Privacy

Controller and contact.

Boxenstop GmbH, Lotzwilstrasse 66, 4900 Langenthal, Switzerland. Email: bowling@dermeilenstein.ch. Telephone: +41 62 919 01 14.

Website and hosting.

The website and its database run on a Hetzner server in Nuremberg, Germany. The technical hosting provider is Hetzner Online GmbH, Germany. IP addresses, timestamps, requested addresses, browser information and technical errors are processed to provide and secure the website. Access logs rotate daily; the normal rotation keeps 14 older logs. Longer retention may be necessary to investigate a specific security incident. Fonts, website images and our own videos are served from our server.

Bowling, event and contact enquiries.

Forms collect the contact and event details you enter, such as your name, email, phone number, preferred date, party size and message. Details are stored in the protected CMS and used by the relevant staff to handle your enquiry, check availability and contact you. Meilenstein event advisers may be involved in joint event planning. Your enquiry only becomes a confirmed reservation after our explicit confirmation. Handling your enquiry does not depend on permission for statistics cookies.

Table reservations through TheFork.

For table reservations, we load the widget from widget.thefork.com. TheFork receives technical connection data, including your IP address and browser information. Contact and booking details you enter there are sent directly to TheFork; availability, booking and confirmation are handled through TheFork. The restaurant receives the information required to handle the reservation. The privacy information and booking terms linked in the TheFork widget also apply. New table reservations are no longer stored through our own enquiry form. We do not report loading the widget to Google Analytics as a successful booking.

Applications and retention.

Documents sent to the contact named in a job advertisement are used to process your application. Enquiries and applications are retained for as long as necessary for processing, legal obligations or the protection of legitimate claims. They must then be deleted or anonymised. You can request access or deletion using the contact above, subject to mandatory retention obligations.

Necessary storage and cookie choices.

Protected CMS access uses a session cookie lasting up to twelve hours. To display the enquiry confirmation, your browser stores only an internal reference, enquiry type and timestamp in the current tab, not form contents. The confirmation is treated as current for up to 30 minutes; tab storage ends when the tab closes. Your statistics choice is stored locally and requested again after at most 180 days. You can change it through “Cookie settings”. Necessary functions remain available when you reject all optional cookies.

Google Analytics 4 – only with consent.

Google Analytics 4 is only loaded after you actively agree. We measure viewed pages, social-campaign sources and successfully saved enquiries. Google receives usage and technical connection data and uses a cookie identifier. Statistics cookies are limited to 180 days after their last update. We do not send form contents, names, email addresses, phone numbers or internal enquiry references as Analytics events. Automatic form collection, Google Signals and ad personalisation are disabled. Direct visits or reloads of the thank-you page are not new enquiry conversions.

Google as recipient and international processing.

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the United States is also possible. Use is governed by the agreed Google data processing terms and applicable rules on international transfers. You can withdraw consent for future processing through “Cookie settings”; we then block further Analytics measurement and remove Analytics cookies accessible to our website. Information: https://policies.google.com/technologies/partner-sites. Browser opt-out: https://tools.google.com/dlpage/gaoptout.

Social media and planned marketing integrations.

Meta/Facebook/Instagram, TikTok and LinkedIn are prepared as future CMS integrations. None of these marketing pixels is currently loaded on the website. The services actually used and the consent choices will be specified before activation. Ordinary social-profile or Google Maps links take you to the relevant provider when clicked; that provider’s privacy rules then apply.

Access, protection and your rights.

Relevant staff access enquiries; technical providers have access where required to operate the service. Secret integration tokens are encrypted in the protected server area and are not published in public website settings. Subject to applicable law, you may request access, correction, deletion and, where applicable, delivery or transfer of your data. You can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, rights of withdrawal, objection and complaint to the competent supervisory authority remain available. Contact: bowling@dermeilenstein.ch.