Privacy Policy.

1. Who we are

Locala is operated by Dylak Media and Trading, a company registered in Zürich, Switzerland. We are a marketing agency working with restaurants, bars, and hospitality businesses.

We are the controller responsible for the personal data described in this policy. If you have any question about how we handle your data, write to us at the address above.

2. Scope of this policy

This policy covers the website locala.ch and any communication you have with us by email or through the forms and booking tools on this site.

We operate in Switzerland and process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and its implementing Ordinance (DPO), as revised on 1 September 2023.

This site may link to third-party websites and platforms, including social media profiles. We are not responsible for their privacy practices, and this policy does not apply to them.

3. Data we collect

Data you give us

When you fill in the contact form on this site, we collect:

• Your name
• Your email address
• Your business name
• Your venue address
• The topic you select
• Any information you choose to write in the message field

When you book a call through the scheduling tool on this site, that tool collects your name, email address, the time you select, and any answers you give to its questions.

If you write to us by email, we receive your email address, the content of your message, and anything you attach to it.

Data collected automatically

When you visit the site, our hosting provider and the services we use record technical information, which may include:

• IP address
• Browser type and version, operating system, device type
• Date and time of your visit, pages viewed, referring page

This information is used to deliver the site, keep it secure, and diagnose faults. We do not use it to identify you personally.

Client data

If you become a client, we additionally process the information needed to deliver our services and run the engagement: contact details of the people we work with, billing and payment details, contract documents, and the correspondence between us.

4. Why we process it

Under Swiss law we may process personal data where doing so is necessary and proportionate for a legitimate purpose. The purposes we rely on are:

Purpose	Basis
Responding to your enquiry and preparing a proposal	Steps taken at your request before entering into a contract
Delivering our services and managing the client relationship	Performance of our contract with you
Invoicing, bookkeeping, and tax	Compliance with Swiss legal obligations
Operating, securing, and maintaining the website	Our overriding legitimate interest in a functioning, secure site
Website statistics and marketing cookies	Your consent, given through the cookie banner and withdrawable at any time
Establishing, exercising, or defending legal claims	Our overriding legitimate interest

We do not sell your personal data, we do not trade it, and we do not use it to make automated decisions that have legal consequences for you or affect you significantly.

5. Cookies and tracking

Cookies are small text files stored on your device by your browser. We use them in two ways.

Strictly necessary cookies keep the site working — for example remembering your cookie choices and keeping the site secure. These are set without consent because the site cannot function without them.

Statistics and marketing cookies help us understand how the site is used and measure our campaigns. These are set only after you agree to them.

Your choices are managed through CookieYes, the consent tool shown when you first visit the site. You can reopen it at any time to change or withdraw your consent, and your choice is recorded for twelve months. You can also delete or block cookies in your browser settings, though blocking strictly necessary cookies may prevent parts of the site from working.

Fonts

This site loads typefaces from Google Fonts. When it does, your IP address is transmitted to Google servers in order to deliver the font files to your browser.

6. Who we share data with

We share personal data only with service providers who help us run our business, and only to the extent they need it. Each is contractually bound to protect the data and may not use it for their own purposes.

Provider	Purpose and location
Infomaniak	Website hosting and server logs. Switzerland.
Google Workspace	Business email and document storage. United States and other countries.
Formspree	Delivers contact form submissions to our inbox. United States.
Calendly	Scheduling calls. United States.
CookieYes	Cookie consent banner and consent records. United Kingdom and European Union.
Google Fonts	Delivers typefaces to your browser. United States.
n8n	Routes form submissions internally. Hosted on our own infrastructure at n8n.locala.ch.

Beyond these providers, we disclose personal data only where we are required to do so by law or by an order of a competent authority or court, or where it is necessary to establish, exercise, or defend legal claims.

7. Transfers abroad

Our website is hosted in Switzerland. However, some of the providers listed above are located abroad, including in the United States, the United Kingdom, and the European Union. This means your personal data may be transferred to, stored in, and processed in a country whose data protection laws differ from Swiss law.

The Swiss Federal Council recognises the United Kingdom and the member states of the European Union as providing an adequate level of data protection. For transfers to countries without such recognition, in particular the United States, we rely on the Standard Contractual Clauses recognised by the Federal Data Protection and Information Commissioner, together with any additional measures required in the circumstances.

You may request further information about these safeguards by writing to info@locala.ch.

8. Client account access

As a marketing agency, we are often granted access to accounts and platforms belonging to our clients — for example social media profiles, advertising accounts, business listings, or reservation systems. These accounts may contain personal data about our clients' guests and customers.

Where this happens, we act as a processor on the client's instructions and only for the purposes agreed in our service contract. We do not use data held in those accounts for our own purposes, we do not copy it into our own systems beyond what the work requires, and our access is removed when the engagement ends or at the client's request.

If you are a guest or customer of one of our clients and want to know how your data is handled, please contact that business directly, as it remains the controller of that data.

9. How long we keep data

• Enquiries that do not lead to a contract: twelve months from the last contact, after which they are deleted.
• Client records and correspondence: for the duration of the engagement and three years afterwards.
• Invoices and accounting records: ten years, as required by Article 958f of the Swiss Code of Obligations.
• Server logs: up to six months.
• Cookie consent records: twelve months.

When personal data is no longer needed for the purpose it was collected for, and no legal retention period applies, we delete or anonymise it.

10. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. These include encrypted connections (HTTPS) across the whole site, access controls and two-factor authentication on our accounts, and limiting access to the people who need it for their work.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach of data security occurs that is likely to result in a high risk to your personality or fundamental rights, we will notify the Federal Data Protection and Information Commissioner, and you, as required by the FADP.

11. Your rights

Subject to the conditions and exceptions set out in the FADP, you have the right to:

• Ask whether we process personal data about you, and obtain a copy of that data
• Have inaccurate or incomplete data corrected
• Request that your data be deleted, or that processing be restricted
• Object to your data being processed, or being disclosed to third parties
• Withdraw your consent at any time, without affecting processing carried out before the withdrawal
• Receive data you provided to us in a common electronic format, or have it transferred to another controller, where the processing is automated and based on your consent or a contract

To exercise any of these rights, write to info@locala.ch. Access requests are free of charge in ordinary cases, and we respond within thirty days. We may ask you to confirm your identity before acting on a request, so that we do not disclose your data to someone else.

If you are not satisfied with our response, you may report the matter to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or bring a civil claim before the competent Swiss courts.

12. Children

Our services are directed at businesses, not at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, write to us and we will delete it.

13. Changes to this policy

We may update this policy to reflect changes in our services, the tools we use, or the law. The date at the top of this page shows when it was last revised. Where changes are significant, we will draw attention to them on this page. The version published here is the one that applies.

14. Contact us

For any question about this policy, or to exercise your rights over your personal data: