PRIVACY POLICY | Grazia's Baking

Last updated: 13 October 2026

This policy explains which personal data I collect when you use graziasbaking.com, book a workshop or get in touch, what I use it for, and what rights you have. It follows the Swiss Federal Act on Data Protection (FADP).

Who is responsible

Grazia De Martino, Grazia's Baking Freilagerstrasse 86, 8047 Zürich, Switzerland support@graziasbaking.com · +41 76 496 42 68

For any question about your data, write to the email address above.

What data I collect and why

When you visit the website. My website runs on Wix. When you visit it, technical data such as your IP address, browser, device, the pages you view and the time of your visit are processed to deliver the site, keep it secure and understand how it is used.

When you contact me. If you write to me by email, WhatsApp or through a form on the site (for example "Request a Proposal"), I use your name, contact details and what you tell me about your event to reply and to prepare an offer.

When you book a workshop, event or Sourdough Doctor session. I use your name, email, phone number and booking details to manage your booking, send you practical information and, where needed, issue an invoice. Payments are handled by the payment provider; I do not see or store your full card details.

When you subscribe to my newsletter. I use your name and email address to send you seasonal recipes and workshop news. You can unsubscribe at any time with the link in every email.

When you join my WhatsApp community. Your name, phone number and the messages you share are visible to me and to the other members. WhatsApp is run by Meta, under its own privacy policy.

Photos during workshops. I sometimes take photos during workshops for my website and social media. I ask for your consent during the event and only publish photos in which you can be recognised if you agree. You can ask me to remove them at any time.

Links to social media. My site links to Instagram and Facebook. When you click these links, those platforms process your data under their own policies.

I do not sell your data, and I do not use it for automated decisions or profiling.

Services I use

I work with a few trusted providers who process data on my behalf:

Provider

What for

Where data may be processed

Wix.com Ltd.

Website, forms, bookings, event tickets, newsletter

Israel, and other countries including the EU and the USA

Wix Payments (Wix and its payment partners)

Payments for bookings and tickets

Israel, EU and USA

Google Workspace (Google)

Email and calendar

EU and USA

bexio AG

Offers and invoices

Switzerland

WhatsApp (Meta)

Messages and WhatsApp community

EU and USA

Data sent abroad

Some of these providers process data outside Switzerland. Israel and the countries of the EU are recognised by Switzerland as offering adequate data protection. For other countries, such as the USA, the providers rely on standard contractual clauses or similar safeguards recognised under Swiss law.

How long I keep your data

I keep enquiries and booking data for as long as needed to handle your request or booking, and then for up to two years in case you book again. Invoices and accounting records are kept for ten years, as Swiss law requires. Newsletter data is kept until you unsubscribe.

The website uses cookies that are needed for it to work, and cookies that help me understand how visitors use it. You can accept or refuse the non-essential cookies in the cookie banner, and you can delete cookies in your browser settings at any time.

Your rights

You can ask me at any time:

which data I hold about you and how I use it;
to correct data that is wrong;
to delete your data, unless I must keep it by law;
to receive your data in a common format;
to stop using your data for the newsletter or other purposes you agreed to.

Just write to support@graziasbaking.com. I may ask you to confirm your identity. If you think I have not handled your data correctly, you can contact the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

Security

I take reasonable technical and organisational measures to protect your data, and I only share it with the providers listed above.

Changes to this policy

I may update this policy when my services change. The date at the top shows the latest version.