Privacy policy

Who is responsible

Barista Bar Basel GmbH, St. Alban-Tal 34, 4052 Basel, Switzerland. Privacy questions: love@matchabunny.com.

This policy follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

Visiting the website

The website is hosted by Vercel Inc. (USA). Each visit creates technical logs (for example IP address, time, page visited), used for security and operation.

We use no cookies and no analytics or advertising tools. Fonts and scripts are served from our own server; no data goes to Google, Meta or advertising networks. On loading, the page only asks our database for the current stock (see below).

In your browser we only store the contents of your cart (product and quantity) and a technical note for the page transitions. This stays on your device.

Stock and bar menu

To show what is available, the website asks our database for the current stock and the bar menu of the day. The database is run by Supabase Inc. (USA), with the data stored in a data centre in Zurich.

Orders and payment

To pay, you are taken to the Stripe payment page (Stripe Payments Europe, Ltd., Ireland). There you enter your name, email, delivery address, phone number if asked, and payment details. We never receive your payment details (such as your card number).

Depending on the payment method, TWINT AG (Switzerland) or PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) are also involved, and their privacy policies apply too.

After payment we receive your name, email, phone, delivery address and the products ordered, so we can ship your order. We store this in our database (Supabase, Zurich). We are notified of each new order by email, sent through the email service Resend (USA).

For delivery we pass your name and address to Swiss Post.

Contact by email or Instagram

When you write to us, we process your message to reply. Our email runs on Microsoft 365. Links to Instagram, Spotify and Google Maps only open those services when you click them; their privacy policies then apply.

Transfers abroad

Some providers are based in the USA or the EU. We only work with providers that offer adequate data protection safeguards, such as standard contractual clauses.

How long we keep data

We keep order data for 10 years, as Swiss law requires for business records. Messages are deleted once they are no longer needed.

Your rights

You can ask at any time what data we hold about you, have it corrected or deleted, and object to its processing, unless the law requires us to keep it. Write to love@matchabunny.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).