Privacy policy

Responsible for your data: Tom Tasty AG, Seestrasse 513, 8038 Zurich. We answer your questions about data protection by email at casa@tomtasty.ch or by telephone at 044 505 64 11 (Monday to Thursday, 10 to 18).

Depending on what you do with us, we process:

• Your information: First name, last name, phone number, email address, delivery address and your access code (stored only encrypted with us).
• Your order: package chosen, menu selection, additional products, deliveries, pauses, changes and cancellation.
• Your preferences: what you like to eat and what you don't, allergies and intolerances. Such information is considered particularly sensitive; we only ask what we need for your meals (section 4).
• Your payment: Payment method, the last four digits of the card, an encrypted reference to the payment method as well as the amount and status of each payment. We never receive the complete card number. In case of invoice payment, additionally your date of birth and the result of the creditworthiness check (digit 5).
• Your messages: what you tell us in the chat or on the phone, and what we send you by SMS or email.
• Technical data: IP address, time, page visited, browser and device, as well as the cookies from section 8.

If you are ordering for another person, enter their details in your account. We will process them on your behalf. Please ensure that the person agrees to this.

To manage your account, compose your menus according to your preferences, make deliveries, bill you and support you, including reminders about change deadlines. Additionally, to operate the website securely, prevent abuse, fulfil our legal obligations and improve our offer. We send you advertising only to the extent permitted by law; you can cancel it at any time.

You describe your preferences in your own words. A program determines what you like, what you don't like, and which allergies need to be considered, then compiles your menus accordingly. We use the AI service Anthropic (USA) for this; it only receives your text about your preferences, not your name.

We do not store information about illnesses or medications. If you write something anyway, your browser will detect it before sending, alert you to it and retain only the consequence for your meal: 'I have diabetes' becomes 'low-sugar dishes'.

The chat on the website also responds with the help of Anthropic. To find appropriate answers from our knowledge collection, your question is also transmitted to OpenAI (USA). We use both services through commercial interfaces; your content may not be used there for model training. The chat does not replace medical advice.

If you wish to pay on account, we will first check your creditworthiness. To do this, we transmit your name, address and date of birth to CRIF AG, Hagenholzstrasse 81, 8050 Zurich. We store only the result and a reference number. If it is negative, we do not offer payment on account; Twint and card remain available. You can have the result checked by someone on our team. For information about data stored at CRIF, contact CRIF AG directly.

Twint and card payments are processed via Worldline Schweiz AG (Saferpay). You enter your card details directly with them; they do not reach our systems. For the weekly debit, Worldline stores your payment method and provides us with an encrypted reference. Call us if you want to remove the payment method; after that, a different payment method is needed for deliveries to continue.

We only share data to the extent necessary for service delivery:

• Swiss Post: Name and address for delivery.
• bonacasa AG: for mediation and support within the scope of cooperation, if necessary.
• Shopify (Canada/USA): our ordering system for kitchen and logistics. Your name, delivery address and menu selection go there, but not your email address or phone number.
• Supabase: our database and login. Data is stored in Frankfurt (EU).
• Vercel (USA): provides the website, with servers in Frankfurt, and manages technical protocols.
• Twilio (USA): SMS to your mobile number, such as confirmation codes and reminders.
• Resend (EU): our emails, such as access codes and order confirmations.
• Worldline and CRIF: digits 5 and 6.
• Anthropic and OpenAI (USA): digit 4.
• Google (USA): Address search, sign-in with Google, reviews and visitor statistics, digits 9 and 10.

We do not sell your data.

When accessing the website, technical logs are created (IP address, time, page, browser). They serve secure operation and are deleted after a short time.

We use only a few cookies: one to keep you signed into your account, two to record your usage and your objection to it (section 11), one to remember that you arrived via a partner link so the corresponding voucher applies, one that temporarily records during Google sign-in who you are ordering for, and the cookies from Google's visitor statistics (section 10). We do not display a cookie banner; you can delete cookies at any time in your browser.

We store your language choice in a functional cookie for one year. When you are signed in, we also save it in your profile so that emails and text messages use the appropriate language. You can change the language at any time in the footer.

Address search: When you enter your address, Google Maps suggests it. Your input data, your IP address and technical data are sent to Google. You can also enter the address completely by hand.

Sign in with Google: If you choose 'Continue with Google', your browser loads Google's sign-in service; we receive your name and email address from Google and create your account with this information. Google learns that you are signing in with us. You can alternatively sign in with a phone number or email address and code.

Ratings: On the 'About Tom Tasty' page, we display our public Google reviews; during this process, your browser downloads profile pictures directly from Google.

Google's privacy policy applies to Google.

We use Google Analytics to count which pages are visited and how often to improve the website. For this, Google Tag Manager loads the measurement program. Google receives the visited page, time, approximate region, browser, device and a random identifier, not your name, phone number, email or preferences. The IP address is shortened by Google and not stored. We do not use the statistics for advertising.

You can block or delete these statistics cookies in your browser; the website still works.

To make the website easier for older people to use, we record how it is used: page changes, clicks, scrolling and error messages. This way we can see, for example, where someone gets stuck.

Not recorded, your entries in fields, your preferences, the chat, your access code, name, phone number, email and address; they are made unreadable before recording. Payment pages are not recorded, and we do not store any IP address during payment.

Recordings are stored in our database in Frankfurt (EU), are visible only to authorized staff, and will be deleted after 90 days deleted. When you log in, we link the recordings from this browser to your account so we can help you in a targeted way over the phone. This is based on our interest in operating a functional website (Art. 31 DPA). If your browser sends the « Global Privacy Control » signal, we do not record anything.

Your usage is currently being recorded.

Some service providers process data in the EU (Frankfurt, Ireland) and in the USA (item 7). For the USA, we rely on the Swiss-U.S. Data Privacy Framework recognized by the Federal Council, insofar as the service provider is certified there, otherwise on recognized standard data protection clauses and additional safeguards.

As long as we need them for delivery and legal obligations. We keep invoices and payments for ten years. If you cancel, we delete or anonymize remaining data as soon as it is no longer needed; we delete the reference to your payment method at the end of your subscription. Usage records after 90 days and technical logs are deleted shortly after.

The connection to the website is encrypted. Your data is protected by access rights, so you only see your own data and our staff only see what they need for their work. Access codes are stored in encrypted form. Complete protection is not possible with electronic transmission.

You can request information about your data, have it corrected or deleted, object to processing, request your data in a common format, and in the case of automated decision-making (section 5), request review by a person. Write to casa@tomtasty.ch or call us at 044 505 64 11. We must be able to identify you so that no one else obtains your data. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

If we change how we process data, we will update this statement. The version published here applies.