Privacy policy

Controller

D.G.E. Concept Sàrl, Rue du Village 8b, 1273 Arzier-Le Muids, Switzerland, admin@leplatdujour.ch.

This policy describes the personal data processed by the Le Plat du Jour service (site and apps), in accordance with the Swiss Federal Act on Data Protection (FADP) and its ordinance (DPO). We process as little data as possible, only to run the service.

Data processed

• Account: first name, last name, e-mail address, password (stored with irreversible encryption), language, country, chosen place, optional photo, date of creation and of last sign-in.
• Gastronaut space: favourites and their alerts, chosen e-mail frequency, place for news of new restaurants, personal memos about restaurants, food preferences.
• Allergens to avoid: if saved, they may reveal information about your health and are therefore sensitive personal data. They are only stored if you enter them yourself, are used only to filter your searches, are never passed to third parties and can be deleted at any time in “My account”.
• Restaurant owners: venue name, short page address, addresses, tour locations, phone, contact address, website, social networks, published content, temporary closures, progress of the “Getting started” guide, billing address.
• Team: for each team member, name, e-mail address, accessible venues, date of invitation, acceptance and last visit. The invitation is sent to the address given by the owner.
• Use: “Likes”, connected devices (browser, IP address, date of last activity), so you can see and sign out of your sessions.
• Payments: plan chosen, amount, date, payment method, transaction reference. Card details are never stored by the service.
• Forms: booking requests, contact messages, suggested restaurants and reports, with the information you enter.
• Team visits: for a visit request, the venue, the person’s name, e-mail address and phone number, the preferred service and days, their message and the follow-up of the request; the photos taken during the visit if an article is published.
• Mascot: your questions are processed on our servers to answer them, without being stored; the conversation is only kept in the open tab of your browser. No external artificial intelligence is used.
• Location: when you use “Near me”, your location is used only for the current search and is not stored on our servers. If you accept convenience cookies, the last place you searched is remembered on your device.
• Restaurant statistics: daily numbers of views and clicks per venue, without any personal data about visitors. The site uses no audience measurement tool.

Purposes and grounds

• Providing the service and performing contracts: accounts, teams, subscriptions, invoices.
• Sending account-related e-mails: codes, invitations, invoices, reminders, favourite alerts and summaries (which you can turn off).
• Forwarding your requests to restaurants, handling suggestions and reports.
• Preventing abuse and ensuring security, based on our legitimate interest.
• Meeting our legal obligations, in particular accounting.
• Remembering your convenience choices and showing personalised Google ads, only with your consent.

No automated individual decision is made about you, and Le Plat du Jour builds no profile for advertising purposes. We do not sell any data.

Recipients and processors

• Hosting: Kreativmedia, in Switzerland.
• Payments: myPOS (cards and TWINT) and PayPal, for payments made with these methods.
• Advertising: Google (AdSense). Consent to personalised ads is requested by Google’s certified message; you can change it at any time with “Manage cookies”.
• Bot protection: Cloudflare (Turnstile), on forms.
• Maps and addresses: when a map is shown, map tiles are loaded from OpenStreetMap, which receives the visitor’s IP address. A venue’s address is located by swisstopo and, failing that, by OpenStreetMap, when the restaurant owner saves it.
• Restaurants: your booking requests and messages are forwarded to the restaurant concerned. Reports are never passed on with your identity.
• Owner of a restaurant account: sees the name, e-mail address and date of last visit of their team members.
• Internal alerts: Discord receives alerts for the administrator (new account, payment, report), without any e-mail address or personal name.
• Authorities: only where the law requires it.

Some providers (Google, PayPal, Cloudflare, Discord, OpenStreetMap) may process data outside Switzerland, in particular in the European Union and the United States. These transfers rely on the safeguards provided by law: countries recognised by the Federal Council as adequate, the Swiss-U.S. Data Privacy Framework or standard contractual clauses.

Retention

When an account is deleted, its data is erased, except invoices kept for the legal period. Content published by a team member stays in the restaurant owner’s space.

Your rights

You can view and change your data in “My account”, delete your account, ask for a copy of your data in a common format, ask for it to be corrected or erased, and object to certain processing by writing to admin@leplatdujour.ch. We reply within 30 days.

You can withdraw your consent to personalised ads and decline convenience cookies at any time with “Manage cookies”. A team member can ask the owner to remove their access, or delete their own account.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

Security

Data is transmitted encrypted (HTTPS). Passwords and technical keys are stored encrypted. Invitation links and confirmation codes are single-use and time-limited. Access to the administration is protected by a secret address and a code sent by e-mail. In the event of a security breach with a high risk, we inform the FDPIC and the people concerned as the law requires.

Changes

This policy may be updated; the current version is published on this page.