Privacy policy
Last updated: September 2026
1. Data Controller
The entity responsible for processing personal data in connection with this website is:
Weiss+Appetito Holding AG
Giacomettistrasse 1
3006 Berne
Switzerland
Phone: +41 31 750 75 75
Email: info@weissappetito.com
For any questions regarding data protection or any requests concerning your personal data, you may contact us using the contact details above.
If you contact another company of the Weiss+Appetito Group directly via our website or apply for a position with one of these companies, the relevant Group company may itself be responsible for the further processing of your personal data in connection with your enquiry or application.
2. Applicable Data Protection Law
We process personal data primarily in accordance with the Swiss Federal Act on Data Protection (FADP) and the corresponding Data Protection Ordinance (DPO).
Where the European Union General Data Protection Regulation (GDPR) applies in a particular case, we also comply with its provisions.
“Personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation involving personal data, including in particular its collection, recording, storage, use, modification, disclosure, archiving or deletion.
Under Swiss data protection law, the processing of personal data is generally permitted provided that it is carried out lawfully, in good faith, proportionately and for a specified purpose, and does not result in an unlawful infringement of personality rights.
Where the GDPR applies, depending on the purpose of the processing, we rely in particular on your consent, the performance of a contract or pre-contractual measures, compliance with a legal obligation, or our legitimate interests, especially our interest in the secure and efficient operation of our website and services.
3. Accessing Our Website and Hosting
Our website is hosted by Infomaniak Network SA in Switzerland. Data used for hosting purposes is generally stored in Switzerland.
When you visit our website, certain technical data is automatically collected and stored in server log files. This may include, in particular:
IP address;
date and time of access;
page or file accessed;
referrer URL;
browser type and browser version;
Operating system used;
device type; and
other technical information relating to the connection.
We process this data in order to provide our website, ensure its stability and security, identify technical errors, and prevent misuse or unauthorised access.
Log data is retained only for as long as necessary for these purposes, unless longer retention is required due to a security incident or a legal obligation.
4. Cookies and Similar Technologies
Our website uses cookies and similar technologies. Cookies are small files or information units that may be stored on your device or read from it.
We distinguish in particular between technically necessary cookies and optional cookies or technologies used for analytics and marketing purposes.
Technically necessary cookies are used, among other things, to ensure the basic functionality of the website and to store your cookie preferences.
To manage your cookie preferences, we use a consent management solution based on CookieYes / GDPR Cookie Consent. Your selection is stored so that the website can take your decision into account during future visits.
Analytics and marketing technologies are used, where consent is required under applicable law, only in accordance with the choices you make in the cookie banner.
You can change your cookie preferences at any time via the cookie settings available on our website and withdraw any consent you have given with effect for the future.
Further information about the cookies currently in use, their categories, purposes and retention periods can also be found in the cookie settings on our website.
5. Google Tag Manager
We use Google Tag Manager, a Google service that enables us to technically manage website tags and the analytics and marketing services used on our website.
The provider for users in Switzerland and the European Economic Area is, in particular:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Certain technical information may be transmitted to Google in connection with the use of Google Tag Manager. Google Tag Manager is used in particular to integrate and manage the Google services described below.
Where required, the activation of analytics and marketing tags integrated via Google Tag Manager depends on the choices you make in the cookie banner.
6. Google Analytics 4
We use Google Analytics 4 (GA4) to analyze the use of our website.
Google Analytics enables us, in particular, to understand how visitors use our website, which pages are accessed, how visitors arrive at our website and how we can improve our website from both a technical and content perspective.
The data processed may include, in particular:
information about pages and content accessed;
time and duration of visits;
interactions with the website;
referrer or source of the visit;
approximate geographic information;
browser and device information;
technical identifiers; and
information about the use of our website.
Google states that it does not log or store individual IP addresses of Google Analytics users located in Switzerland and the European Economic Area.
Where consent is required under applicable law, Google Analytics is used in accordance with the choices you make in our cookie banner.
Where the GDPR applies, the processing is, in such cases, based on your consent pursuant to Art. 6(1)(a) GDPR.
You can withdraw your consent at any time with effect for the future via the cookie settings on our website.
7. Google Ads and Conversion Tracking
We use Google Ads and the related conversion tracking functions.
Google Ads enables us to display advertisements for our services and to measure whether, and how, users interact with our website after clicking on an advertisement.
The information processed may include, in particular:
pages accessed;
interactions and conversions;
clicked advertisements;
browser and device information;
technical identifiers; and
where applicable, pseudonymous cookie or advertising identifiers.
The information obtained in this way helps us, in particular, to measure and optimize the effectiveness of our advertising activities.
Where consent is required under applicable law, Google Ads conversion tracking is used in accordance with the choices you make in our cookie banner.
Where the GDPR applies, consent-based processing is carried out pursuant to Art. 6(1)(a) GDPR.
8. Google Remarketing
We use Google Ads remarketing functions to re-engage visitors to our website.
These functions enable us to display relevant advertisements on other websites or within the Google advertising network to users who have previously visited our website or interacted with our services.
For this purpose, pseudonymous identifiers and information about the previous use of our website may be processed and associated with a device or browser.
Remarketing and similar personalised marketing functions are used only in accordance with the required cookie and data protection settings.
Where the GDPR applies and consent is required, the processing is based on Art. 6(1)(a) GDPR.
The relevant consent can be withdrawn at any time via the cookie settings on our website.
9. Google reCAPTCHA
To protect our website, and in particular our forms, against spam, abusive submissions and automated access, we use Google reCAPTCHA.
The provider is, in particular, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further processing by Google LLC in the United States cannot be ruled out.
reCAPTCHA analyses certain characteristics of the use of our website in order to determine whether an input is made by a natural person or by automated means.
The following information may be processed in particular:
IP address;
browser and device information;
date and time;
page accessed;
referrer information;
interactions with the website; and
other technical or usage-related information necessary to detect automated access.
We use reCAPTCHA to protect our website, our IT systems and our forms against misuse.
Where the GDPR applies, we generally rely on our legitimate interest in protecting our website and systems pursuant to Art. 6(1)(f) GDPR for the processing necessary for this purpose. Where the specific technical configuration requires consent, the processing is instead based on your consent.
10. Contacting Us
If you contact us by email, telephone, contact form or another means of communication, we process the personal data you provide to us.
This may include, in particular:
first name and surname;
company;
address;
email address;
phone number;
content of your enquiry; and
other information you provide voluntarily.
We process this data in order to respond to your enquiry, communicate with you and, where applicable, establish or carry out a business relationship.
Depending on the content of your enquiry and the location or business area concerned, your enquiry may be forwarded to the relevant company within the Weiss+Appetito Group.
11. Job Applications
If you apply to a company of the Weiss+Appetito Group or submit application documents to us, we process the personal data contained therein for the purpose of conducting the recruitment process.
This may include, in particular:
personal details and contact information;
curriculum vitae;
professional background;
education and qualifications;
certificates and references;
information about the position applied for;
application documents and correspondence; and
other information you provide voluntarily.
If another company within the Weiss+Appetito Group is responsible for the position concerned, the application data may be disclosed to that company.
Application data that is no longer required will be deleted or destroyed as soon as it is no longer necessary for the recruitment process and there is no legal obligation or other permissible reason for further retention.
Retention beyond this period for possible future vacancies will only take place where permitted under data protection law and, where necessary, with your consent.
12. Recipients of Personal Data
In connection with the processing activities described in this Privacy Policy, personal data may be disclosed in particular to the following categories of recipients:
companies within the Weiss+Appetito Group;
hosting and IT service providers, in particular Infomaniak;
Google Ireland Limited and, where necessary, other companies within the Google Group;
providers of website, analytics, marketing and security services;
communication and email service providers;
external advisers and other service providers;
authorities, courts or other public bodies where disclosure is required by law or necessary to protect our rights.
Where service providers process personal data on our behalf, we take the contractual and organisational measures required under applicable data protection law to ensure appropriate protection of personal data.
13. Disclosure of Personal Data Abroad
Our website is hosted by Infomaniak in Switzerland.
In connection with the other processing activities described in this Privacy Policy, personal data may in particular be disclosed to or processed in the following countries:
Switzerland, Germany, France, Austria, Ireland and the United States of America (USA).
From the perspective of Swiss data protection law, Germany, France, Austria and Ireland are generally considered to provide an adequate level of data protection.
When Google services are used, personal data may be processed by Google Ireland Limited in Ireland as well as by Google LLC and other Group companies in the United States.
Since September 15, 2024, the Swiss-U.S. Data Privacy Framework has applied to certified US companies. Google LLC states that it is certified under this framework.
Where a recipient is located in a country for which the Swiss Federal Council does not recognise an adequate level of data protection and no recognised data protection framework applies, we ensure appropriate protection by other means where necessary. This may include, in particular, recognised standard contractual clauses and, where required, additional safeguards.
In cases provided for by law, a disclosure may also be based on an exception under Swiss data protection law.
Where the GDPR applies, we also comply with its requirements concerning international data transfers.
14. Retention of Personal Data
We generally retain personal data only for as long as necessary to fulfil the relevant processing purposes.
We may, however, retain personal data for longer where we are required to do so by legal, contractual or regulatory obligations or where this is necessary to establish, exercise or defend legal claims.
Different retention periods may apply to individual services. For cookies and similar technologies, the relevant retention periods are indicated in particular in the cookie settings on our website.
Once the applicable retention period has expired, personal data is deleted, anonymised or otherwise destroyed in accordance with data protection requirements.
15. Data Security
We take appropriate technical and organisational security measures to protect personal data against loss, misuse, manipulation, unauthorised access and unlawful disclosure.
Our website uses SSL/TLS encryption for the transmission of data.
Depending on the relevant risks, our security measures include, in particular, technical access restrictions, authorization systems, backups, and organizational measures.
Despite appropriate safeguards, absolute security cannot be guaranteed when communicating electronically or transmitting data via the Internet.
16. Your Rights Under Swiss Data Protection Law
Under applicable Swiss data protection law, you have, in particular, the following rights:
You may request information as to whether we process personal data about you and, if so, which personal data.
You may request the correction of inaccurate personal data.
You may request the deletion or destruction of personal data where the legal requirements are met.
You may request that unlawful processing be stopped or restricted.
You may, where the legal requirements are met, request the disclosure or transfer of certain personal data in a commonly used electronic format.
You may withdraw consent you have given at any time with effect for the future.
You may object to certain processing activities where applicable data protection law grants you such a right.
The right of access is governed in particular by Art. 25 FADP.
To exercise your rights, please contact:
Weiss+Appetito Holding AG
Giacomettistrasse 1
3006 Berne
Switzerland
Email: info@weissappetito.com
We reserve the right to request suitable proof of identity where necessary in order to prevent unauthorised disclosure of personal data.
Any statutory restrictions and exceptions relating to the rights mentioned above remain reserved.
17. Additional Rights Where the GDPR Applies
Where the GDPR applies to a particular processing activity, you may also have the rights provided for under the GDPR.
These include, in particular, the right of access, rectification, erasure, restriction of processing, data portability and, where the relevant legal requirements are met, the right to object.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
You also have the right, subject to the requirements of the GDPR, to lodge a complaint with a competent data protection supervisory authority.
18. Federal Data Protection and Information Commissioner
The competent federal supervisory authority for data protection in Switzerland is the:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
Switzerland
If you believe that the processing of your personal data violates Swiss data protection law, you may contact the FDPIC in accordance with the applicable legal requirements.
However, we recommend that you contact us directly first with any questions or concerns regarding your personal data so that we can review your request.
19. Links and External Websites
Our website may contain links to third-party websites and online services, for example social networks or other external platforms.
When you click on such a link, you leave our website. Any subsequent processing of your personal data by the relevant third-party provider is subject to that provider’s own privacy policy.
We have no control over the data processing activities of independent operators of external websites.
20. Changes to This Privacy Policy
We may amend this Privacy Policy at any time, in particular if our data processing activities, the services we use or the legal requirements change.
The version currently published on our website shall apply.
Last updated: September 2026