Privacy

This privacy policy explains which personal data we process when you visit vendtec.ch or contact us, for what purposes we do so, to whom we disclose data and what rights you have. It is governed by the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example because you visit our website from the EU or EEA and we analyse how you use it, we also comply with the GDPR.

Last updated: October 2026

1. Controller

Vendtec GmbH
Grabenstrasse 15a
6340 Baar
Switzerland

Email: info@vendtec.ch
Phone: +41 78 822 27 66

For questions about data protection and to exercise your rights, please contact us at info@vendtec.ch.

2. Scope

This privacy policy applies to the website vendtec.ch in all language versions. Additional privacy notices or agreements may apply to the processing of personal data under our contracts, for purchases at our vending machines, in the dashboard (dashboard.vendtec.ch) and for the Piccolo hotel concierge.

3. What data we process

  • Technical data when you access the website, such as IP address, date and time, page accessed, referrer URL, browser and operating system (section 4).
  • Information you provide via a form, by email, by phone or via WhatsApp, such as name, company or venue, email address, phone number, details about your venue or site and the content of your message (sections 5 and 6).
  • Usage data from Google Analytics, such as pages visited, time on site, device type, approximate location and where the visit came from (section 7).

We do not process sensitive personal data through this website. Please do not send us such data via the forms.

4. Accessing the website, server log files and hosting

When you access our website, your browser automatically sends technical data to our server. This data is stored in server log files: IP address, date and time of access, address accessed (URL) including parameters, HTTP status code, amount of data transferred, referrer URL, and browser and operating system (user agent).

We process this data to deliver the website, ensure its security and stability, analyse errors and prevent misuse. We do not combine it with other data sources. We reserve the right to review it retrospectively if there are concrete indications of unlawful use.

Server log files are deleted after 30 days at the latest, unless they are needed for longer in an individual case to investigate a security incident.

Our website runs on a virtual server in the public cloud of Infomaniak Network SA, Geneva, in data centres in Switzerland. Infomaniak processes the data as our processor.

The connection to our website is encrypted with TLS (HTTPS).

5. Contact forms

Our website has three types of forms:

  • Contact form: topic (selection), name, company or venue, email address, phone number and message. Name and email address are required.
  • Location check: type of venue, visitors per day, address of the venue, name and phone number or email address. Name and phone number or email address are required.
  • Smart Snax: type of site, people per day, name and email address. Name and email address are required.

For technical reasons, the form also transmits the language and the page from which you send it. A field that is invisible to people protects against spam. We do not use reCAPTCHA or any other third-party service for this.

Your details are sent to our server over an encrypted connection and from there by email, via the mail server of Infomaniak Network SA in Switzerland, to our mailbox info@vendtec.ch. Our mailboxes are also hosted by Infomaniak in Switzerland. The server does not store form data in a database.

The quick check on the home page pre-fills the location check form. The type of venue, address and visitor numbers are only passed to the form page within your browser, in the part of the address after the # sign, which is not sent to our server. They are then removed from the address bar straight away. We only receive this information once you submit the form.

We use your details to answer your enquiry, assess your venue, send you offers or rental terms and stay in touch with you where this relates to your enquiry. We may record enquiries and any resulting business relationships in our CRM system (Zoho, data centres in the EU).

6. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process your details and the content of the communication to handle your request.

Our website contains links to WhatsApp (wa.me). WhatsApp only opens if you click such a link. For Europe and Switzerland, WhatsApp is operated by WhatsApp Ireland Limited, Ireland. Data may be transferred to Meta Platforms, Inc. in the USA. If you write to us via WhatsApp, Meta processes your data under its own terms. If you do not want this, please contact us by email or phone.

7. Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google. For Switzerland and the EEA, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which works together with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics sets cookies (_ga and _ga_09SKTL1W4V, each stored for up to 2 years) and records how visitors use our website: pages viewed, time on site, clicks, device type, browser, screen size, language, approximate location (country, region, city) and the page from which you came to our website. According to Google, Google Analytics 4 does not store IP addresses. They are only used briefly to determine the approximate location and are then discarded. We only receive aggregated reports and cannot identify individual people from them.

We use Google Analytics to understand how our website is used, improve its content and measure the effectiveness of our communication. We have disabled Google Signals and the link to Google's advertising services. We do not use Google Analytics for personalised advertising.

Event data in Google Analytics is deleted automatically after 2 months.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, which Switzerland and the EU recognise as ensuring an adequate level of data protection. Google also relies on standard contractual clauses.

You can prevent this by blocking or deleting cookies in your browser or by installing Google's browser add-on to opt out of Google Analytics: tools.google.com/dlpage/gaoptout. More information is available in the Google Privacy Policy and under safeguarding your data in Google Analytics.

8. Fonts

All fonts (Jost, Lato and our brand font Futura) are loaded from our own server. No data is transmitted to third parties for this.

9. Cookies and local storage

Our website itself does not set cookies and does not use your browser's local storage (local storage or session storage). The vendtec.ch home page redirects you to the matching language version based on your browser's language setting, without storing that setting. Only Google Analytics sets cookies (section 7). You can delete or block cookies in your browser settings at any time. Our website also works without cookies.

10. Links to social media and other websites

Our website contains links to Instagram, LinkedIn and WhatsApp and to the websites heypiccolo.ch and ignite-official.ch. These are simple links, not embedded plugins. No data is sent to the respective provider until you click a link. The privacy policy of the respective provider applies to processing on those websites.

11. Recipients and processors

We only disclose personal data where this is necessary for the purposes described, where the law requires it or where you have consented. Recipients are:

  • Infomaniak Network SA, Geneva, Switzerland: website hosting, sending and storing emails
  • Google Ireland Limited, Ireland, and Google LLC, USA: web analytics
  • Zoho Corporation B.V., Netherlands: CRM system, data centres in the EU
  • WhatsApp Ireland Limited, Ireland, and Meta Platforms, Inc., USA: only if you contact us via WhatsApp
  • Authorities and courts, where we are legally required to disclose data

We do not sell personal data.

12. Disclosure abroad

Personal data may be transferred to countries in the EU and EEA (in particular Ireland and the Netherlands) and to the USA. In the assessment of the Swiss Federal Council, EU and EEA states provide an adequate level of data protection. For the USA, we rely on the recipient's certification under the Swiss-U.S. Data Privacy Framework or, where there is none, on the European Commission's standard contractual clauses as recognised by the Federal Data Protection and Information Commissioner (FDPIC).

13. Retention

  • Server log files: up to 30 days (section 4)
  • Event data in Google Analytics: 2 months (section 7)
  • Enquiries via forms, email or WhatsApp: as long as needed to handle your request and any resulting business relationship. If an enquiry does not lead to a contract, we delete it no later than 24 months after the last contact.
  • Business correspondence and contract documents: as long as statutory retention obligations apply, usually 10 years (Art. 958f of the Swiss Code of Obligations).

14. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, such as encrypted transmission (HTTPS), access restrictions and hosting in Switzerland. However, transmitting data over the internet is never completely secure.

15. Your rights

Under applicable data protection law, you have in particular the following rights:

  • access: to know whether and which personal data we process about you
  • rectification of inaccurate personal data
  • erasure or destruction of your personal data, unless a retention obligation applies
  • objection to certain processing, in particular web analytics
  • receipt or transfer of your personal data in a common electronic format
  • withdrawal of consent you have given, with effect for the future
  • restriction of processing, where the GDPR applies

An email to info@vendtec.ch is enough to exercise your rights. We may ask for proof of identity where necessary.

You may also contact the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. Where the GDPR applies, you may also contact the supervisory authority in your country of residence or work in the EU or EEA.

16. Legal bases under the GDPR

Where the GDPR applies, we base our processing on the following legal bases:

  • steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR): answering enquiries and preparing offers
  • legitimate interests (Art. 6(1)(f) GDPR): secure operation of the website, server log files, web analytics, communication with prospects and customers
  • legal obligation (Art. 6(1)(c) GDPR): statutory retention obligations
  • consent (Art. 6(1)(a) GDPR), where we ask for your consent

17. No automated individual decisions

We do not make decisions based solely on automated processing that have legal effects on you or significantly affect you.

18. Changes

We may update this privacy policy at any time. The current version published on this page applies.

Got a spot?Check your location