Privacy Policy

As of: August 2026 | In accordance with the revised Swiss Data Protection Act (revFADP)

1. Introduction

The protection of your privacy and your personal data is important to us. This privacy policy informs you about how Lotus Leaf GmbH (hereinafter "we" or "us") collects, processes and protects personal data in accordance with the totally revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the European General Data Protection Regulation (GDPR).

2. Controller

The controller responsible for data processing on this website and for our services is:
Lotus Leaf GmbH
Frobenstrasse 2
4053 Basel
Switzerland
E-mail:

3. Collection and Processing of Personal Data

We primarily process personal data that we obtain from our clients (guests) and other business partners in the context of our business relationships with them and other persons involved, or that we collect from users when operating our websites, apps and other applications.

This includes in particular:

  • Contact and master data: First name, last name, e-mail address, telephone number.
  • Reservation data: Date, time, number of people and special requests that you communicate to us.
  • Technical data: IP address, browser type, operating system, date and time of access.

4. Purposes of Data Processing

We use the personal data collected primarily to conclude and process our contracts with our clients and business partners, in particular in the context of table reservations and catering for our guests.

In addition, we process personal data for the following purposes:

  • Communicating with you (e.g., confirming reservations, answering inquiries).
  • Ensuring the operation of our website and other IT systems.
  • Complying with legal and regulatory obligations.

5. Disclosure of Personal Data to Third Parties

In the context of our business activities and the aforementioned purposes, we also disclose your personal data to third parties, insofar as permitted and deemed appropriate. These are in particular IT service providers (e.g., web hosting providers) and suppliers who process data on our behalf (processors).

Google Maps on the contact page is loaded only after you actively request it by clicking. Only then is a connection to Google established; in particular, your IP address and technical usage data may be transmitted to Google. Google’s privacy policy also applies.

All processors are contractually obliged to process your data only on our behalf and in accordance with our instructions and to take appropriate data security measures.

6. Data Transfer Abroad

We generally process your data in Switzerland. If we transfer data to service providers abroad, we ensure that adequate data protection is guaranteed, for example by concluding standard contractual clauses, provided that the recipient country does not already have an adequate level of data protection recognized by the Federal Council.

7. Retention Period for Personal Data

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing. For example, we generally keep reservation data until the restaurant visit is completed. Business correspondence and accounting documents are kept in accordance with the statutory retention periods (usually 10 years).

8. Data Security

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as the encryption of our website (SSL/TLS).

9. Rights of the Data Subject

You have the following rights within the framework of the applicable data protection law (in particular according to the revFADP):

  • Right of access: You can request information as to whether and which of your personal data we process.
  • Right to rectification: You can request the correction of inaccurate or incomplete data.
  • Right to erasure: You can request the deletion of your data, provided we are not legally obliged or entitled to retain it.
  • Right to restriction: Under certain conditions, you can request the restriction of data processing.
  • Right to data portability: You have the right to receive certain personal data in a common electronic format.
  • Right of withdrawal: You can withdraw your consent to data processing at any time.

To exercise these rights, please contact us at the address given in section 2.

10. Cookies and Website Tracking

We typically use "cookies" and similar techniques on our website to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser used when you visit our website. We do not use analytics or marketing cookies. Your choice in the cookie banner and any consent to load Google Maps are stored locally in your browser so that your decision can be respected.

11. Changes to this Privacy Policy

We may amend this privacy policy at any time without prior notice. The current version published on our website applies.