Privacy Policy

Fat Boys Smash Burger, Luzern 6003, Baselstrasse 97, Company ID: CHE-263.598.998 (hereinafter: the “Organizer” or “FBSB”), as the data controller for you, has prepared this Notice with the aim of informing you about the processing and protection of your personal data.
FBSB holds the franchise to sell FBSB-branded products in Switzerland, which is why the term FBSB is used throughout this Notice to refer to FBSB as the data controller. 01.12.2025.

We have published this Notice on our website to make information about the processing of your personal data accessible to you at any time. This Notice is effective as of

The data we collect fall into three categories:

• (a) Information you provide to us;
• (b) Information we collect through automated means; and
• (c) Information we collect from other lawful sources.

As a rule, we collect data directly from you, and you provide it voluntarily. We will inform you when providing your personal data is necessary to deliver a service or when it is required by law. Please note that if the information is necessary to provide the service or is legally required, and you do not provide the required information, we will not be able to provide our service to you.
Direct Data Collection from You
You may provide us with the following information:
Personal data, such as your name, postal and email address, phone number, date of birth, and other contact details when you register for our online or SMS services, participate in any of our competitions, or contact us by phone or through online services to ask questions, provide feedback, or make a complaint regarding our products and/or services.
Transaction data, including information about the products you purchase, prices, payment methods, and payment details.
Account data, such as your username and password used to access our online services or to purchase or use our products and services.
The above data are collected for the purposes of concluding and fulfilling a contract with you, fulfilling our legal obligations, or based on our legitimate interest in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR) and in accordance with Article 12(1) points 2, 3, and 6 of the Personal Data Protection Act of the Republic of Serbia (hereinafter: the “Act”).
In addition, based on your consent pursuant to Article 6(1)(a) GDPR and Article 12(1) point 1 of the Act, we may also collect the following data:
Information about your profile, including products and services you like, times when you most frequently visit us;
Other personal data you voluntarily disclose when communicating with us.

Automated Data Collection
We may use automated technology to collect data from your computer or mobile device when you visit our restaurants, use our online services, or use technologies in our restaurants. Automated data collection methods may include cookies, locally shared objects, and web browsers. Below is more information about cookies and other technologies.
Through these methods, we may collect information about:
Your IP address;
The operating system of your computer or mobile device and the web browser you use;
The type of mobile device and its settings;
The unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device;
Device and component serial numbers;
Advertising identifiers (e.g., IDFA and IFA) or similar identifiers;
Your communication with us or about us on social networks;
Your activities regarding the use of our online services, such as content visited in our mobile apps.
Whenever technically feasible and reasonably expected of us, we will request and obtain your consent for the collection and processing of this data by FBSB. You may refuse such consent by declining to provide it, or by adjusting your device or browser settings, following the instructions of your mobile service provider, device manufacturer, or browser provider.
Some online services and technologies in our restaurants may not function correctly without location information, and we will attempt to inform you about this. If you want us to delete any information we have collected that may reveal your location, please contact us at the address below. Note that we may be legally required to retain some of this data.

Data Collection from Other Sources
We may collect information about you from other lawful sources, ensuring that the data were collected legally. We may also collect publicly available information. For example, we may collect information you have posted on your public profile while interacting with us through that profile.
NOTICE FOR BUSINESS PARTNER REPRESENTATIVES
Fat Boys Smash Burger is committed to handling the personal data of owners, agents, or other representatives of PARTNERS in accordance with the provisions of the General Data Protection Regulation (GDPR) and applicable personal data protection laws. For this purpose, Fat Boys Smash Burger, in accordance with Articles 12 and 13 of the General Regulation and Articles 23 and 24 of the Law, provides the following information:
Personal data collected during the process of concluding and fulfilling a contract, in its capacity as data controller, are collected by Fat Boys Smash Burger, based in Lucerne 6003, Baselstrasse 97, Company ID: CHE-263.598.998 (hereinafter: the “Organizer” or “FBSB”).
Data Protection Officer Contact: info@fatboysmash.ch
FBSB may use the collected personal data for the purpose of drafting and fulfilling cooperation agreements. Accordingly, the data are collected based on FBSB’s legitimate interest, for the purpose of establishing and fulfilling contractual relationships. The data collected include the contact person of the partner – director, owner, and/or employee responsible for communication with FBSB (full name, job title, official mobile and office phone numbers).
Collected data may be provided to competent authorities in accordance with applicable legal provisions (e.g., police, courts, tax authorities, etc.). Collected data are not exported outside the EU. Data are retained in accordance with legally prescribed deadlines (tax and accounting regulations) or alternatively for a period of 2 months after the expiration of FBSB’s rights and obligations.
FBSB respects the rights of data subjects to access, correct, delete, and restrict the processing of personal data, as well as the right to object to processing and the right to data portability. Data subjects may exercise these rights by submitting a written request to FBSB and/or the Data Protection Officer.

The right to lodge a complaint may be exercised by submitting a complaint to the Federal Data Protection and Information Commissioner of Switzerland.

The data we collect may be used in the following ways:
1. To provide our services and fulfill contractual obligations:
To process your requests, orders, and payments for our products and services;
To communicate with you regarding your orders, purchases, or accounts with us, as well as your requests, questions, or feedback;
To enable you to use our online services (including mobile applications);
To provide customer support services, including handling complaints about our services.
2. To offer or improve our services and for other legitimate business purposes:
To inform you about our products and services, competitions, offers, promotions, or special events that may interest you (with your consent);
To personalize your experience in our restaurants and online services, using analytics and profiling technologies to provide content tailored to your estimated interests and usage patterns, with the right to object;
To manage our business, including developing new products and services, conducting customer and business research, and evaluating the effectiveness of our sales, marketing, and advertising;
To manage our operations, diagnose technical or service issues, manage our online services and restaurant technologies, prevent fraud, collect demographic information about our customers, and identify usage patterns of our services;
To maintain, manage, and improve our products, offers, promotions, online services, and other technologies;
For recruitment processes, in compliance with legal regulations;
To protect against, detect, and prevent fraud and other criminal acts, as well as to assert or defend claims;
To comply with legal obligations and internal policies;
To establish, exercise, or defend legal claims;
To monitor and report on compliance matters.
3. With your consent, we may use the data we collect for:
Providing location-based services;
Providing online services to minors under 16 years old (with parental consent);
Using cookies and similar technologies;
Providing online services (including mobile applications) for you.
We may also use the data we collect about you in other ways, which will be communicated to you at the time of collection or for which we will request your consent.
HOW WE SHARE THE DATA WE COLLECT
We do not sell your personal data and only share it with others as described in this Privacy Notice. We may share your personal data with service providers who perform certain services on our behalf, such as order fulfillment, data processing, IT services, running promotions, conducting competitions, prize draws, research and analysis, and personalizing the FBSB user experience. In such cases, we take measures (such as using standard data protection clauses) to ensure an adequate level of protection for your personal data. We do not allow these service providers to use or share this information for any purpose other than providing services on our behalf.
It is possible that, for strategic or other business reasons, we may decide to sell or transfer all or part of our business. As part of such a sale or transfer, we may also transfer the information we have collected and stored, including personal data, to anyone involved in such a sale or transfer.
Sometimes we may share information that does not directly identify you. For example, we may share anonymized, aggregated statistical data about your use of our online services. Or, we may combine information about you with information about other users and share it with someone in a way that does not allow identification of any individual.
Additionally, we are authorized to use and share data when necessary to comply with legal or regulatory requirements, to protect our online services and

restaurant technologies, to initiate or defend legal claims, to protect the rights, interests, and safety of our companies or the FBSB system, our employees, or third parties, or as part of an investigation into fraud, other crimes, or policy violations.

At FBSB, we are aware of the importance of protecting your privacy when using our online services. We are especially committed to protecting the privacy of children who visit or use our online services. Persons under the age of 16 may use our online services only with the consent of a parent or guardian, as applicable. We do not knowingly collect or retain personal data of persons under 16 years old (in relation to online services) or minors in relation to any of our other services, without obtaining parental or guardian consent.

We encourage parents to regularly review and monitor their children’s online activities. If you have any questions about our approach to children’s privacy, please contact us at the addresses provided below.

If you have given us consent to receive marketing information, you can later opt out by following the opt-out instructions in the marketing messages we send. You can also find communication preferences, including opt-out instructions, in the general settings section of your online service account. Your device may also allow you to adjust communication settings. Additionally, you can opt out by contacting us via the address, phone number, or email below.
If you opt out of receiving our marketing messages, we may still send you messages regarding your transactions, accounts, and any competitions, sweepstakes, or prize draws you have entered. Opting out of one form of communication does not mean you opt out of all forms. For example, if you unsubscribe from marketing emails, you may still receive text (SMS) messages with marketing content if you have chosen to receive them.
Please note that if you receive messages from other members of the FBSB team, you should complete the opt-out process directly with them. FBSB does not transfer or make personal data available to third parties for their direct marketing activities unless you give us permission. After notification and your consent, we will share your personal data with third parties in accordance with your instructions.
We retain your data only as long as necessary to fulfill the purposes outlined in this Privacy Notice. This means we will not keep your data longer than the period for which you have given consent or until you withdraw your consent (for data collected and processed based on consent), or, as a general rule, no longer than 6 years from the end of the calendar year in which the data were collected, except when a longer retention period is required by law, or when we determine

there is a legitimate interest in longer storage, for example, when a proceeding before a competent authority is ongoing or expected. For retention periods of data collected for specific purposes, see the notices in the introductory section of this Privacy Notice.

or data we collect and process based on your consent, you have the right to withdraw your consent at any time by submitting a request to the contact addresses provided below (this does not affect the lawfulness of processing before consent withdrawal).
FBSB respects the rights of data subjects to access, correct, and restrict the processing of personal data, as well as the right to object to processing and the right to data portability. Subject rights include, for example:
When processing of your personal data is based on your consent, you may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Request access to your personal data and obtain a copy of such data.
Receive your personal data in a structured, commonly used, and machine-readable format and request that we transmit it directly to another company, when data are collected and processed based on your prior consent or when necessary to fulfill a contractual obligation.
Correct your personal data if it is inaccurate or incomplete.
Object for reasons related to your specific situation to our processing of your personal data based on our legitimate business interest, including profiling and sending marketing communications.
Delete your personal data, including all links and copies, to the extent permitted; for example, if your data are outdated, unnecessary, illegal, or if you withdraw consent for processing based on consent and successfully object to processing.
Restrict processing while we review your request or objection regarding the accuracy or lawfulness of processing your personal data and the legitimacy of our interest in processing, or if your data are necessary for purposes of legal proceedings.
Additionally, you have the right to withdraw previously given consent at any time. These rights may be exercised free of charge, except in cases where requests are unfounded or excessive. FBSB may refuse to comply with a request or impose certain restrictions as permitted by applicable regulations.
Before FBSB can provide any information or correct inaccuracies, we may ask you to verify your identity and/or provide additional details to help us respond to your request. Data subjects exercise the aforementioned rights by submitting a written request to FBSB and/or the Data Protection Officer at the contacts provided below. The right to lodge a complaint may be exercised by submitting a complaint to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
USE OF OUR ONLINE SERVICES AND OTHER TECHNOLOGIES
FBSB may use “cookies,” web beacons, and other similar technologies on our online services, as well as in other areas of our business, such as online advertising, to collect information and deliver services or products you have requested. As previously mentioned in this statement, we will try to obtain your consent for using such features in each case.
Cookies and Other Tools
Cookies are small text files placed on a user’s web browser or device to record and/or collect information about the user. A web beacon is a small object or image embedded in a website, application, or email and is used to track activity. They are sometimes referred to as a “pixel” or “tag.”
Please note the following:
When you use our online services, a cookie may be sent to you.
We may use cookies and other tools temporarily (“session cookies” – only for the duration of your visit) and permanently (“persistent cookies” – for a set period).
Our online services, as well as other areas of our business, may include web beacons.
We use cookies, web trackers, and other similar tools to collect data for the purposes described in this Privacy Notice. We may use these technologies to:
Enable access to and use of our online services, which may not function properly without these technologies;
Improve our products and services;
Monitor the performance of our online services (e.g., visits, errors, page response time, popularity of specific content, etc.);
Customize our services according to your preferences and interests;
Conduct marketing activities via targeted advertising;
And for other purposes described in the “How We Use Collected Data” section of this Notice.
For example, we may use certain tools to determine whether you opened an email or clicked a link in an email, how you use our websites and mobile app content, or whether you opened an online ad for FBSB.
FBSB and third parties (e.g., networks through which we advertise and whose privacy policies we do not control) may use these technologies to collect data about your online activities over a period of time and across third-party websites and devices, as well as when using our online content, in order to tailor our content to your interests.
We advise you to adjust the relevant settings in your web browser if you do not wish to receive cookies or if you want the browser to notify you when a cookie is received. Use your browser’s “Help” content to learn how to change cookie settings. Some modern browsers may include a “Do Not Track” option, which sends a “Do Not Track” message to all websites you visit, indicating that you do not want your activities tracked. FBSB currently does not respond to “Do Not Track” signals as a unified technical standard has not yet been developed. We monitor the development of these technologies and may adopt such a standard once it is developed.
Targeted Advertising
When you use our online services, FBSB may collect information about your activities in order to offer you advertising content aligned with your interests. As noted in this Privacy Notice, the delivery of advertising content depends on your consent, which you may always withdraw as described above.
Please note that our advertising messages may also appear on third-party websites where we or our partners (marketing agencies, FBSB system companies) have purchased advertising space. In this case, the collection and tracking of data regarding access to such advertising are subject to the

rules of the advertising sites where the content is posted. FBSB does not control the privacy policies of such advertising sites but will make reasonable efforts to ensure that its ads are not placed on sites that do not comply with GDPR and other applicable data protection regulations.

Our online services may contain links to websites not managed by us, but by third parties. If you visit these linked websites, we recommend reading their privacy policies, terms of use, and other policies. FBSB is not responsible for the policies and practices of third parties. Any information you provide to these organizations will be handled according to their privacy policies, terms of use, and other policies.
Our online services may also include applications, tools, gadgets, and widgets from other providers, such as

Facebook “Like,” which may also automatically collect information about how you use these features. These organizations may use your data according to their policies, which we cannot influence.

FBSB is committed to taking all appropriate and reasonable measures to protect the security of your personal data. Our technical, administrative, and physical safeguards are designed to protect your personal data from accidental, unlawful, and unauthorized loss, access, disclosure, use, alteration, or destruction.

While FBSB makes every effort to secure our information systems, no website, mobile application, computer system, or data transmission over the Internet or any public network is guaranteed to be 100% secure.

The transfer of personal data abroad, for the purposes stated in this Notice or, for example, for storing your personal data, will be carried out in accordance with this Privacy Notice and applicable data protection regulations. Your personal data may be transferred or stored in the European Economic Area (EEA). Data may also be transferred and stored outside the EEA. In this case, the data may be processed by our suppliers as third parties. Data may only be transferred outside the EEA if adequate protection exists, such as an EU adequacy decision for the country

where the data are being exported, or (2) an appropriate and binding corporate rule under data protection regulations or a proper contract between the controller and processor.

This Privacy Notice applies from the date indicated at the beginning of the Notice. The Notice may change from time to time. If such changes are made,

the new version will be published here with the updated “Last Updated Date” (i.e., the date from which it applies) at the beginning of the Notice. We recommend regularly checking here for the latest version of the Notice.

If you wish to contact us regarding a question, request (including withdrawal of consent or exercising rights of access, correction, restriction of processing, objection, and data portability), or inquiry about your personal data, you can do so at:
Fat Boys Smash Burger
Baselstrasse 97
Luzern 6003
Company Registration Number: CHE-263.598.998 (hereinafter: “Organizer” or “FBSB”)
Data Protection Officer Contact: info@fatboysmash.ch