DEENESITFR
Reserve

Privacy

Last updated: September 2026

1. Controller

The controller for personal data processed on this website is HKH InnOvation AG, Via Vuorcha 28, 7524 Zuoz, Switzerland, operator of Restaurant Alegría. Please send privacy requests to info@restaurant-alegria.ch or call +41 81 515 17 27.

2. Principles

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). We only process data required for the respective purpose.

3. Visiting the website and hosting

The website is hosted by Netlify, Inc. (USA) and delivered through its global server network. When you visit, technically necessary data is processed: IP address, date and time, page requested, browser and operating system. This data serves the secure and stable operation of the website (legitimate interest; Art. 6(1)(f) GDPR) and is not combined with other data.

To apply the appropriate consent model (see section 6), only the country from which you access the website is derived from your IP address. The result is not stored.

Fonts are loaded from our own server; there is no connection to Google Fonts. Content from Instagram, Google Maps or other services is not embedded, only linked.

4. Reservations

Online reservations are made through the embedded reservation system of Lunchgate AG (foratable), Switzerland. The details you enter there (for example name, phone number, email address, date, time, number of guests and comments) are processed by Lunchgate on our behalf to confirm and manage your reservation (performance of a contract; Art. 6(1)(b) GDPR). To prevent abuse, the reservation system uses Google reCAPTCHA. Lunchgate's privacy policy applies in addition.

5. Contact by email or phone

If you contact us by email or phone, we process your details to respond to your request.

6. Cookies and similar technologies

We distinguish three categories:

  • Necessary – storing your cookie choice in your browser's local storage. Always active.
  • Statistics – Google Analytics 4 (section 7).
  • Marketing – Google Ads conversion tracking (section 8), Meta Pixel and Meta Conversions API (section 9).

Consent model. Visitors from Switzerland are informed about statistics and marketing on their first visit; these are active unless you object. Visitors from all other countries, in particular the EU, the EEA and Liechtenstein, are only tracked after giving explicit consent (Art. 6(1)(a) GDPR). If the country cannot be determined, the consent model applies. You can change or withdraw your choice at any time via “Cookie settings” at the bottom of every page.

7. Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA. Google Analytics records how the website is used, for example pages viewed, time spent, approximate location, device type and interactions such as opening a menu or the steps in the reservation system. Google Analytics 4 does not store full IP addresses. Data is deleted after 14 months. Cookies: _ga, _ga_* (duration up to 2 years).

8. Google Ads conversion tracking

Provider: Google Ireland Limited / Google LLC. If you reach our website through a Google ad and complete a reservation, this is reported to Google so that we can measure the success of our ads. The type of event, a flat value and a random event ID are transmitted, but no personal details. Cookies: _gcl_au, _gcl_aw (duration up to 90 days).

9. Meta Pixel and Conversions API

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland; parent company Meta Platforms, Inc., USA. The Meta Pixel lets us measure whether ads on Facebook and Instagram lead to visits and reservations, and lets us reach people who have visited our website again later. When a reservation is completed, we also send the event directly from our server to Meta (Conversions API) so that it is not lost through technical disruption; duplicates are excluded by a shared event ID.

Transmitted are: type of event, page address, time, IP address, browser identifier, the Meta identifiers _fbp and _fbc, and the date, time and number of guests of the reservation. We do not transmit name, email address or phone number to Meta. This transmission only takes place when marketing is active. We are jointly responsible with Meta for collection and transmission; Meta's Controller Addendum applies (Art. 26 GDPR). Cookies: _fbp, _fbc (duration 90 days).

10. Disclosure abroad

Some of the providers named also process data in the USA. Such disclosure is based on the Swiss-U.S. or EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses in the form recognised by the Swiss Federal Data Protection and Information Commissioner.

11. Retention

We keep personal data only as long as the purpose requires or statutory retention obligations demand.

12. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing. You can withdraw consent at any time with effect for the future. Please contact info@restaurant-alegria.ch. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with the supervisory authority in your country of residence.

13. Changes

We may amend this privacy policy. The version published on this website applies.