Account
Legal noticePrivacyTerms

⚖️ This translation is provided for information only. Only the German version is legally binding: Datenschutzerklärung (DE).

Privacy policy

As of: November 2026

In this privacy policy we inform you about the personal data we process in connection with the LieferCH website and the LieferCH pilot operation. The governing law is the Swiss Federal Act on Data Protection (FADP/DSG) in the version in force since 1 September 2023 and the Data Protection Ordinance (DPO/DSV).

1. Controller

The controller responsible for data processing is:

E&E Digital, Inh. Faruk Ersoy (sole proprietorship, brand LieferCH)
Zollweg 8b, 5034 Suhr AG, Switzerland
E-mail: [email protected]

We have not appointed a data protection advisor and have no representative abroad. Please send data protection enquiries to the e-mail address above.

2. Visiting the website (hosting and server logs)

The website https://lieferch.ch is hosted via the Cloudflare Pages service and delivered via the Cloudflare network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). The domain is registered with Hostpoint AG (Switzerland). When you access the website, your IP address is necessarily transmitted to Cloudflare for technical reasons. Cloudflare keeps its own server logs (e.g. IP address, time, requested address, browser information).

Purpose: provision, security and stability of the website.

3. Fonts from Google (Google Fonts)

For display we use the font «Plus Jakarta Sans», which is loaded from Google servers (fonts.googleapis.com and fonts.gstatic.com) when the page is accessed. Your IP address is transmitted to Google in the process. The provider is Google Ireland Limited or Google LLC (USA). Purpose: consistent display of the website.

4. Other embedded services

5. Cookies, local storage and analytics

The public pages of LieferCH themselves set no cookies (only exceptions: the technically necessary login cookies in the optional customer account and in the password-protected restaurant login for partner restaurants, see section 7). LieferCH uses no analytics or advertising services (no tracking, no profiling).

Some functions store information only locally in your browser (localStorage). This data is not transmitted to us:

In addition, a so-called service worker (for use as an app or PWA and offline) stores website files such as pages, images, style and script files locally in your device’s cache; no personal data is transmitted to us in the process, and you can delete this cache via your browser settings.

You can delete this data at any time via your browser settings.

6. Contact and forms

The forms on the website (e.g. «Become a partner» or «Become a courier») do not send any data to a server (except the order form on the restaurant pages, see section 7). When you submit, your own e-mail program opens with a pre-filled message to us. Only when you send this e-mail yourself do we receive the information you entered (e.g. name of the restaurant, town, e-mail address, phone number, message). The same applies if you write to us directly by e-mail.

We process this information to answer your enquiry and, for restaurants, to examine and carry out a possible cooperation (e.g. the pilot), and for expressions of interest as a courier, to inform you about the build-up of the courier team and to examine possible employment. E-mails are stored with our e-mail provider.

Photos for visualisations (Print & Decor)

Restaurants, bars and other venues can send us photos of their rooms, their façade or their offer (e.g. by e-mail to [email protected]) so that we can prepare a proposal or visualisation for printing or decoration work. We use these photos exclusively to prepare the proposal or visualisation.

We keep the photos until the proposal has been completed, but for no longer than 12 months, and then delete them. On request we will delete them earlier at any time – a short e-mail to [email protected] is enough. Without your express consent we publish neither your photos nor the visualisations created from them. If possible, please send photos without recognisable people; if people are recognisable, please make sure that they agree.

7. Orders during the pilot

Currently no payments are processed via the website. Online payment via a regulated payment provider is in preparation; this policy will be supplemented before it is introduced.

The following applies during the pilot with partner restaurants: the shopping cart on the restaurant page is only stored in your browser. If you choose «Per WhatsApp senden» or «Per E-Mail senden» (send via WhatsApp / e-mail), WhatsApp or your e-mail program opens with a pre-filled message (e.g. ordered dishes, table number and, if you provide them, your name and contact details). You send this message yourself directly to the restaurant concerned; LieferCH receives no copy of it. The restaurant is your contractual partner and processes this data under its own responsibility for preparation and handover or delivery. Payment is made directly at the restaurant (cash, card or TWINT). If a restaurant offers its own payment link («Online bezahlen»), your payment data is processed exclusively by the restaurant or its own payment provider under their own responsibility, not by LieferCH; their privacy provisions apply. LieferCH receives no payment data.

When transmitted via WhatsApp, the data is transferred via the WhatsApp service (Meta).

Online order by e-mail: if you use the order form («Bestellung senden» / send order) on a restaurant page, your order data (name, phone number, for delivery street and postcode/town, ordered dishes, delivery method, requested time and comment) is transmitted by e-mail to the respective restaurant via a Cloudflare service in order to process the order. A copy of this e-mail goes to the LieferCH mailbox for quality assurance and queries. In addition, the order data (including order number, time of receipt and processing status) is stored in a Cloudflare database (Cloudflare D1) so that the respective restaurant can view it in its password-protected order panel and manage the processing status. Each restaurant only sees the orders addressed to it. This stored order data is automatically deleted 30 days after receipt. Your IP address is not stored in the database. To protect against misuse, your IP address is used briefly to limit the number of order attempts. The restaurant confirms the order by phone and processes the data as your contractual partner under its own responsibility for preparation, pickup or delivery.

Courier navigation: for delivery orders the restaurant receives a QR code or link for navigation. Only when the courier opens it is the delivery address transmitted to Google Maps or Apple Maps.

Customer account (optional): you can order without an account. If you use a customer account at /konto/, you sign in without a password: we send you by e-mail (via a Cloudflare e-mail service) a 6-digit code and a sign-in link, which are valid for 15 minutes and can only be used once. The account is only created when you confirm the code or link. In the Cloudflare database (Cloudflare D1) we then store: your e-mail address, optionally your name and phone number, the addresses you save (at most five, with street, postcode and town), the time of creation and of the last sign-in, and an order history of the orders you place while signed in (order number, restaurant, time, order type, dishes and amount; without address and phone number). We show the processing status of an order as long as the order exists in the restaurant’s order panel (at most 30 days). We store the code, sign-in link and session key only as a hash, not in plain text. After sign-in, a technically necessary session cookie («lc_csess», HttpOnly, Secure) is set; the session is valid for at most 30 days and is deleted when you sign out or when it expires. If you order while signed in, we use your account data to pre-fill the order form; what goes to the restaurant corresponds to the section «Online order by e-mail». To protect against misuse, sign-in requests and code entries (e-mail address or IP address and time) are stored briefly and deleted after one day at the latest. Orders in the order history are deleted after 3 months. An account with which you have neither signed in nor ordered for 3 months is automatically deleted together with the saved addresses, sessions and order history. Deleting the account: you can delete your account yourself at any time at /konto/ («Konto löschen» / delete account) or request deletion by e-mail to [email protected]. The account, saved addresses, sessions and order history are then deleted immediately. Orders already transmitted to a restaurant are not affected: they are deleted in the order panel after 30 days as described above; the order e-mails in the mailboxes of the restaurant and of LieferCH are not subject to this deletion.

Restaurant login (only for partner restaurants): for access to the order panel at /restaurant/ we store in the same database the e-mail address and name of the authorised person, the password exclusively as a salted hash (PBKDF2, not in plain text) and the time of the last sign-in. After sign-in, a technically necessary session cookie («lc_rsess», HttpOnly, Secure) is set; only a hash of this session key is stored in the database. The session is valid for at most 30 days and is deleted when signing out or when it expires. To protect against misuse, failed sign-in attempts (IP address or e-mail address and time) are stored briefly and deleted after one day at the latest. We also store which dishes a restaurant has marked as sold out (without personal data).

8. Disclosure to third parties

We do not sell personal data. We only pass on personal data to the extent necessary for the purposes described, namely to:

9. Disclosure abroad

Some of the service providers mentioned have their registered office or servers outside Switzerland, namely in the EU (e.g. Ireland, Germany – among others komoot GmbH for Photon) and in the USA (Cloudflare, Google, Meta; the OpenStreetMap map tiles are delivered via a worldwide network, among others by Fastly). According to the Federal Council, the EU states have an adequate level of data protection. For the USA, this applies to companies certified under the Swiss-U.S. Data Privacy Framework; where no such certification exists, we rely on standard contractual clauses recognised by the FDPIC (EDÖB) or on the exceptions under Art. 17 FADP (e.g. performance of a contract at your request).

10. Retention period

We only keep personal data for as long as is necessary for the respective purpose or as statutory retention obligations exist (e.g. 10 years for business records under Art. 958f CO). Order data in the restaurants’ order panel is automatically deleted after 30 days; customer account data until the account is deleted (order history at most 3 months; accounts without sign-in and without orders for 3 months are deleted automatically) (the order e-mails in the mailboxes of the restaurant and of LieferCH are not subject to this automatic deletion). Server logs and statistics data of the service providers are deleted according to their own periods.

11. Data security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. The website is transmitted encrypted (HTTPS). Please note that unencrypted e-mails are not fully protected in transit.

12. Your rights

Under the FADP you have in particular the following rights:

Send your request to [email protected]. We may ask for proof of identity. You also have the right to contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).

13. Changes

We may amend this privacy policy at any time, in particular if the website or the pilot operation changes. The current version published on this website applies.