Privacy Policy

1. Objectives

This policy applies to all processing of personal data carried out by Cakelicious and is intended to inform users about how Cakelicious processes personal data (including details on the type of personal data collected and the purpose of the processing) and about the user’s rights regarding their personal data.

2. Contact – How can I get in touch?

If you have any questions about this privacy policy, you can contact Cakelicious through the following channels:

• The headquarters is located at the following address: Route de la Fonderie 2, 1700 Fribourg
• The email address for contact is: info@cakelicious.ch
• The contact phone number is: 026 912 00 19

Users can contact Cakelicious directly and effectively by writing to one of the addresses listed or by email at: info@cakelicious.ch. In addition, you will find below the contact information for the person responsible for processing your personal data:

• Brand name: Cakelicious
• Identity of the Data Controller: Cakelicious Shop SA
• Address: Route de la Fonderie 2, 1700 Fribourg
• Email address: info@cakelicious.ch

3. Processing Identification - How Do We Collect Personal Data?

In accordance with current regulations on the protection of personal data, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”).
• Canada's Anti-Spam Legislation (CASL) and the Personal Information Protection and Electronic Documents Act (PIPEDA).
• Switzerland's New Federal Data Protection Act (nDSG).

Cakelicious collects personal data in its possession when the user:

• (i). fills out the forms on https://cakelicious.ch/en/ ("Website");
• (ii) subscribes to the newsletter;
• (iii) responds to a survey or fills out a web form;
• (iv). fills out a printed form;
• (v). sends an email or calls, which are then entered into the appropriate forms.

4. Personal Data We Collect - What personal data do we collect?

Cakelicious collects information when you visit its website, primarily through the completion of its registration forms.

The following information is collected: full name, email address, phone number, date of birth, and address.

As a general rule, providing personal data to use a service or access certain content is not mandatory, except in cases where it is expressly stated that providing certain data is necessary for the provision of the service. In such cases, the user is free to decide whether to register and/or use the service.

The user represents and warrants that all data provided by him or her is true and accurate, and agrees to keep it up to date. Any changes may be reported to the Data Protection Officer or to the address specified in Section 2.

The user further acknowledges that the data required by Cakelicious is necessary, appropriate, and not excessive for fulfilling the purposes set forth in Section 5, which could not be fulfilled if this data were not provided.

The user is solely responsible for any false or inaccurate statements resulting from the information and data provided, as well as for any damages that such information may cause.

5. Purpose - Why do we use personal data?

The personal data you have provided will be used for the following purposes:

• To provide our service and fulfill your requests. We use your data to provide and maintain our service, to process and fulfill your requests, to communicate with you regarding your use of our service or changes to our service, to respond to your inquiries, and for other customer service and business administration purposes. For example, if you sign up for a newsletter, we may use your personal information to send you that newsletter.
• Identification and authentication purposes. We may use your data for identification and authentication purposes. For example, when you enter your account login ID and password to access one of our registration or login portals, we use your login information to authenticate your identity.
• Personalization. We use your data to tailor the content and information we send or display to you, to provide location-based services as well as personalized help and instructions, and to otherwise personalize your experience when using the service. For example, if you allow us to collect geolocation data, we use this information to provide content near your specific location and to identify business locations or listings near you.
• Marketing and promotional purposes. We may use your information to send you news, newsletters, and event updates; to communicate with you about new features, offers, events, or products; or to otherwise inform you about information we believe may be of interest to you. We may also use your information to display advertisements to you on our website (including the sale of advertising space on the Service) and on other unaffiliated websites and services.
• Research and Reporting. We may use your information to conduct surveys and questionnaires (online and offline) for research and reporting purposes, so that we can better serve individuals by learning more about their needs and the quality of the products, services, and educational information we provide. Survey responses may be used to determine the effectiveness of our service, various types of communication, advertising campaigns, and/or promotional activities.
• Combining Information. We (and our third-party business partners acting on our behalf) may aggregate, combine, or otherwise merge information, including your personal data, to further the purposes described above.
• To comply with legal obligations. We may use your information to comply with our legal obligations or to exercise or defend our rights or the rights of third parties, including responding to requests from law enforcement or government agencies and participating in compliance audits.
• To protect ourselves and others. We may use your information if we deem it necessary to investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, or situations that pose potential threats to a person’s safety, fraud, or situations that otherwise violate this policy, our Terms and Conditions, etc., or to otherwise uphold the integrity of the service.
• Anonymized Data. We may also anonymize your data in such a way that you cannot reasonably be re-identified by us or any other party, and we may use this anonymized data for any purpose permitted by applicable law. To the extent that we anonymize data that was originally based on personal data, we will retain and use that data in anonymized form and will not attempt to re-identify the data.

The data to be processed will not be used for purposes that conflict with or are incompatible with the purposes stated above and that motivated its collection. Notwithstanding the foregoing, please note that, in addition to the purposes for which it was expressly collected, the recorded data may be used for statistical analysis, incident management, or market research. However, if personal data is processed for a purpose other than the one originally specified at the time of data collection, Cakelicious will conduct a compatibility analysis in accordance with applicable regulations. Processing will only be authorized if the original purpose is compatible with the new purpose or is permitted under an independent legal basis. In such cases, users will be informed of any changes to the purpose or the legal basis for the processing of their data. We remind users that they may object to the sending of commercial communications (unsubscribe) and stop receiving emails from Cakelicious by reliably notifying Cakelicious, which will then cease such communications as soon as possible after receiving such notification. To do so, they may send an email to the address provided in Section 2, send a letter to the address listed in Section 2, or follow the unsubscribe instructions at the bottom of every email from Cakelicious.

We place great importance on protecting your personal information. You can find the privacy policy regarding credit checks and the billing of invoices or installments at https://www.ideal-payment.ch/datenschutz. 
It explains how we collect, use, and protect your data. This statement complies with the requirements of the Swiss Data Protection Act (DSG).

6. How do we use your information?

We will use the information we collect from you for the following purposes:

• Administrative Information
• Creating a User Account
• Customer Feedback Collection
• Enforcement of Terms and Conditions
• Managing Customer Orders
• Support
• Administrative Information
• Dispute Resolution
• Managing User Accounts
• Billing Processing: PayPal

If we wish to use your information for another purpose, we will ask for your consent and will use your information only after receiving your consent and then only for the purpose(s) for which you have given your consent, unless we are required to do so by law.

We will retain your personal information for an indefinite period after your user account becomes inactive, or for as long as we need it to fulfill the purposes set forth in this Privacy Policy.

7. Consent

By providing Cakelicious with personal data, the user agrees that Cakelicious may process such data in full and without restriction. The user hereby gives their free, explicit, and informed consent for Cakelicious to use the collected data for the purposes specified in Section 5 and to store it in a Cakelicious database.

Cakelicious processes the user’s data based on the following legitimate grounds: (i) the conclusion of contracts for Cakelicious services by the user in accordance with the terms and conditions provided to the user upon completion of the service request form (prior to any potential commitment), which the user (after reading them) may accept, if they agree, by checking the box provided for that purpose; and (ii) the user’s free, informed, and explicit consent of the user, given after reviewing this Privacy Policy, in which Cakelicious provides information about its processing of user data, and the user may grant consent by checking the box provided for that purpose in the service request form. The processing of data not covered by any of the above legal bases is carried out when Cakelicious deems it necessary to protect a legitimate interest and only if it does not infringe upon the user’s fundamental rights and freedoms.

8. The Expiration Date—How Long Do We Keep Them?

The data will be destroyed or archived when it is no longer strictly necessary or relevant for the purposes specified in Section 5 above. In particular, personal data will be retained for as long as the business relationship remains in effect (and to the extent that the user has not previously requested its deletion) and for the duration during which obligations, compensation, and/or liabilities may arise in connection with the business relationship or for the services provided. Cakelicious hereby notifies that it will retain the essential information identifying the source of the stored data for the duration of the customer relationship with Cakelicious and/or until the user revokes their consent, in accordance with the information in Section 5 of this Privacy Policy and/or for the period required by law.

9. Confidentiality / Disclosure / International Transfer — Do we share data with third parties?

Cakelicious will treat the personal data it collects as private and confidential and will not use it for purposes that conflict with those specified in Section 5. Cakelicious requires its employees and third parties provide services and who access the contents of the databases (or to include such obligations in the service agreements it enters into with such providers, as specified in the next paragraph) to sign confidentiality agreements and agreements regarding the processing of personal data.

The user’s personal data collected by Cakelicious will not be sold, exchanged, transferred, and/or disclosed to third parties outside of Cakelicious without the user’s consent, nor will it be used for any purposes other than those specified in Section 5, unless there is a legal obligation to do so or the purpose is to provide services to the user. This does not exclude certain employees and service providers who assist Cakelicious in keep the website operational, fulfill the purposes specified in Section 5, and/or provide services to the user, who have committed to maintaining the confidentiality of the data provided and to complying with applicable data protection regulations at the time of engagement. The contracts with service providers specify the purpose, scope, content, duration, nature, and purpose of data processing; the type of personal data; the categories of data subjects; and the obligations and responsibilities of Cakelicious and the third-party service providers.

Specifically: Cakelicious may share the personal information provided with parent companies, subsidiaries, affiliates, and/or intermediaries associated with Cakelicious.

Cakelicious may share certain personal information provided by the user internally within Cakelicious, with specific departments such as administration, marketing, or IT.

In certain cases, Cakelicious transfers personal data based on legitimate interests and the associated economic and technical benefits by using specialized service providers. In this regard:

• YouTube. The website contains links to YouTube for videos associated with Cakelicious's services. As provided in Section 13 herein, when using these links, the user leaves the website and is redirected to the YouTube page. The user can view YouTube’s privacy policy and other legal information at the following link: https://policies.google.com/privacy
• Facebook. Cakelicious has integrated Facebook components into its website. Specifically, Cakelicious uses the Facebook advertising platform. The company that operates Facebook’s services is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Users can view this company’s privacy policy and other legal information at the following link: https://de-de.facebook.com/about/privacy/.
• Instagram. The website contains links to Instagram. As provided in Section 13 herein, when the user clicks on these links, they leave the website and are redirected to the Instagram page. The user can view Instagram’s privacy policy and other legal information at the following link: https://help.instagram.com/155833707900388.
• LinkedIn. The website contains links to LinkedIn. As provided for in Section 13 herein, when the user clicks on these links, they leave the website and are redirected to the LinkedIn site. The user can view LinkedIn’s privacy policy and other legal information at the following link: https://www.linkedin.com/legal/privacy-policy.
• Google Analytics. Cakelicious uses Google Analytics for website analytics. This integration involves Google collecting the user's IP address and usage data. Users can view the Google Analytics Privacy Policy and other legal information at the following link: https://policies.google.com/privacy

Social networks. Cakelicious also uses social networks such as Facebook and Instagram and has integrated features from these networks into its services. Users may only use these social networks if they have registered with them and accessed the respective social network using their user account. These social networks have their own privacy policies and terms of service, over which Cakelicious has no influence or control.

Finally, you should be aware that Cakelicious may disclose your information in the following cases (and that Cakelicious reserves the right to do so):

• Business Transfer: If we or our subsidiaries are acquired by another company, merge with, or invest in another company, or if any of our assets are or may be transferred to another company—whether as part of bankruptcy or insolvency proceedings or otherwise—we may transfer the information we have collected about you to that other company. As part of the business transfer process, we may disclose certain information about you to lenders, auditors, and external advisors, including attorneys and consultants.
• Compliance with the Law: We may disclose your personal information to comply with the law, a legal proceeding, a court order, or other legal process, such as in response to a court order or subpoena.
• Protection and Enforcement of Rights: We may disclose your personal data if we deem it appropriate to investigate, prevent, or take action against illegal activities, suspected fraud, situations that could pose a potential threat to a person’s safety, or violations of our Terms and Conditions or this Policy. Such disclosure may also include the use of your personal data as evidence in legal proceedings in which we are involved. In addition, we may disclose your personal data if necessary to assist you in exercising your rights under Cakelicious’s Terms and Conditions and this Privacy Policy.
• Reasons related to public safety, national defense, or public health: In situations where there are valid reasons related to public safety, national defense, or public health, your personal data may be disclosed.
• Aggregated, anonymized, or de-identified information: We may disclose aggregated, anonymized, or de-identified information about you for any purpose permitted by applicable law.
• Consent: We may share your personal data with your consent.

10. Security - How do we ensure data security?

Cakelicious states its commitment to taking the necessary technical and organizational measures to ensure the security, integrity, and confidentiality of data in accordance with the provisions of the GDPR, PIPEDA-CASL, and Switzerland’s revDSG, in order to prevent its alteration, loss, disclosure, or unauthorized processing.

Cakelicious does not guarantee absolute privacy when using the website, as it cannot be ruled out that unauthorized third parties may gain access to the information. The user acknowledges that the existing technical measures to ensure security are not invulnerable and that, even when all reasonable security precautions are followed, manipulation, destruction, and/or loss of information is possible. Should a security incident be detected that poses a significant risk to the data subject, this incident will be reported without delay to the competent supervisory authority, along with the corrective and mitigating measures that have been implemented and/or are to be implemented.

Cakelicious is not responsible for any loss or deletion of data by users. Likewise, Cakelicious assumes no responsibility for any damage caused by computer viruses.

Finally, users must also take steps to protect their information. Cakelicious emphasizes that when browsing the Internet, you should take all necessary precautions to protect your personal information. At a minimum, you are advised to change your password regularly, use a combination of letters and numbers, and ensure that you are using a secure browser.

11. Data Subject Rights and Procedures for Exercising Them - What rights do I have as a data subject?

The user, who is the data subject, may at any time exercise the rights of access, rectification, erasure, objection, restriction of processing, portability, confidentiality, and erasure with respect to their personal data, in accordance with the provisions of Articles 15 et seq. of the GDPR, the provisions of PIPEDA-CASL, and the provisions of the Swiss revDSG, as applicable.

Users may exercise these rights themselves by sending an email to info@cakelicious.ch, or by using one of the methods provided for in the applicable regulations mentioned above. Cakelicious may request the necessary information to verify the data subject’s identity.

Certain data will not be deleted if doing so could infringe on the legitimate rights or interests of third parties, or if there is a legal obligation to retain the data.

If you are a resident of the United Kingdom or the EEA and are subject to national or local legal exceptions, you have certain data protection rights under specific circumstances. Please contact us if you wish to exercise any of these rights.

• You may withdraw your consent at any time. Users have the right to withdraw their consent if they have previously consented to the processing of their personal data.
• Objection to the Processing of Your Data. Users have the right to object to the processing of their data if the processing is based on a legal basis other than consent.
• Access to Your Data. Users have the right to know whether the data controller is processing their data, to obtain information about certain aspects of the processing, and to receive a copy of the processed data.
• Review and Request Correction. Users have the right to verify the accuracy of their data and to request that it be updated or corrected.
• Restricting the Processing of Your Data. Users have the right to restrict the processing of their data. In this case, the data controller will not process their data for any purpose other than storage.
• Have your personal data deleted or otherwise removed. Users have the right to request that the owner delete their data.
• Receive your data and have it transferred to another data controller. Users have the right to receive their data in a structured, commonly used, and machine-readable format and, where technically feasible, to have that data transmitted without hindrance to another controller .
• File a complaint. Users have the right to file a complaint with their competent data protection authority.

12. Training—Are We Training?

"Cakelicious staff whose duties involve the processing of personal data receive training to ensure better protection of personal data and the rights of data subjects."

13. Links to Third-Party Providers - Does our website contain links to other websites?

The website may contain links to third-party websites, with or without an advertising context, whose privacy policies are independent of Cakelicious. The linked sites are not affiliated with Cakelicious, and their presence in no way implies any kind of suggestion, invitation, or recommendation to visit those sites, nor does it imply any kind of link or connection between Cakelicious and such sites. Cakelicious is not responsible or liable for the content, use, or activities of these linked websites, nor for any damages—whether current or future, whether material or moral, direct or indirect, suffered by users and resulting from the information contained on such sites or from the relationships users may enter into with third parties whose services are advertised on the website. Notwithstanding the foregoing, any feedback regarding these linked websites would be helpful to Cakelicious in improving its services and/or ensuring the integrity of the website. Cakelicious undertakes to do everything in its power to prevent the existence of links to websites with illegal content on its website.

14. Privacy Policy for Children

At Cakelicious, we recognize the importance of protecting children’s privacy. Our commitment to protecting the personal information of minors is unwavering. We may collect and process personal information from children under the age of 13, but only in compliance with all applicable laws and regulations, including obtaining the necessary consent from parents or legal guardians.

If you are a parent or legal guardian and believe that we have collected your child’s personal information without the appropriate consent, please contact us immediately. We will then take immediate action to resolve the situation.

For California residents: We do not sell personal information of California consumers who are 16 years of age or younger, unless we have obtained prior parental consent. If your child is under 13 years of age, we require parental or guardian consent to collect and process their personal information. If your child is between 13 and 16 years of age, they may consent to the sale of their personal information. Our websites and services designed for children include age verification and ensure that the necessary consents are obtained.

For EU citizens: We do not collect or process personal data from individuals in the EU under the age of 16 without the express consent of a parent or legal guardian. Our websites and services directed at children include age verification and require the appropriate consents.

15. Cookies - Do We Use Cookies?

When a user visits the website, Cakelicious may store certain information on their computer in the form of a "cookie" file or a similar file. The website uses cookies to (i) track advertising, (ii) collect data about website traffic, and (iii) improve the user experience when using the website.

Users should be aware that it is not necessary to allow the installation of cookies sent by the website in order to browse the site. This may only be required for certain services. Users can delete cookies from their computer’s hard drive or prevent access to their computer, either through their browser or by selecting the appropriate option when asked whether they consent to the use of cookies for these purposes and in accordance with Cakelicious’s Cookie Policy.

Cookies are information files that a website or the provider of certain services on the website transfers to the hard drive of the user’s computer via the browser. Cookies themselves cannot personally identify the user (although they may contain the user’s IP address); rather, they enable the website to recognize the user’s browser and to capture and store certain data (the user’s operating system, the domain name of the website from which the user was referred to the website, etc.). Cakelicious reserves the right to engage third-party services to analyze and understand website users; these third parties are not permitted to use the collected information for any purpose other than improving Cakelicious services.

16. Consent

The user's use of the website implies knowledge of and full acceptance of Cakelicious's Privacy Policy and Terms of Use, if applicable. Likewise, by completing the service request, the user accepts Cakelicious's Privacy Policy and Terms of Use.

17. Changes - Is this the latest version?

This is the current version of Cakelicious's Privacy Policy, updated on July 1, 2024.

Cakelicious may amend the Privacy Policy at any time and without prior notice. Such amendments will take effect upon their publication on the website or upon notification to users by any means, whichever occurs first. Users must stay informed about the terms and conditions contained herein by regularly visiting this page.

Version: 5/2025 as of 05.07.2025