Privacy Policy
This policy explains what personal data FoodRadar collects, why we collect it and what rights you have. It applies to foodradar.ch and every page of the service. The service is aimed at users in Switzerland.
Last updated: 2 October 2026
Who is responsible
FoodRadar is operated by DigiApps Sàrl (digiapps.ch), which is the controller responsible for the processing described here. Our postal address and contact details are listed in the Impressum.
DigiApps SàrlRue de Chantepoulet 10, 1201 Geneva, Switzerland
info@foodradar.ch
What we process
- Account data — the display name, email address, password hash and preferred language you provide when you register, plus the identifier returned by Google or Facebook if you sign in with one of those providers.
- Vendor listing data — the business name, description, vendor type, cuisines, dietary tags, contact details, website, social links and images a vendor publishes or, for listings marked as unverified, that FoodRadar compiled from publicly available information. Once a listing is approved this data is public by design.
- Schedule and location data — the dates, times and addresses, including coordinates, that a vendor publishes for their stops or, for listings marked as unverified, that FoodRadar compiled from publicly available information. Published future entries are public.
- Chat messages — the questions you type into the assistant and the answers it returns. They are processed to answer you, transmitted to OpenAI for that purpose, and kept in our technical logs for 30 days, then deleted.
- Cookies — a culture cookie that remembers your language, a session cookie needed for the chat assistant and the quote request form, an authentication cookie once you sign in, and short-lived cookies that protect forms against forgery and carry a confirmation message to the next page. All of them are strictly necessary. Audience-measurement cookies are set only if you accept them; see “Audience measurement” below.
Listings built from public information
Some listings are compiled by FoodRadar from publicly available business information — official municipal programmes and the vendor's own website and social media — before the vendor has taken them over. They contain only the business name, vendor type and cuisine, the locations and hours the business has published, and its public links, and they are marked as unverified. The purpose is to show visitors where street food can be found. The vendor can have such a listing corrected or removed at any time through the listing page or by writing to info@foodradar.ch; removal requests are handled within one working day. What you send with such a request — your name, email address and, if you give them, phone number and message — is used only to handle it and is kept with the listing's records. The IP address the request was sent from is stored with it to prevent misuse of the form, and is deleted at the latest 30 days after we have dealt with the request.
Quote requests for an event
If you ask vendors for a quote for an event, we process what you enter in the form — the type, date, place and size of the event, your budget, preferences and message, your name, your e-mail address and, if you give it, your phone number — for one purpose: passing your request on to the vendors you chose. The recipients are the vendors you selected, and FoodRadar, which may forward the request by e-mail or contact the vendor by phone or WhatsApp for listings not yet claimed. The legal basis is your request. We send you a confirmation by e-mail. Requests are kept for 12 months and then deleted. To prevent abuse, the address and the session the form is sent from are used to limit the number of requests: the address is not stored, and the fingerprint of the session is erased after 30 days.
Who we share it with
- OpenAI — messages you send to the chat assistant are transmitted to OpenAI to generate a reply. Photos a vendor uploads to import a menu are transmitted to OpenAI to read the menu; we do not store the photos after the import.
- Google — on the vendor schedule pages and in the « Place » field of the quote request form, your browser connects to Google, and what you type into that field is sent to Google to suggest matching places.
- Google Analytics — audience measurement by Google Ireland Limited and Google LLC, only if you accept it. See “Audience measurement” below.
- OpenStreetMap — map tiles are loaded from OpenStreetMap servers whenever you view a map.
- Hetzner — the application and its database run on Hetzner servers located in Germany.
- Sentry — technical error reports, which can include the address of the page requested, are sent to Sentry so that we can fix faults.
- Infomaniak — the emails we send you, such as account confirmations and listing notices, are delivered through Infomaniak in Switzerland.
- WhatsApp — if you contact us through the WhatsApp link, your phone number and your messages are processed by WhatsApp (Meta Platforms Ireland Limited and Meta Platforms, Inc.); Meta may transfer them to the United States, under the Swiss–U.S. Data Privacy Framework. We use the conversation only to answer vendor enquiries and keep it only as long as needed to handle your request. If you prefer not to use WhatsApp, write to info@foodradar.ch.
Audience measurement (Google Analytics)
If you accept audience measurement in the banner, FoodRadar uses Google Analytics 4 to count visits and to see how the directory is used — which pages are viewed, which searches and filters are used, which vendor links are followed — so that we can improve it. DigiApps Sàrl is the controller; Google Ireland Limited (Dublin, Ireland) and its parent company Google LLC (USA) process the data on our behalf as processors. The events we send carry no name, e-mail address, phone number or chat message. No advertising feature is enabled and no data is used for advertising.
Nothing is sent to Google before you accept: until then the Google Analytics script is not even loaded. If you decline, it is never loaded. Google Analytics 4 does not log or store IP addresses; Google uses the address of your connection only briefly to derive an approximate location (country, region, city) and then discards it.
Cookies: fr_consent remembers your choice (accept or decline) for 12 months and is set by FoodRadar whatever you choose. Only if you accept, Google Analytics sets _ga and _ga_<ID>, which tell visits apart and last up to 2 years.
Google may process the data in the United States. That transfer takes place under the Swiss–U.S. Data Privacy Framework, under which Google LLC is certified. Google Analytics data is kept for 14 months, then deleted automatically.
You can withdraw your consent at any time with the “Cookie settings” link at the bottom of every page: choose Decline, and measurement stops and the _ga cookies are deleted.
Where your data goes
FoodRadar is operated from Switzerland for users in Switzerland. The application and its data are hosted in Germany, and encrypted backups are stored in Finland; the Federal Council recognises both countries as providing adequate data protection. Some recipients process data in the United States: OpenAI (the chat assistant and menu import from photos) and Google (address suggestions and, if you accept it, audience measurement), and Meta when you write to us on WhatsApp. Sentry (error reports) processes data in the European Union. These transfers take place under the Swiss–U.S. Data Privacy Framework where the provider is certified, otherwise under standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC). Map images are loaded from OpenStreetMap, whose operator is based in the United Kingdom, which the Federal Council also recognises as providing adequate data protection.
How long we keep it
Account and listing data are kept for as long as the account exists. Listings that are taken down are deactivated rather than erased, so that past schedule records stay consistent. Chat messages and technical logs are kept for 30 days, then deleted. Data deleted from the service remains in our encrypted backups until they are overwritten, after six months at most.
Your rights
Under the Swiss Federal Act on Data Protection (nFADP) you may ask for a copy of the personal data we hold about you, have inaccurate data corrected, ask for your data to be deleted, or object to a particular processing. Write to us and we will answer within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
Contact
For any question about this policy, or to exercise your rights, write to info@foodradar.ch.