Privacy Policy Declaration


I. Name and Address of the Data Controller:
The data controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Keyko GmbHRote Trotte 9,
Baar, Switzerland
info@keyko.io
www.keyko.io

II. Name and Address of the Data Protection Officer:
The data protection officer of the data controller is:

A. Argomaniz
Keyko GmbH
Rote Trotte 9,
Baar, Switzerland
dataprivacy@keyko.io
www.keyko.io

III. General Information on Data Processing

1. Scope of the Processing of Personal Data

The protection of your personal data is important to us. We only process personal data of our users if this is necessary to provide a functioning website as well as our contents and services. The processing of your personal data takes place usually only after your consent. An exception applies in those cases where prior consent cannot be obtained for factual reasons and processing of the data is permitted by law.

2. Legal Basis for the Processing of Personal Data
Insofar as we obtain the consent of the data subject for the processing of personal data, art. 6(1)(a) GDPR serves as the legal basis.

In the processing of personal data required for the performance of a contract to which the data subject is a party, art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, art. 6(1)(c) GDPR serves as the legal basis.If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, art. 6(1)(f) DSGVO serves as the legal basis for processing. 

3. Data Erasure and Storage Time
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage is no longer valid. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

IV. Provision of the Website and Creation of Log Files

1. Scope, Purpose and Legal Basis of Data Processing 
 
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer. 
The following data is collected:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system reaches our website 
(7) Websites accessed by the user's system via our website.

The data is also stored in the log files of our system. This data is not stored together with other of your personal data.
The legal basis for the temporary storage of data and log files is art. 6(1)(f) GDPR.

The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems.

2. Duration of Storage, Possibility of Objection and Deletion

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on your part.


V. Use of Cookies
1. Scope, Purpose and Legal Basis of Data Processing 

 
Cookies are small text files that are stored on your device with the help of your browser. The cookies do not damage your device. 

a) Technically necessary cookies:

We use cookies to make our website user-friendly. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change. Some cookies therefore remain stored on your device until you delete them. Your data collected by technically necessary cookies are not used to create user profiles. The following data is stored and transmitted in the cookies:

(1) Language settings
(2) Log-in information.

The legal basis for the processing of personal data using cookies is art. 6(1)(f) GDPR.

b) Technically unnecessary cookies:

We also use cookies on our website which enable an analysis of your surfing behavior. These cookies are used to improve the quality of our website and its content. Through such cookies we learn how the website is used and can thus continuously optimize our offer. In this way, the following data can be transmitted:

(1) Entered search terms
(2) Frequency of page views
(3) Use of website functions.

When accessing our website, you are informed about the use of cookies for analytical purposes and your consent to the processing of personal data used in this context is obtained. In this context, reference is also made to this data protection declaration.
The legal basis for the processing of personal data using cookies for analytical purposes is, with your consent, art. 6(1)(a) GDPR.

c) Third-party Cookies

We also us cookies from third party companies with whom we cooperate for the purpose of advertising, analysis or the functionalities of our Internet presence. Please refer to Section VIII. Web Analysis for details, in particular for the purposes and the legal basis of the processing of such third-party cookies.
When you visit our website, you will be informed about the use of third-party cookies and your consent to the processing of personal data used in this context will be obtained. In this context, reference is also made to this data protection declaration.


2. Duration of Operation, Storage, Possibility of Objection and Deletion

Cookies are stored on your computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full. The permanent cookies we hold on our servers have an expiry date of 12 months. This is in compliance with the GDPR on Cookies meaning that any log-in or contact information our Cookie files hold are automatically deleted after 12 months. 

Social Media Plugins (using the Shariff solution)

On our website social plugins of social networks ("plugins") are used. In order to increase the protection of your data when visiting our website, the plugins are not unrestricted, but only integrated into the page using an HTML link (so-called "Shariff solution"). This integration ensures that no connection is established with the servers of the provider of the respective social network when a page of our website containing such plug-ins is called up. If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider.The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of the providers:

https://twitter.com/privacy 
https://www.linkedin.com/legal/privacy-policy
https://policy.medium.com/medium-privacy-policy-f03bf92035c9
_____________________________________________________________
VII. Contact Form 
1. Scope, Purpose and Legal Basis of Data Processing 

There is a contact form on our website which can be used for electronic contact. If you take advantage of this possibility, the data entered in the entry mask will be transmitted to us and stored.
This data is:
(1) Name
(2) Email
(3) Company Name
(4) Services Area of Interest
(5) Free-form Text

At the time the message is sent, the following data is also stored:
(1) The IP address of the user
(2) Date and time of registration.

Your consent is obtained for the processing of the data and reference is made to this data protection declaration. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

The legal basis for the processing of data is art. 6(1)(a) GDPR if you have given your consent.

The processing of the personal data from the entry mask serves us only for the establishment of contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

2. Duration of Storage, Possibility of Objection and Deletion

You have possibility to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
In order to revoke access, please email dataprivacy@keyko.io with the title “Revocation of Consent” along with pertinent Contact Form information and an explicit request for revocation.
All personal data stored in this context will be deleted in this case.


VIII. Web Analysis

1. Scope, Purpose and Legal Basis of Data Processing 
a)
Scope

Our website uses functions of Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View CA, USA, 94043) to analyze your surfing behavior. The software places a cookie on your computer (see above for cookies). If individual pages of our website are accessed, the following data is stored:
(1) Two bytes of the IP address of the user's calling system
(2) The accessed website
(3) The website from which the user has accessed the website 
(4) The sub-pages accessed from the website
(5) The time spent on the website
(6) The frequency of accessing the website

The information generated in this way is transferred to the provider's server and stored there. Your IP address is thus recorded, but immediately pseudonymised - Analytics removes the last octet of the user's IP address prior to its use and storage. This means that only a rough localization is possible.

b) Contract with Providers
We have concluded a corresponding contract for order data processing with the following provider(s). 
Google Analytics (https://support.google.com/analytics/answer/4597324?hl=en)
The relationship with the web analytics provider is based on Privacy Shield (https://www.privacyshield.gov/welcome). 

c)Legal Basis
Data processing is carried out on the basis of the legal provisions of art. 6(1)(a) (consent) and/or (f) (legitimate interest) of the GDPR. 

d) Purpose
The processing of your personal data enables us to analyze your surfing behavior. By evaluating the data obtained we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data in accordance with art. 6(1)(f) GDPR. By anonymizing the IP address, your interest in protection of your personal data is sufficiently taken into account.



2. Duration of Storage, Possibility of Objection and Deletion

The data will be deleted as soon as they are no longer needed for our recording purposes. Your data will be kept for the period of fourteen (14) months.
Please see:https://support.google.com/analytics/answer/7667196.
Cookies are stored on your computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.


IX. Rights of the Data Subject

If your personal data is processed, you are affected within the meaning of the DSGVO and you have the following rights:

1. Right of access according to art. 15 GDPR.
You can ask us to confirm whether personal data concerning you will be processed by us. If such processing has taken place, you may request information from us pursuant to art. 15 GDPR.

2. Right to rectification in accordance with art. 16 GDPR.
You have a right of rectification and/or completion if the personal data processed concerning you are incorrect or incomplete.
Right to restriction of processing according to art. 18 GDPR. If processing has been restricted, you will be informed by us before the restriction is removed.

3. Right to erasure in accordance with art. 17 GDPR.
You can demand that the the personal data concerning you must be deleted without delay, and we are obliged to delete this data without delay, if one of the reasons specified in art. 17(1) GDPR applies. For all other information see art. 17 GDPR. 

4. Right to information in accordance with art. 19 GDPR.
If you have exercised your right to rectify, delete or limit the data processing, we re obliged to notify all recipients to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. 

5. Right to data portability in accordance with art. 20 GDPR.
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided (provided that the conditions are met). For all other information see art. 20 GDPR. 

6.Right to object according to art. 21 GDPR.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. For all other information see Articles 21 and 22 of the GDPR. 

7. Automated individual decision-making, including profiling. According to art. 22 GDPR you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.  For all other information see art. 22 GDPR.

8. The right to withdraw the consent according to art. 7(3) GDPR.
You have the right to withdraw your consent at any time. The withdrawl of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to lodge a complaint with a supervisory authority according to art. 77 GDPR.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.

Thank you.