Privacy Policy

HELLO Party — helloparty.ch

Last updated: 25.08.2026

This Privacy Policy explains how HELLO Party (hereinafter "we", "us", "our") collects, uses, discloses and protects your personal data in accordance with the Swiss Federal Act on Data Protection (FADP / DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

HELLO Party Oleksandr Shaulskyi / Oryna Shaulska Rietlistrasse 11, 8172 Niederglatt, Switzerland

UID: CHE-412.589.211 / UID: CHE-184.864.403  
Email: info@helloparty.ch Website: https://helloparty.ch

2. What Data We Collect

Identification and contact data Full name, email address, telephone number, postal or billing address.

Event data Date, time and venue of the event, type of programme selected, number of guests, ages of the children attending, and any specific wishes you communicate to us.

Data about children attending the event First name and age of the child or children. If you choose to provide it, information about allergies, dietary requirements or other health-related needs. Such information constitutes sensitive personal data under Art. 5(c) FADP and Art. 9 GDPR and is processed only with your explicit consent (see Section 7).

Communication data The content of your correspondence with us by email, telephone, WhatsApp, our online form, or messages via social media, including the date and time of such communication.

Payment and billing data Invoicing details, payment references and confirmation of deposit payments made by TWINT or bank transfer. We do not collect or store credit card numbers.

Photographic and video material Photographs and video recordings taken at events we organise (see Section 9).

Technical data IP address, browser type and version, operating system, device type, referring page, and date and time of access to our website.

Data concerning third parties Where you provide us with personal data relating to other individuals — for example children attending the event, other parents, or a venue contact — you confirm that you are authorised to share this data and that you have informed those individuals about this Privacy Policy.

3. How We Use Your Data

• Responding to inquiries and preparing offers
• Concluding and performing the contract for our services
• Planning, organising and delivering events
• Ongoing communication with clients before, during and after an event
• Ensuring the safety and wellbeing of children at our events
• Invoicing, payment processing and accounting
• Complying with legal, tax and administrative obligations
• Operating, securing and improving our website
• Marketing and promotion of our services, including publication of photographic material, where you have given your consent
• Asserting or defending legal claims

4. Legal Basis

Under Swiss data protection law, the processing of personal data does not generally require a specific legal basis, provided the processing is lawful, proportionate, carried out in good faith and consistent with the purposes communicated to you. Where consent is required — in particular for sensitive personal data, for non-essential cookies, and for the publication of photographic material — we obtain it separately and explicitly.

Where the GDPR applies, we rely on:

• Consent — Art. 6(1)(a) and, for sensitive data, Art. 9(2)(a) GDPR
• Performance of a contract — Art. 6(1)(b) GDPR
• Compliance with a legal obligation — Art. 6(1)(c) GDPR
• Legitimate interests — Art. 6(1)(f) GDPR

5. Recipients and Data Sharing

We do not sell, rent or trade your personal data. We handle our own bookkeeping; no external accounting firm is involved.

We disclose personal data only where necessary for the purposes described above, and only to the following recipients:

• Hosting Ukraine LLC (ТОВ «Хостінг Україна»), Kyiv, Ukraine — operation of our website, our email accounts and our internal quotation application; the servers are located in Germany (see Sections 6, 8 and 16)
• Tally BV, Ghent, Belgium — provider of our online inquiry and booking form (see Section 7)
• Google Ireland Ltd., Ireland — website analytics, subject to your consent (see Section 13)
• Meta Platforms Ireland Ltd., Ireland — advertising measurement, subject to your consent (see Section 14)
• Payment service providers and banks — processing of deposits and payments
• Entertainers, animators and partner suppliers engaged for your event (for example decoration, catering or equipment partners) — these recipients receive only the information required to carry out their part of the event, such as the date, venue, programme and any relevant safety information
• Authorities, courts and legal advisers — where we are legally obliged to disclose data or where disclosure is necessary to assert or defend legal claims

Service providers acting on our behalf process personal data as processors, on the basis of a data processing agreement, and may not use the data for their own purposes.

6. Transfers Abroad

EU and EEA. Transfers to recipients in the EU and the EEA — in particular to Tally BV (Belgium) and to our hosting provider's servers located in Germany — take place on the basis of an adequate level of data protection as recognised in Annex 1 of the Swiss Data Protection Ordinance (VDSG).

Ukraine. Our hosting provider is a company established in Ukraine; the servers are located in Germany. As the provider, being a Ukrainian company, has administrative access to the systems, a disclosure to a recipient in Ukraine takes place. Ukraine is not covered by an adequacy decision under Annex 1 VDSG. We limit the data processed on this infrastructure to what is necessary and are currently reviewing a move to a provider established in Switzerland.

United States. Where personal data is transferred to the United States — in particular through sub-processors used by the services described in Sections 7, 13, 14 and 15 — such transfers take place on the basis of the Swiss–U.S. Data Privacy Framework, where the recipient is certified under it, or on the basis of the Standard Contractual Clauses, supplemented where necessary by additional safeguards, in accordance with Art. 16 and 17 FADP and Chapter V GDPR.

7. Inquiry and Booking Form (Tally)

For inquiries and bookings we use the online form service Tally (Tally BV, Ghent, Belgium).

A link on our website takes you to a separate page hosted by Tally. No data is transmitted to Tally while you browse our website. Transmission takes place only once you open the form page and submit your entries.

When you submit the form, the information you have entered, together with technical data (IP address, browser information and time of submission), is transmitted to Tally and stored on servers within the European Union. Tally acts as our processor on the basis of a data processing agreement and does not use the data for its own purposes.

Purpose: responding to your inquiry, preparing an offer and arranging the booking.

Transfer abroad: Belgium (EU), which provides an adequate level of data protection under Annex 1 VDSG. For the delivery of form notifications to us, Tally additionally uses SendGrid (Twilio Inc., United States); see Section 6 regarding the safeguards applied.

Health-related information: if you voluntarily provide information about allergies, dietary requirements or other health-related needs of a child attending the event, this constitutes sensitive personal data under Art. 5(c) FADP and Art. 9 GDPR. We process such information solely in order to ensure the safety and wellbeing of the children at your event, on the basis of your explicit consent, which you give by ticking the relevant box in the form. You may withdraw this consent at any time. We delete this information once the event has taken place.

Retention: form submissions are deleted no later than 24 months after the event has taken place or the inquiry has been declined, subject to Section 10.

Tally's own privacy policy: https://tally.so/help/privacy-policy

8. Internal Quotation and Costing Application (smeta.helloparty.ch)

For preparing offers and cost calculations we operate our own application at smeta.helloparty.ch. It stores the following information: client name and contact details, date and venue of the event, the programme selected, and pricing and invoicing details.

Access to the application is password-protected and available only to us. Health-related information is not stored in this application.

The application runs on the same infrastructure as our website; for the provider and server location see Sections 6 and 16.

9. Photographs and Video Recordings at Events

We may take photographs and video recordings at events we organise, for the purposes of documenting our work and promoting our services on our website and on social media channels such as Instagram and Facebook.

Photographs and recordings in which individuals — in particular children — are identifiable are published only where the client and, in the case of children, the parent or legal guardian have given prior consent. Consent is obtained and documented separately as part of the booking. It is entirely voluntary; declining has no effect on the services you receive.

Where other children attend the event, it is the client's responsibility to inform their parents that photographs may be taken.

You may withdraw your consent at any time and without giving reasons by writing to info@helloparty.ch. Following withdrawal, we will remove the material concerned from our own channels within a reasonable period. Please note that we cannot guarantee the removal of copies already shared or downloaded by third parties.

Material for which no consent has been given is used for internal purposes only or deleted.

10. Data Retention

• Inquiries that do not result in a booking: deleted within 24 months of the last contact
• Booking and event data: retained for the duration of the client relationship and for 24 months thereafter
• Health-related information about children: deleted once the event has taken place
• Email correspondence: deleted after 24 months, unless it forms part of our accounting records
• Accounting records (invoices, receipts, contracts and related correspondence): 10 years, as required by Art. 958f of the Swiss Code of Obligations
• Photographic and video material published with consent: retained until consent is withdrawn
• Server log files: maximum 6 months
• Data required to assert or defend legal claims: until the relevant limitation periods have expired

11. Your Rights

Subject to the conditions and exceptions provided by law, you have the right to:

• Request information about the personal data we process about you (Art. 25 FADP; Art. 15 GDPR)
• Have inaccurate data corrected (Art. 32 FADP; Art. 16 GDPR)
• Request the deletion of your data (Art. 32 FADP; Art. 17 GDPR)
• Request the restriction of processing (Art. 18 GDPR)
• Object to processing, in particular to processing for direct marketing purposes (Art. 30 FADP; Art. 21 GDPR)
• Request the release or transfer of your data in a commonly used electronic format (Art. 28 FADP; Art. 20 GDPR)
• Withdraw consent you have given at any time

To exercise these rights, please contact us at info@helloparty.ch. We may ask you to provide proof of identity before responding.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB, https://www.edoeb.admin.ch) or, where the GDPR applies, with the supervisory authority of your country of residence.

12. Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit our website. We use:

• Necessary cookies — required for the operation and security of the website; set without your consent
• Analytics cookies — help us understand how visitors use the website
• Marketing cookies — used to measure and display relevant advertising

Analytics and marketing cookies, and the services described in Sections 13, 14 and 15, are only activated after you have given your consent via our cookie banner. You can change or withdraw your preferences at any time via the banner.

13. Google Analytics

Subject to your consent to analytics cookies, we use Google Analytics, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies to analyse how visitors use our website. The information generated (including a shortened form of your IP address) may be transmitted to and stored by Google, including on servers operated by Google LLC in the United States. IP addresses are anonymised.

You can prevent this processing by declining analytics cookies or by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout

Further information: https://policies.google.com/privacy

14. Meta (Facebook) Pixel

Subject to your consent to marketing cookies, we use the Meta Pixel provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland.

The Meta Pixel allows us to measure the effectiveness of our advertising and to display relevant advertisements. Meta may process data such as your IP address, browser information and information about your behaviour on our website, and may transfer such data to Meta Platforms, Inc. in the United States.

You may withdraw your consent at any time via the cookie banner.

Further information: https://www.facebook.com/privacy/policy/

15. Embedded YouTube Videos

Our website may include embedded videos from YouTube, a service provided by Google Ireland Ltd. Content is loaded only after you have consented to marketing cookies. Once loaded, data — including your IP address — may be transmitted to YouTube and Google, including to servers in the United States. Where possible, we use YouTube's privacy-enhanced mode.

Further information: https://policies.google.com/privacy

16. Hosting, Email and Server Log Files

Our website, our email accounts (@helloparty.ch) and our internal quotation application (Section 8) are operated by Hosting Ukraine LLC (ТОВ «Хостінг Україна»), Kyiv, Ukraine. The servers are located in Germany. Regarding transfers abroad, see Section 6.

Email: all correspondence sent through our @helloparty.ch addresses is stored on these servers.

Server log files: each time our website is accessed, information is automatically stored in log files, including the IP address, browser type and version, operating system, referring page, and the date and time of access. This data serves solely to ensure the technical operation, stability and security of the website and is not merged with other data sources.

17. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse. These include encrypted transmission (TLS/SSL), password-protected access, encryption of the devices we use, and the careful selection of service providers.

No transmission of data over the internet can be guaranteed to be entirely secure. Communication by email in particular is not encrypted end-to-end unless specifically arranged.

18. Updates to This Policy

We may update this Privacy Policy to reflect changes to our services, to the services we use, or to applicable law. The current version is always available on our website, and the date of the last update is shown at the top of this page.

19. Contact

Oleksandr Shaulskyi / Oryna Shaulska
Rietlistrasse 11, 8172 Niederglatt, Switzerland info@helloparty.ch