1. Controller and scope
This Privacy Policy applies to the KDSFlow website and its related contact experience. KDSFlow is the privacy contact for this website and acts as the controller where it determines the purposes and means of processing.
Privacy enquiries and requests can be sent to contact@kdsflow.ch.
2. Data we process
Depending on how you use the website, the following categories of data may be processed:
- Technical data: IP address, date and time of access, requested page, browser and device information, referring page, and security or error events recorded by the hosting infrastructure.
- Device-local preferences: selected language and your cookie or analytics choice. These values are stored in your browser under kdsflow-locale and kdsflow-cookie-consent.
- Contact data: name, restaurant or organisation, work email and the information you choose to include in a booking or demo enquiry, if a production contact channel is enabled.
3. Current demo-form behaviour
The form currently displayed on this website is a demonstration interface. Submitting it shows an on-page confirmation; the entered details are not transmitted to KDSFlow or stored by the website.
Before a production booking or contact service is enabled, this policy must be updated with the actual recipient, service provider, purpose and retention period.
4. Purposes of processing
Personal data is processed only where necessary for the following purposes:
- Operating, delivering, securing and troubleshooting the website.
- Remembering language and consent choices on your device.
- Responding to enquiries and arranging a walkthrough when a contact channel is enabled.
- Understanding website use through analytics only after the visitor has consented and an analytics service has been configured.
- Complying with legal obligations and establishing, exercising or defending legal claims.
6. Service providers and international processing
Hosting and technical service providers may process request and diagnostic data on our behalf to deliver and protect the website. The currently hosted version may use OpenAI and Cloudflare infrastructure. A separately deployed Plesk version will also involve the selected hosting provider.
Where data is processed outside Switzerland, appropriate safeguards required by applicable data-protection law must be used. The production operator should keep this section aligned with the providers and hosting locations actually in use.
7. Retention
Personal data is retained only for as long as needed for the stated purpose, security, contractual administration or legal obligations. Hosting logs are retained according to the hosting provider’s configured retention period. Device-local preferences remain until you change them or clear browser storage.
If a production enquiry channel is enabled, enquiry records should be deleted or anonymised when they are no longer needed for follow-up or legal record-keeping.
8. Your rights
Subject to applicable law, you may request information about your personal data, correction of inaccurate data, deletion, restriction of processing, data portability where applicable, or object to processing. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.
Send requests to contact@kdsflow.ch. We may need to verify your identity before responding. You may also contact the Swiss Federal Data Protection and Information Commissioner if you believe your data-protection rights have been infringed.
9. Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.
10. Third-party links and changes
Links to external websites are governed by those websites’ own privacy notices. We are not responsible for their content or privacy practices.
This policy may be updated when the website, providers or legal requirements change. The current version and update date will be published on this page. Swiss substantive law applies, subject to any mandatory law that cannot be excluded.