Privacy policy

Who is responsible

The controller is Brotherfields Sàrl, a limited liability company under Swiss law, which operates LeLocal, Avenue de Sévelin 50, 1004 Lausanne, Switzerland. Registered office: Rue Caroline 2, 1003 Lausanne.

For any question about your data, write to lelocal@brotherfields.ch. Data protection contact person: Antoine Schaller, managing partner. No data protection advisor within the meaning of Art. 10 FADP has been appointed.

Legal framework

We apply the Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) and its ordinance (DPO).

If you are in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) may also apply. In that case you have the rights it gives you, described below.

Data from your quote request

When you fill in the request form, we receive: your full name, your email address, your phone number and your company name (both optional), the type of client (company or private), the type and format of event, the number of guests, the preferred date, your message, whether you want a detailed written quote, and the language of the site you used.

We use this data only to answer your request and prepare a quote. We do not sell it and we do not use it for advertising.

Client data

If the rental goes ahead, we may send you a personal link to complete your client record. The link is valid for 30 days and can be used only once. Through it you can send: name, company, phone, billing address (street, postcode and town, country) and, for the refund of the deposit, the IBAN, the account holder's name and the bank's name.

We also keep the rental documents: quote, contract, invoices and relevant correspondence.

To know that a deposit or an invoice has been paid, we read the statements of our bank account. They show the name and IBAN of the person who paid and the payment reference. The deposit is refunded to the account you give us through the personal link described above, which may belong to someone else, for example your company. Failing that, it is refunded to the account it was paid from.

Technical data and audience measurement

Like any website, our hosting provider records technical data on each visit: IP address, date and time, page requested, browser type. This data is used to run the site and protect it against abuse.

We measure traffic with Vercel Web Analytics, a tool that works without cookies. It gives us aggregate figures (page views, country, device type) and does not allow us to identify you.

Fonts are served from our own domain: your browser does not contact Google Fonts.

Cookies

The public pages of the site set no cookies.

Only the administration area, reserved for our team, uses login cookies. They are needed to sign in and do not concern visitors.

The site contains links to Instagram and LinkedIn. If you follow them, the privacy rules of those platforms apply.

Why we process this data

We process your data to: answer your request and prepare a quote; conclude and perform the rental contract; invoice and manage the deposit; meet our legal obligations, in particular accounting ones; run the site and keep it secure; understand, in aggregate, how the site is used.

For people to whom the GDPR applies, the legal bases are: pre-contractual steps and performance of the contract (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c)) and our legitimate interest in running and protecting the site (Art. 6(1)(f)).

Service providers and transfers abroad

We use the following service providers, which process data on our behalf:

Supabase: database, document storage and sign-in to the administration area. Data hosting location: Switzerland (Zurich, AWS eu-central-2 data centre).

Vercel Inc. (United States): website hosting and audience measurement.

Resend (United States): sending the emails that notify us of a new request.

Slack (United States): internal notification of each new request to our team.

Some of this data is therefore processed outside Switzerland, in particular in the United States. Safeguards applied to these transfers: Vercel and Slack are certified under the Swiss-U.S. Data Privacy Framework, supplemented by standard contractual clauses; Resend applies the European Commission's standard contractual clauses, adapted to Swiss law. The functions that process your request run in the United States, even though the database is in Switzerland.

We do not pass your data to any other third party unless the law requires us to.

Retention period

Requests that do not lead to a rental: they are kept for as long as they remain useful to answer you if you contact us again, and deleted as soon as you ask.

Client records and bank details: ten years for contracts, invoices and accounting records, including the bank details they contain, in accordance with Art. 958f CO.

Accounting records (invoices, related contracts) are kept for ten years, as required by the Swiss Code of Obligations (Art. 958f CO).

Hosting provider technical logs: about one day, depending on the host's plan (Vercel).

Security

Communication with the site is encrypted (HTTPS). Access to the data is limited to the members of our team who need it, after authentication. The personal links sent to clients expire and can be used only once.

Your rights

You can at any time ask for access to your data, its correction or deletion, object to processing, or ask to receive your data in a common format. Where processing is based on your consent, you can withdraw it.

Write to us at lelocal@brotherfields.ch. We may ask you to prove your identity. We normally reply within 30 days.

Some data must be kept despite a deletion request, for example accounting records.

If you believe your data is being mishandled, you can contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). If the GDPR applies, you can also contact the supervisory authority of your country of residence.

Changes

We may update this policy, for example if we change service provider. The version in force is the one published on this page, with its update date.