Privacy notice
We process only the personal data required to operate the website, answer enquiries, organise events and bookings, and provide the updates you choose to receive. This notice explains which data is involved and how it is used.
Swiss data-protection law (revDSG) applies; the EU GDPR applies where relevant.
1. Controller
smallest themepark, Michael & Samuel, Switzerland · welcome@smallestthemepark.com
2. Contact and general enquiries
Through the enquiry form and by email we receive name, email address, optional phone number, company or organisation, message content, selected topic, language and the time of the enquiry. The details go into our helpdesk so Michael and Samuel can reply.
3. Photo shoots and professional productions
We may also store preferred dates, group size, project and publication details, website or social-media links, and notes on equipment, set-ups and budget.
4. Knights’ Hall (Ritterstube)
For a game-session enquiry we store date, duration, number of people, session details and whether minors will attend or professional recording is planned.
5. Corporate Christmas party
For a quote or booking we may process contact and billing address, company, group size, date, food, drinks and quantities, messages, special requests and allergy or dietary notes if you provide them, plus offer, payment and processing status.
6. Events, pre-registration and prize draws
Name, email and optional phone number, age, number of adults and children, chosen event, confirmed location and terms notices, and ticket, prize or pre-registration status.
7. Guest-room survey
Chosen theme or your own idea, name and email, optional phone number, chosen contact type and, for a reservation of interest, number of people, nights and period.
8. Supporters and Stripe
Name, email, optional phone number, contribution, term and payment status. We store Stripe customer, session or transaction references where needed to match a payment or subscription. Some bookings may store card brand and last four digits – not full card data on our server. The name you want on the supporter wall, or anonymity, and any separately given consent for supporter updates are stored.
9. Partnerships and media enquiries
Business contact details, company, publication or organisation, and project, product, deadline and rights information you enter in the form.
10. Server logs, security and reach measurement
- Our hosting in Switzerland logs requests (IP address, time, page) for operational security. We do not state a fixed public deletion period; the logs support day-to-day operations.
- Cloudflare Turnstile protects forms from spam. Technical data such as the IP address may be sent to Cloudflare.
- We count page views ourselves, without marketing cookies and without storing the plain IP address. Visits are distinguished with an anonymised, daily-changing identifier.
- Strictly necessary cookies appear in protected areas, for example admin sign-in or the media kit.
11. Machine translation
In the internal helpdesk, foreign-language message text may be sent to OpenAI (USA) for translation. This is triggered by us, not automatically on every form submission. The message text is transferred, not an extra enrichment of your contact details.
12. Consents
Newsletter, supporter updates and guest-room updates are treated separately. Checkboxes are not pre-ticked. Sending an enquiry is not a newsletter sign-up. You can unsubscribe via the link in the relevant email or by writing to us.
13. Retention
We keep personal data for as long as the purpose and legal duties require – for example accounting and payment records. We do not invent a blanket deletion period. Newsletter entries can be cancelled at any time. Closed enquiries can be deleted when no retention duty remains.
14. Rights and contact
You have the right to access, rectification and erasure, and to object to processing. Email welcome@smallestthemepark.com.
Updated: 3 September 2026