Book now
Book now

Privacy Policy

Last updated: October 2026

This privacy policy explains which personal data we process in connection with our website shakensmile.ch, our bookings, courses and events, for what purposes we do so, and what rights you have. It is governed by the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in individual cases, section 15 applies in addition.

1. Controller

Shake ’N Smile GmbH
Hardturmstrasse 18
8005 Zurich
Switzerland
Email: info@shakensmile.ch
Phone: +41 79 915 60 32

For questions about data protection and to exercise your rights, please contact us using the details above.

2. Data we process

We process in particular the following categories of personal data:

  • Contact and master data, e.g. first name, last name, email address, phone number, billing and company address.
  • Enquiry and booking details, e.g. type of event, date, location, number of guests, cocktail preferences, booked courses and vouchers.
  • Payment data, e.g. payment method, payment status and transaction number. We do not receive full card details; only the respective payment provider does.
  • Customer account data, if you create an account in our shop (username, encrypted password, order history).
  • Communication data, e.g. the content of emails, form messages, chat and WhatsApp messages.
  • Technical data, e.g. IP address, date and time of access, browser, operating system, pages visited and referrer URL.
  • Usage and marketing data, e.g. interactions with our website and advertisements, where analytics and marketing services are used (see section 8).

We generally receive this data from you, for example when you contact us, book a course or visit our website. In some cases we also receive data from third parties, e.g. from payment providers (payment confirmation) or from your employer when they book a corporate event for you.

3. Purposes of processing

  • Answering enquiries and preparing quotes (e.g. for the mobile bar or corporate events)
  • Handling bookings, courses, workshops, events, shop orders and vouchers, including invoicing and payment
  • Communicating with you before, during and after a booking
  • Sending our “Bar Post” newsletter if you have subscribed to it
  • Operating, securing and improving our website
  • Audience measurement and marketing, e.g. measuring the success of advertisements
  • Complying with legal obligations (e.g. retention obligations) and protecting our rights

4. Website, hosting and server log files

Our website is based on WordPress and hosted by WP Engine. When you access the website, technical data (in particular IP address, time, page visited, browser and operating system) is automatically stored in server log files. We need this data to provide the website, ensure its stability and security, and detect misuse. The hosting provider may use servers outside Switzerland (see section 11).

5. Cookies and similar technologies

We use cookies and similar technologies. Strictly necessary cookies are required to operate the website, e.g. for the shopping cart, customer account, language setting and secure payment processing. Other cookies are used for statistics and marketing purposes (see section 8).

You can delete or block cookies at any time in your browser settings. If you block strictly necessary cookies, certain functions (e.g. shopping cart and booking) may no longer work.

6. Contact and quote forms, email, phone and WhatsApp

If you contact us via a form on the website (e.g. the mobile bar quote request or the contact form), by email, phone or chat, we process the information you provide in order to answer your enquiry and, where applicable, to prepare a quote or handle a booking. Form submissions are sent to us by email and stored in the website database.

For the chat button on our website we use a widget provided by Elfsight, through which you can contact us via WhatsApp. When the widget loads, technical data (e.g. IP address) is transmitted to Elfsight. If you message us via WhatsApp, WhatsApp (Meta Platforms) also processes your data in accordance with its own privacy policy. Please do not send us sensitive personal data via WhatsApp.

7. Bookings, shop, customer account and payments

For online bookings of courses, vouchers and products we use the shop software WooCommerce. We process the data required for the order and its fulfilment. If you create a customer account, we store your details so that you can complete future bookings faster and view your orders. You can request deletion of your account at any time.

Depending on the payment method you choose, your payment data is transmitted directly to and processed by the respective payment provider:

  • Stripe (credit and debit cards, wallets) and WooPayments, which is based on Stripe. Stripe uses its own cookies and technologies for fraud prevention and loads scripts on product and checkout pages.
  • TWINT
  • PayPal

Stripe Tax may be used to calculate VAT. We also use the service Metorik to analyse our sales figures, to which order data from our shop is transmitted. The payment providers and Metorik operate partly abroad, in particular in the EU and the USA.

8. Analytics and marketing services

To improve our website and measure the success of our advertising, we use the following services or may integrate them via Google Tag Manager:

  • Google Tag Manager (Google LLC / Google Ireland Ltd.): a tool for managing website tags. Tag Manager itself does not create user profiles but may load other services that collect data.
  • Google Analytics and Google advertising services (e.g. Google Ads and Google Merchant Center via “Google for WooCommerce”): analysis of user behaviour and measurement of advertising campaigns. Pseudonymous usage data and IP addresses (shortened where possible) are processed.
  • TikTok Pixel (TikTok Technology Ltd. / TikTok Inc.): measuring and optimising advertisements on TikTok. Data about your visit and interactions (e.g. page views, purchases) may be transmitted to TikTok.

You can object to processing for analytics and marketing purposes at any time by blocking the relevant cookies in your browser or by using browser add-ons (e.g. the Google Analytics opt-out add-on). You can also adjust your ad settings directly in your Google or TikTok account.

9. Embedded third-party content

  • Google Fonts: To display fonts consistently, we load fonts from Google servers. Your IP address is transmitted to Google in the process.
  • Google Maps: On our contact page we embed a Google Maps map. When the map loads, data (in particular your IP address) is transmitted to Google.
  • Google reviews (Trustindex): To display our Google reviews we use a widget from Trustindex. When it loads, technical data is transmitted to Trustindex and profile pictures are loaded from Google servers.
  • Social media links: Our website links to our profiles on Facebook, Instagram, LinkedIn and TikTok. These are simple links. Data is only transmitted when you click a link and visit the respective platform, where the provider’s own privacy policy applies.

10. “Bar Post” newsletter

If you subscribe to our newsletter, we use your email address to send you news, events and recipes. You can unsubscribe at any time via the unsubscribe link in the newsletter or by sending a message to info@shakensmile.ch. We will then remove your email address from the mailing list.

11. Disclosure to third parties and abroad

We only disclose personal data where necessary for the purposes described, in particular to service providers acting on our behalf (e.g. hosting, website support by our agency, payment processing, email delivery, analytics). We require these service providers to process your data only on our instructions and to protect it appropriately. For corporate events, the booking companies or event partners may also receive the information needed to run the event.

Some of these recipients are located outside Switzerland, in particular in EU/EEA countries and the USA. According to the Swiss Federal Council, EU/EEA countries provide an adequate level of data protection. For recipients in the USA, we rely on the provider’s certification under the Swiss-U.S. Data Privacy Framework or on standard contractual clauses, where available. Please note that not all countries offer the same level of data protection as Switzerland.

12. Retention period

We process and store personal data for as long as necessary for the respective purposes or as long as statutory retention obligations apply. Business records such as invoices and booking documents are generally kept for ten years in accordance with legal requirements. Enquiries that do not lead to a booking are deleted once they are no longer needed. Server log files are deleted after a short period.

13. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website is transmitted in encrypted form via HTTPS. However, absolute security of data transmission over the internet cannot be guaranteed.

14. Your rights

Within the scope of applicable data protection law, you have in particular the following rights:

  • Access to information on whether and which personal data we process about you
  • Rectification of inaccurate data
  • Erasure or restriction of processing of your data
  • Receipt or transfer of your data in a common electronic format
  • Objection to processing, in particular for marketing purposes, and withdrawal of any consent given with effect for the future

To exercise your rights, please contact us at info@shakensmile.ch. We may request proof of identity. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).

15. Additional information for persons in the EU/EEA

Where the GDPR applies, we base processing on the following legal grounds: performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR), e.g. for enquiries and bookings; legal obligations (Art. 6(1)(c)), e.g. retention obligations; legitimate interests (Art. 6(1)(f)), e.g. in the secure operation and improvement of our website; and your consent (Art. 6(1)(a)), where we obtain it, e.g. for the newsletter or marketing cookies. You also have the right to lodge a complaint with a data protection supervisory authority in your country.

16. Changes to this privacy policy

We may amend this privacy policy at any time, for example if we use new services or legal requirements change. The version published on this website applies. In case of discrepancies between language versions, the German version prevails.

Scroll to Top