Privacy policy
Thank you for visiting mafia-club.ch and for your interest in Mafia Family Club. This policy explains what personal data we collect, how and why we process it, the recipients and countries involved, and how long we keep it. It is intended to provide the information required by the Swiss Federal Act on Data Protection (FADP), in particular Article 19.
1. Owner and controller
The controller responsible for deciding the purposes and means of processing is:
Mykhaylo Pliskin
Chemin de Fayards 10
1264 Saint-Cergue
Switzerland
Email: admin@mafia-club.ch
Telephone: +41 79 153 70 15
2. Provision of the website and server logs
When a page or file is requested, the hosting and network infrastructure may process the IP address, date and time, requested URL or file, referring page, browser and device information, response status and transferred data volume. The application does not combine these server logs with booking or contact records.
This processing is necessary to deliver the website, maintain compatibility and availability, diagnose faults, prevent abuse and attacks, and protect the website and its users. The application does not maintain its own visitor-log database. Technical logs are retained by the relevant infrastructure providers under their operational settings and are deleted or overwritten when no longer required for operation, security, troubleshooting or legal obligations.
3. Bookings
3.1 Data collected
For an online booking, we collect the number of players, preferred game language, your name, email address, telephone number, an optional request or comment, the website-interface language, acceptance of the Terms and this Privacy Policy, and any optional marketing choice. If the organiser records a booking made by telephone, in person or through another agreed channel, the record contains the information provided for that booking, including the name and at least an email address or telephone number; it also records the booking source, agreed payment method and whether payment has been received. We generate and store the assigned game and table, booking type, price and discount, booking and payment status, refund information, booking references, private management token, relevant timestamps and email-delivery records.
Your name, email address, telephone number and comment are encrypted in the application database. Where an email address is provided, a keyed, one-way index derived from the normalised address is stored to identify repeat bookings without searching encrypted text.
3.2 Purposes
We process this information to enter into and perform the booking contract, reserve capacity, allocate a table, calculate and collect payment, communicate changes, administer cancellations and refunds, record acceptance of applicable documents, maintain attendance and accounting records, prevent abuse, resolve disputes and comply with legal obligations. Required fields are necessary to process a booking.
3.3 Retention and automatic anonymisation
Booking and transaction records can be required as accounting records for ten years, calculated from the end of the relevant financial year. To implement this period conservatively, the application performs a daily retention check for customer records that can be linked through an email address. On 1 January each year, those records become eligible after ten complete calendar years have elapsed since the calendar year of the game.
The check groups bookings using the keyed email index. It does not anonymise a customer's records if that customer has a later booking or if an authorised administrator has recorded a time-limited retention hold for an unresolved contract, legal claim or other documented overriding requirement. A manual booking containing only a telephone number has no email index and is not currently included in this automatic grouping; such records require separate review and deletion or anonymisation when no retention purpose remains. Once no continuing purpose or hold applies and the applicable retention process is completed, the application irreversibly removes encrypted names, email addresses, telephone numbers and comments; email lookup indexes; participant identifiers and notes; private booking URLs; and Stripe cross-reference identifiers and free-text payment-event details. Random references are replaced. The non-personal booking, price, payment-status, refund-status, consent-version and accounting structure is retained without a customer identifier for aggregate and audit integrity.
4. Payment processing
Online payments made through mafia-club.ch are processed using embedded Stripe Checkout. We send Stripe the customer's email address, amount and currency, booking reference, booking type or seat count, and event date and time. Stripe processes card and transaction information, connection data, authentication information and fraud-prevention signals under its own privacy information. Mafia Family Club does not receive or store complete card numbers or card security codes.
We receive Stripe Checkout Session, PaymentIntent, event and refund identifiers together with statuses, amounts, failure or pending reasons and notification timestamps. They are used to confirm payments, administer refunds, prevent duplicate event processing and maintain transaction records, and are scrubbed from customer-linked application records under the retention process described above.
For a booking recorded by the organiser, the application may instead record an agreed offline payment method, such as cash, bank transfer, TWINT, a card payment outside the website, complimentary entry or another method, together with the amount and payment/refund status. The application does not collect the credentials used to make those external payments. The organiser handles any required offline refund directly.
5. Contact form and email
The contact form collects your name, email address, enquiry and website-interface language so that we can send the enquiry to the organiser, reply and send a confirmation copy. The enquiry is transmitted through the organiser's email provider and is not ordinarily written to the application database. Copies can remain in sender and recipient mailboxes and backups until deleted under applicable mailbox-retention practices.
If you select the separate marketing option, your encrypted name, email address and enquiry are additionally stored as a contact record. Contact-only marketing records are removed when consent is withdrawn or the record is no longer required; they are not accounting records and are not kept merely because the ten-year booking period exists.
6. Marketing communications
The website currently has no feature that generates or circulates marketing emails. It sends only operational messages such as enquiry copies and booking, payment, cancellation and refund notifications. The optional, unticked marketing choices currently record a person's interest and consent for a possible future service; selecting them has no effect on booking eligibility or responses to enquiries.
If marketing communications are introduced, each message will provide an easy and free means to unsubscribe. Any required consent and evidence process will be implemented before marketing emails are sent. You may withdraw an existing marketing choice now by contacting admin@mafia-club.ch; the stored marketing contact record will then be removed unless another legal reason requires it.
7. Cancellation and participant records
The customer cancellation page is reached through the private link for an existing booking and asks only for confirmation. Submission updates the existing booking and payment status and, where applicable, initiates and reconciles a Stripe refund or records that an offline refund requires manual handling, and sends an operational email where an email address is available.
An authorised administrator may cancel an individual booking, close a table or cancel a game. The application records the host-cancellation reason and time, updates availability and payment/refund status, requests an eligible Stripe refund or flags an offline refund for manual handling, and sends an operational email where an email address is available. If only a telephone number was provided, the organiser must communicate directly with the customer.
For game administration, participant records can be connected with a booking, session and table. They may contain encrypted name, email address, telephone number and notes, a keyed email index, attendance time and whether the person contacted us, booked or attended. Customer-linked participant information is included in the automatic anonymisation process described in section 3.3.
8. Recipients and international data transfers
We disclose personal data only where necessary for the purposes described in this policy, where required by law, or to establish, exercise or defend legal claims. Where a provider processes data on our behalf, it is engaged under the applicable contractual data-processing terms.
| Service and provider | Data and purpose | Countries or regions |
|---|---|---|
| Application hosting — Heroku / Salesforce group (US-headquartered) | Application requests, operational logs and the running service | Primary application region: Germany (EU, Frankfurt). Provider administration, support and subprocessors may involve the EU and the USA. |
| Database — Neon (US provider) | Application database, including encrypted booking and participant fields | Primary database region: Germany (EU, Frankfurt). Provider administration, support and subprocessors may involve the EU and the USA. |
| Payments — Stripe group | Checkout, card processing, fraud prevention, transaction events and refunds | EU and USA; Stripe also operates a global payment network where transaction routing or legally required processing may involve other countries disclosed by Stripe. |
| Email — Infomaniak | Transmission and mailbox storage of booking, payment and contact emails | Switzerland; transmission to a recipient's own email provider can involve that provider's countries. |
| Maps — Google Ireland / Google LLC | Interactive map and directions, only after the visitor actively loads the map or opens the external Maps link | EU and USA; Google operates globally and may process map requests in other locations identified in its privacy information. |
Germany and other EU/EEA states are recognised by Switzerland as providing an adequate level of protection. For a disclosure to a US recipient, we rely on an applicable lawful safeguard, such as the recipient entity's active participation in the Swiss–U.S. Data Privacy Framework where the transfer is covered by that certification, or recognised contractual safeguards where required. Certification and contractual coverage are reviewed against the relevant provider terms and official registers rather than inferred solely from a provider's corporate headquarters.
We may also disclose information to professional advisers, courts, public authorities, debt-collection providers or other recipients where legally required or reasonably necessary to protect our rights. Their location depends on the matter, but for ordinary Swiss operations these recipients are generally in Switzerland.
9. Consent-controlled Google Maps
The Contact page initially displays a local placeholder rather than a Google Maps iframe. The browser contacts Google and loads the interactive map only after you select “Allow Google Map” or “Load Google Map.” If you keep the map disabled, no Google Maps request is made by the embedded map. The separate directions link contacts Google only if you choose to open it.
When loaded, Google Maps can receive your IP address, browser and device information, referring page and, depending on your Google settings and interaction, Google identifiers, account information, location or route information. The site does not integrate Google Analytics, Google Ads or DoubleClick for its own analytics or advertising.
10. Cookies and local browser storage
The website uses limited first-party browser storage for security, interface language, short-lived status messages and the Google Maps privacy choice. It does not use first-party analytics or advertising cookies.
| Name | Purpose | Approximate duration | Type |
|---|---|---|---|
| csrftoken | Protects forms against cross-site request forgery. | Approximately 12 months. | Security cookie |
| django_language | Remembers the selected interface language. | Approximately 12 months. | Preference cookie |
| messages | Carries a success or error message across a redirect. | Removed after it is read or expires. | Functional cookie |
| mafiaClubLanguage | Remembers the interface language as a fallback. | Until cleared in the browser. | Local storage |
| mafiaClubGoogleMapsConsent | Remembers whether you allowed or declined the external Google Map. | Until cleared in the browser. | Local storage |
You can delete or restrict cookies and local storage through browser settings. Blocking the security cookie can prevent forms from working. Loading Stripe Checkout or consenting to Google Maps may allow those providers to use their own storage under their privacy information.
11. Data security
We use technical and organisational measures intended to protect personal data. Booking and participant contact fields are encrypted at application level, access is restricted to authorised administrators, production traffic uses HTTPS, and complete payment-card details are handled by Stripe. No transmission or storage method is completely secure. Ordinary email can pass through multiple systems and should not be used for highly confidential information.
12. Your rights
Subject to applicable conditions and exceptions, you may request information about personal data processed about you, a copy, correction, deletion, restriction or cessation of processing, withdrawal of consent, or delivery or transfer in a commonly used electronic format where portability requirements are met. We normally verify a request using the email address or telephone number associated with the booking and request stronger evidence only where reasonably necessary. We may postpone deletion where retention is required by law or a documented overriding interest.
Requests may be sent to the controller using the contact details in section 1.
13. Complaints
You may contact us first so that we can investigate. You may also contact or make a report to the Swiss Federal Data Protection and Information Commissioner (FDPIC). Further information is available at www.edoeb.admin.ch.
14. Document status and changes
This is a static privacy policy. It does not update automatically. We review it when the website, its providers or its processing activities change.
Last edited: 12 August 2026