1. Controller
candea GmbH, Zurich, Switzerland (UID CHE-298.590.891) – Olaf's Bakery is a brand of candea GmbH. Postal address available on request by email.
info@olafs-bakery.ch
2. What happens when you simply visit the site
When you open the site, your browser transmits technically necessary data to our hosting provider (Novatrend Services GmbH, Switzerland): IP address, date and time, page requested, browser type. These server logs serve the operation and security of the website and are deleted automatically after a period set by the hosting provider. No analysis of individuals takes place.
3. Cookies
This website sets no cookies. We use no analytics or audience measurement tools — neither Google Analytics nor anything similar — and we embed no fonts, maps or videos from third-party servers. That’s why there’s no cookie banner here — there is nothing to consent to.
4. Newsletter
When you sign up for the newsletter, we process your first name, last name and email address as well as the time of sign-up. As proof of consent, we also store a non-reversible checksum of your IP address.
- Purpose: We let you know where to find our cinnamon rolls, which flavours are in the oven, and when we’ve found a shop.
- Storage: our own database on our hosting provider’s server in Switzerland (Novatrend Services GmbH).
- Legal basis: your consent, which you give by submitting the form.
- Unsubscribing: at any time via the link at the end of every email, or informally at info@olafs-bakery.ch. We then delete your address.
- Disclosure: no disclosure for advertising purposes, no sale, no combination with other data.
- Sending: We send the emails directly from our server in Switzerland. We do not currently use an external mailing service; if that changes, we will update this statement beforehand.
- Retention: until you unsubscribe.
5. Contacting us by email
If you write to us, we process your details to reply. We keep the correspondence for as long as the matter requires or the law demands.
6. Linked sites
This website links to Instagram and Google Maps. These services are not embedded — data only flows to them once you click such a link. From then on, the privacy policies of those providers apply.
7. Your rights
You can ask at any time whether and which data we process about you, request its correction or deletion, and withdraw any consent given. An informal message to info@olafs-bakery.ch is enough. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
8. Changes
We will update this statement when our processing changes — in particular if a mailing service is added. Last updated: October 2026.