Privacy Policy
General
Last updated: April 2025
Scope: This privacy policy applies to the website byca.ch and all associated subpages (Guide, What's On, Collective).
Controller
BYCALMA GmbH
Bahnhofplatz 1
8001 Zurich
Switzerland
Email: info@byca.ch
Website: https://www.byca.ch
General information on data processing
We take the protection of your privacy very seriously. We treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy.
According to Article 13 of the Swiss Federal Constitution and the data protection regulations, everyone has the right to the protection of their privacy and protection against the misuse of their personal data. We comply with these regulations.
Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.
Our website is hosted by an external provider (Wix.com Ltd.). The personal data collected on this website is stored on Wix servers located in the EU, USA, and Israel.
Collection and purpose of data processing
We collect and process personal data in the following cases:
-
Visiting our website (automatically collected usage data)
-
Using our contact form
-
Subscribing to our newsletter
-
Booking events through BYCA What's On
-
Purchasing products via BYCA Collective
Purposes:
-
Providing and improving our website
-
Communicating with users
-
Processing ticket purchases and orders
-
Marketing (e.g. newsletters)
-
Security and error analysis
Categories of processed data
First and last name
Email address
Shipping and billing address
Telephone number (optional)
Payment information (via third-party providers)
IP address, browser data, device data
Website usage (page views, clicks, duration)
Legal bases of processing
Contract fulfillment (e.g. event bookings, orders)
Consent (e.g. newsletter, marketing tracking)
Legitimate interest (e.g. technical security, web analytics)
Legal obligations
Cookies and tracking technologies
Our website uses cookies. Cookies do not damage your device and do not contain viruses. They serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your device and saved by your browser.
Most of the cookies we use are “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can configure your browser to notify you about cookie usage and allow cookies only in individual cases, exclude cookies in certain cases or in general, and automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of this website.
We use cookies particularly in connection with the following services:
Third-party providers and tools
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies that are stored on your computer and allow an analysis of your website usage. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
We use Google Analytics with IP anonymization enabled. This means that your IP address is shortened by Google within Switzerland, the EU, or EEA before transmission. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.
Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage.
You can prevent cookies from being stored by adjusting your browser settings. You can also prevent Google from collecting data generated by the cookie and related to your website use (including your IP address) and from processing this data by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout
More information: https://policies.google.com/privacy
Meta Pixel
We use the Meta Pixel (formerly Facebook Pixel), an analytics tool provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
This tool allows us to track user behavior after they click on a Facebook or Instagram ad and are redirected to our website. This helps us measure the effectiveness of Meta ads for statistical and market research purposes. The data collected is anonymous to us—we do not see individual user data. However, Meta may associate this data with your user account and use it for its own advertising purposes in accordance with its data policy.
Meta’s privacy policy: https://www.facebook.com/about/privacy
You can disable tracking in your Meta ad settings: https://www.facebook.com/settings/?tab=ads
ConvertKit (Newsletter)
We use ConvertKit (ConvertKit LLC, USA) to send newsletters. The data you provide during sign-up (name, email address) is stored on ConvertKit’s servers. We use this data solely for newsletter delivery. You can unsubscribe at any time using the link provided in each email.
ConvertKit privacy policy: https://convertkit.com/privacy
Embedded content (YouTube, Instagram, Google Maps)
We embed third-party content such as YouTube videos, Instagram reels, and Google Maps. When you view such content, your IP address and browser data may be sent to the respective provider. If you're logged into your user account with that provider, your visit may be linked to your personal profile.
More information:
-
YouTube (Google LLC): https://policies.google.com/privacy
-
Instagram (Meta): https://privacycenter.instagram.com/policy
-
Google Maps: https://policies.google.com/privacy
Payment providers: Stripe, TWINT, Wix Payments
Payments in our shop are handled by:
-
Stripe: https://stripe.com/ch/privacy
-
Wix Payments: https://www.wix.com/about/privacy
Data retention periods
-
Order and booking data: 10 years (statutory retention)
-
Newsletter data: until consent is revoked
-
Contact forms: 12 months after completion
-
Analytics data: depending on the tool (up to 26 months)
Data disclosure and international transfers
We only share personal data if:
-
it is necessary for contract performance
-
we are legally obligated to do so
-
you have given consent
Some data may be transferred to the USA or other countries. We ensure appropriate safeguards (e.g. EU standard contractual clauses).
Your rights
You have the following rights under Swiss and EU data protection laws:
-
Access to your data
-
Correction
-
Deletion (“right to be forgotten”)
-
Restriction of processing
-
Data portability (if technically feasible)
-
Objection to specific processing
-
Withdrawal of consent
For inquiries: info@byca.ch
SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content such as orders or inquiries. You can recognize an encrypted connection by the lock icon in your browser and the switch from “http://” to “https://” in the address bar.
When SSL/TLS encryption is activated, transmitted data cannot be read by third parties.
Updates and changes
We may update this privacy policy at any time. The current version is available at:
https://byca.ch/privacy-policy