carried out by

Swiss Bar Group GmbH
Kornhausplatz 14
3011 Berne

Legal form Limited liability company
Registered office Bern

UID: CHE-110.125.164
CH-ID: CH-035-4031753-9
EHRA-ID: 708939

W: www.papaburrito.ch
T: 031 311 98 82

Our principles:

Papa Burrito respects your right to privacy and is committed to the following principles:

  • We protect your privacy and endeavour to provide you with a service that is tailored to your needs.

  • Personal data is collected for specific purposes on the basis of your consent or a legitimate interest when you contact us.

  • You have the right to information and access to your personal data at any time and can request its correction or deletion.

  • We do not sell your personal data to third parties. However, if necessary and if you have expressly informed us or given your consent, we may pass on your data to group companies, brand licencees, partners and other service providers. In this case, their own privacy policies may also apply.

  • We take all reasonable measures to ensure the security and protection of your data against misuse.

 

What rights do you have in relation to your data?

With regard to the data processing described in more detail below, users and data subjects have the right to

  • to obtain confirmation as to whether or not data concerning them is being processed,

  • to information about the processed data, to further information about the data processing and to copies of the data;

  • the right to rectification or completion of incorrect or incomplete data;

  • the right to immediate deletion of the data concerning them;

  • to receive the data concerning them and provided by them and to transmit this data to other providers/responsible parties;

  • to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in breach of data protection regulations.

In addition, the provider is obliged to inform all recipients to whom it has disclosed data of any rectification or erasure of data or restriction of processing. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right to object to the future processing of data concerning them, insofar as this is processed by the provider. In particular, an objection to data processing for the purpose of direct advertising is permissible.

The above rights may be limited in certain circumstances, for example if fulfilling your request would reveal personal information about another person, if you ask us to delete information that we are legally obliged to keep, or if we have compelling legitimate interests in retaining the data. We will inform you if this is the case and will then only use your data for these purposes. You may no longer be able to use our services if you want us to stop processing your personal data.

Please contact us if you have any concerns about the way in which we collect or use your personal data.

The legal bases for processing

Below are the legal bases for processing, at least one of which should apply when we process personal data:

  • Consent: The person concerned has clearly consented to the processing of personal data for a specific purpose.

  • Contract: The processing is necessary for a contract or because you have asked us to take certain steps before entering into a contract.

  • Legal obligation: Processing is necessary for us to comply with legal requirements (this does not apply to contractual obligations).

  • Vital interests: Processing is necessary to protect the life of a person.

  • Public task: Processing is necessary for us to fulfil a task in the public interest or for an official function and the task or function has a clear legal basis.

  • Legitimate interests: Processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, unless there is a compelling reason to protect your personal data which overrides those legitimate interests.

Processing of special categories of data

No special categories of data are processed.

Automated decision-making and profiling

We do not use automated decision-making or profiling.

Data from children

Our website is not intended for children and we do not knowingly collect information about children. If you become aware that your child has provided us with personal data without parental consent, please contact us so that we can take the necessary steps to remove this data from our server.

What are the categories of data subjects?

Customers, interested parties, visitors and users of the online offer, business partners. Visitors and users of the online offering. In the following, we refer to the data subjects collectively as "users".

Collection, use and storage of personal data

When you use the online offer, Papaburrito collects various data from you, in some cases also so-called personal data. This is information that relates to an identified or identifiable natural person (hereinafter "data subject").

Visiting the Papa Burrito website in general

When you visit the Papa Burrito website, you transmit data to our web server via your Internet browser (for technical reasons). During communication between your internet browser and our web server, the following data is stored during an ongoing connection:

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status (file transferred, file not found, etc.)

  • Web browser and operating system used

  • Complete IP address of the requesting computer

  • Amount of data transferred

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. It is not possible for us to draw conclusions about individual persons based on this data; the legal basis for the storage is our legitimate interest.

Cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information about you individually, such as your browser or location data or your IP address.

This processing serves to make our website more user-friendly, effective and secure. The legal basis for this processing is a contract, insofar as this cookie data is processed for the purpose of initiating or executing a contract. If the processing does not serve to initiate or fulfil a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is our legitimate interest.

If you would like to find out more about cookies in general and how they work, please visit https://ico.org.uk/your-data-matters/online/cookies/ or www.allaboutcookies.org.

Further personal data is only collected if you provide this information voluntarily, for example as part of an enquiry. Papaburrito uses the personal data provided by you to answer your enquiries, to process your order and for the technical administration of the websites, depending on the subject area. In detail, the use in the respective areas is as follows:

Contact enquiries and contact options

If you contact us via the contact form, social media or telephone, the data you provide will be used to process your enquiry. The provision of the data is necessary for processing and answering your enquiry - without the provision of this data, we cannot answer your enquiry or can only answer it to a limited extent. The legal basis is the fulfilment of a contract. If the processing does not serve to initiate or fulfil a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is our legitimate interest. Your data will be deleted as soon as your enquiry has been conclusively answered and there are no statutory retention obligations, e.g. for subsequent contract processing.

Order process

We process the personal data that you provide to us when you place your order. This personal data is necessary to fulfil your order, confirm your order and assess your order, payment and possible refund. The legal basis for this processing of personal data is that it is necessary for the performance of a contract. We process the following personal data in the ordering process:

  • Name

  • Address data

  • Contact details

  • Order data

  • Payment data

  • Comments (if applicable)

Valuations

In addition to the processing activities mentioned above, we process personal data provided by you when you submit a restaurant review. The legal basis for this processing of personal data is that you have given your consent for this processing (by posting a restaurant review). You can withdraw your consent by contacting us. We process the following personal data when you post a restaurant review:

  • Name (if transmitted)

  • Evaluation, including comments (if applicable)

Customer service

If you contact our customer service, we will use the personal data you provide to answer your question or process your complaint. The legal basis for this processing of personal data is that it is necessary for the performance of a contract. We process the following personal data for customer service purposes:

  • Name

  • Address data (if applicable)

  • Contact details

  • Order data

  • Payment details (if applicable)

  • Comments (if applicable)

Customer satisfaction surveys 

In order to ensure that our services are customised to your preferences, personal data that you submit to our customer service department may be used for activities such as customer satisfaction surveys. The legal basis for this processing activity is that it is necessary to pursue a legitimate interest.

Marketing communications

We also process your personal data in order to send you (personalised) marketing communications and notifications. Such communications include the latest news, discount promotions and updates on new restaurants, regardless of the format we use to distribute these types of communications. The legal basis for this processing of personal data is that you have given your consent when placing an order. If you wish to change your preferences with regard to receiving such communications and notifications, you can unsubscribe using the link in the marketing communication in question.

We process the following personal data for marketing purposes:

  • Name

  • Contact details

  • Postcode

Contractual relationship

In order to establish or fulfil the contractual relationship with our customers, it is regularly necessary to process the personal master data, contract data and payment data provided to us. In addition, we process customer and prospective customer data for evaluation and marketing purposes. This processing takes place on the legal basis of our legitimate interest and serves our interest in further developing our offer and informing you specifically about our offers. Further data processing may take place if you have given your consent or if this serves to fulfil a legal obligation.

Legal defence and enforcement of our rights

The legal basis for the processing of your personal data in the context of legal defence and the enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defence and enforcement is the defence against unjustified claims and the judicial assertion and enforcement of claims and rights.

Your personal data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The processing of your personal data in the context of legal defence and enforcement is absolutely necessary for the legal defence and enforcement of our rights. There is therefore no possibility for you to lodge an objection.

Social media (Facebook, Twitter, Instagram)

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

Unless otherwise stated, we process users' data when they communicate with us within social networks and platforms, e.g. write posts on our online presences or send us messages.

The data you enter on our social media pages, such as comments, videos, images, likes, public messages, etc., will be published by the social media platform and will not be used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. Data processing is carried out in the interest of our public relations and communication.

If you wish to object to certain data processing over which we have influence, please contact us. We will then review your objection. If you send us an enquiry via the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the desired response. You can send us confidential enquiries at any time to the address given in our legal notice.

As already mentioned, we take care to design our social media pages to be as data protection-compliant as possible if the provider of the social media platform gives us the opportunity to do so. We can only influence the statistics provided to us by the provider of the social media platform to a limited extent and cannot switch them off. However, we ensure that no additional optional statistics are made available to us.

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we unfortunately have little influence on the web tracking methods of the social media platform. For example, we cannot switch this off.

Please note: It cannot be ruled out that the provider of the social media platform may use your profile and behavioural data, e.g. to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.

Who receives my data?

Within the company, those departments that require your data to fulfil our contractual and legal obligations will have access to it. Processors employed by us may also receive data for the above-mentioned purposes. These are companies in the areas of IT services, telecommunications, debt collection, advice and consulting as well as sales and marketing. Where we use processors to provide our services, we take appropriate legal precautions and corresponding technical and organisational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.

We only pass on user data to third parties if this is necessary, for example, due to a contractual purpose or due to legitimate interests in the economic and effective operation of our company or if you have consented to the transfer of data. In the case of purely informative use of the website, we do not pass on any data to third parties.

How long will my data be stored?

For security reasons (e.g. to investigate misuse or fraud), log file information is stored for a maximum of thirty days and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been conclusively clarified.

Where necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract via the contact form or by e-mail.

In addition, we are subject to various retention and documentation obligations arising from UK commercial and tax law, among other things. Finally, the storage period is based on the statutory limitation periods.

How do we protect your personal data?

We protect your data using state-of-the-art technical and physical security measures and operate an established system of policies, confidentiality agreements, digital security measures and procedures to ensure the highest level of administrative protection. The data we collect from you may be stored on our servers using appropriate technical and organisational security measures. In any case, we generally follow high data protection standards and advanced security measures to protect the personal data transmitted to us, both during transmission and after receipt.

Economic analyses and market research

In order to run our business economically and to recognise market trends, customer and user wishes, we evaluate the data available to us on business transactions, contracts, enquiries, etc.. In doing so, we process inventory data, communication data, contract data, payment data, usage data and metadata on the basis of our legitimate interest, whereby the data subjects include customers, interested parties, business partners, visitors and users of the website. The analyses are carried out for the purposes of business analysis, marketing and market research.

In doing so, we may take into account the profiles of registered users with details of their purchase transactions, for example. The evaluations are used to increase user-friendliness, optimise our offer and business efficiency and are not passed on externally, unless they are anonymous evaluations with summarised values.

If personal analyses or profiles are involved, these will be deleted or anonymised upon termination by the user, otherwise after two years from the conclusion of the contract. Otherwise, macroeconomic analyses and general trend determinations are anonymised as far as possible.

Will the data be transferred to a third country or an international organisation?

The data provided will be processed within the United Kingdom. Please note that we have agreed standard data protection clauses with the recipients of your data for countries without an adequacy decision. This is done in order to protect your data and achieve an adequate level of protection for your personal data.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "https://" to "httpss://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

External links

Our website contains links to the online offers of other providers. We would like to point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their operators.

 

Changes and updates to the privacy policy

We ask you to inform yourself regularly about the content of our privacy policy. We will amend the privacy policy as soon as changes to our data processing activities make this necessary. We will inform you as soon as the changes require an act of co-operation on your part (e.g. consent) or another individual notification.

Concerns and contact

If you have any concerns about a possible impairment of your privacy or misuse of your personal data by us, or if you have any other questions or comments, you can contact us.