Privacy policy

1 Controller

The controller responsible for processing personal data in connection with this website is: Jamatu AG Oberhausenstrasse 97 8907 Wettswil Switzerland Phone +41 44 505 23 36

For questions about data protection and requests concerning your rights, please use the contact form at www.jamatu.com/en/contact with the note “Privacy” in your message, or write to the postal address above.

2 Scope

This privacy policy applies to the website www.jamatu.com and its language versions, as well as to communication arising through this website, such as enquiries via forms, demo appointments and e-mails.

For our products (for example JamOrder, JamWaiter, OrderAdmin or JamPay), we generally process guests’ data on behalf of the businesses that use these products. The contracts with these businesses and their privacy policies apply to such processing. Separate terms may also apply to individual offerings.

3 Legal bases

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO), both in force since 1 September 2023.

Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: your consent (Art. 6 para. 1 lit. a GDPR), the performance of a contract or pre-contractual measures taken at your request (lit. b), legal obligations (lit. c) and our legitimate interests in a secure, functioning website and in handling enquiries (lit. f).

4 What data we process and for what purposes

4.1 Visiting the website

When you access the website, your browser transmits technically necessary information, in particular IP address, date and time, the address accessed, referrer, browser and operating system. This data is collected by the operator of our server infrastructure (Cloudflare, see section 5) and is used to deliver the pages, to fend off attacks and to fix errors. We do not analyse it to identify individual persons.

4.2 Language setting and storage in the browser

The website is available in German, English and Italian. On your first visit, we select the language based on the language setting of your browser. We store your choice in the cookie «jamatu_sprache» (only the language code, valid for one year). This cookie is necessary to display the website as you requested.

We store your choice in the cookie notice in your browser’s storage (localStorage) for around nine months. If you use the assistant Jonida and provide a first name, this too is stored only in your browser. You can delete this information at any time via your browser settings.

4.3 Forms for contact, demos and enquiries

If you contact us via a form, we process the information you provide, for example name, business, e-mail address, phone number, type of business and your message, as well as the page from which you sent the form. We use this information to answer your enquiry, to prepare a demo or quote and to contact you about it.

We store the submissions in a database at Supabase located in Zurich and transfer them to our customer relationship management system (CRM), in which our team handles the enquiry. To protect against spam and abuse, we check forms with an invisible honeypot field and with Cloudflare Turnstile (section 4.7), and we store the IP address only as a non-reversible hash value.

4.4 Contact by e-mail, phone and appointment booking

If you contact us by e-mail or phone or book a demo appointment via our booking page, we process your information and the history of the communication in order to deal with your request. We keep this data in our customer relationship management system.

4.5 E-mails from us

We send you e-mails if you have contacted us, would like a demo or quote, or are already a customer. We only send promotional communications where this is permitted by law, in particular with your consent or to existing customers regarding similar offerings. You can object to such communications at any time.

Our e-mails may record whether an e-mail was opened and whether a link it contains, for example to a demo, was accessed. We use this information to tailor our contact with you. If you do not want this, you can disable the loading of external content in your e-mail program or let us know.

4.6 Audience measurement only with consent

We want to understand how the website is used in order to improve it. For this purpose, we may use Google Analytics and Microsoft Clarity. On your first visit, we ask for your consent in the cookie notice. You can change your choice at any time via “Cookie settings” in the footer.

Google Analytics (Google Ireland Limited, Ireland, and Google LLC, USA) is only loaded after you have given your consent. Without consent, no request is sent to Google. Page views, scrolling, clicks on links, phone numbers and e-mail addresses, and submitted forms are recorded. Google Signals and advertising features are switched off. If you withdraw your consent, we stop the measurement and delete the Google Analytics cookies.

Microsoft Clarity (Microsoft Ireland Operations Limited, Ireland, and Microsoft Corporation, USA) shows us, in aggregated form and as session recordings, how visitors use the pages, for example clicks, scrolling and mouse movements. Input in form fields is masked. Without consent, Clarity works without cookies and without cross-device recognition. With consent, Clarity sets cookies. We do not pass on data for advertising purposes.

4.7 Protection against abuse with Cloudflare Turnstile

We protect forms with Cloudflare Turnstile. In the background, Turnstile checks, based on browser and device characteristics, whether a request comes from a human, and only shows a challenge if necessary. The provider is Cloudflare, Inc., USA. The legal basis is our legitimate interest in protecting forms against spam and abuse.

4.8 Measuring printed QR codes

We use QR codes on flyers and printed materials. If you access the website via such a code, we record the campaign, the page accessed, the referring page and a random session identifier that is kept in your browser only for the duration of the session. We do not set a cookie for this and do not store an IP address. This shows us which printed materials are used.

4.9 Assistant Jonida

On certain pages, we offer the assistant Jonida, which answers questions about Jamatu. Jonida is in a trial phase. Your questions, the page accessed and, if provided, your first name are transmitted to our service to answer them; the service may use providers of AI services for this purpose. Jonida is an AI and can make mistakes. Please do not enter any sensitive data in the chat.

4.10 Demos and embedded content

Our demos and flows run on Jamatu’s own addresses (for example demo.jamatu.com, jamwaiter-demo.jamatu.com and embed.jamatu.com). Certain content, such as a video in a customer story, is loaded directly from a customer’s website. In doing so, the respective provider learns your IP address and technical information about your browser.

We deliver fonts and icons from our own servers, without any request to third parties.

4.11 Social media

We link to our profiles on social media platforms. We do not embed any plugins of these platforms on the website. Only when you follow a link do you reach the respective platform, to which its own privacy provisions apply.

5 Recipients and processing abroad

We only disclose personal data to the extent necessary for the purposes stated. Recipients are in particular our service providers who process data on our behalf:

Cloudflare, Inc., USA: operation and delivery of the website, protection against attacks, Turnstile. Supabase, Inc., USA, with database in Zurich (Switzerland): storage of form submissions and website content. Google Ireland Limited, Ireland, and Google LLC, USA: Google Analytics, only with consent. Microsoft Ireland Operations Limited, Ireland, and Microsoft Corporation, USA: Microsoft Clarity. Providers for e-mail and for the operation of our customer relationship management system (CRM), with registered office and data storage in Switzerland.

Certain service providers are based in the USA or may process data there. Disclosure to the USA is made to companies certified under the Swiss-U.S. Data Privacy Framework, for which the Federal Council has determined an adequate level of data protection, or on the basis of the European Commission’s standard contractual clauses with the adaptations required for Switzerland. An adequate level of data protection exists in the states of the EU and the EEA.

6 Retention period

We retain personal data for as long as necessary for the purpose for which we collected it, or as required by statutory retention obligations, for example ten years for business records. Enquiries that do not result in a business relationship are deleted or anonymised as soon as they are no longer needed. Technical logs of our server infrastructure are deleted after a short time.

7 Data security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access. The website is only accessible in encrypted form (HTTPS); access to form submissions is restricted to authorised persons and is controlled via a login with roles.

8 Your rights

Within the scope of applicable data protection law, you have the right to access your personal data, to rectification of inaccurate data, to erasure, to restriction of processing, to object to processing and to receive or transfer your data. You may withdraw any consent given at any time with effect for the future.

To exercise these rights, a message via the contact form or to the postal address in section 1 is sufficient. We may request proof of identity so that we do not disclose data to unauthorised persons.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). If the GDPR applies, you may also lodge a complaint with a data protection supervisory authority in the EU.

9 No automated individual decisions

We do not make any decisions based solely on automated processing that produce legal effects concerning you or significantly affect you.

10 Changes

We adapt this privacy policy when our website, our service providers or the law change. The version published on this website at the relevant time applies. This privacy policy is also available in English and Italian; the German version prevails.