DATA PROTECTION DECLARATION

Stratus Holding AG is the operator of the website keys.discount.ch (hereafter "keys.discount" "we" or "us"). keys.discount is therefore responsible for the collection, processing and use of your personal data and the compatibility of the data processing with the applicable data protection law.

Your trust is important to us. Therefore, we take the topic data protection seriously and pay attention to appropriate security. It goes without saying that we observe the legal regulations of the Swiss Federal Law on Data Protection ("DSG"), the Swiss Ordinance to the Federal Law on Data Protection ("VDSG"), the Swiss Telecommunications Law ("FMG") and other possibly applicable data protection regulations of Swiss or EU law, especially the Basic Data Protection Ordinance ("DSGVO"). Personal data is neither sold nor passed on to third parties, except as mentioned in this privacy policy. In order to know what personal data we collect from you and for what purposes we use it, please take note of the information below.

If you have any questions regarding data protection, you can contact us at welcome(at)keys.discount.


WHAT DATA DO WE PROCESS WHEN VISITING OUR WEBSITE?

Do we already collect data from you when visiting our website?

When visiting our website, our servers temporarily save each access in a log file. The following technical data is collected and stored by us without your interaction, as is generally the case when connecting to a web server:

  • the IP address of the accessing computer;
  • the owner's name of the IP address range (usually your Internet access provider);
  • the date and time of access;
  • the website from which the access was made (referrer URL) - if applicable, with the used search word;
  • the name and URL of the accessed file;
  • the status code (e.g. error message);
  • the operating system of your computer;
  • the browser you are using (type, version and language);
  • the transmission protocol used (e.g. HTTP/1.1); and
  • if applicable, your user name from a registration/authentication.

The purpose of collecting and processing this data is to enable the use of our website (connection establishment), to ensure system security and stability on a permanent basis and to enable the optimisation of our internet offers, as well as for internal statistical purposes, in order to identify trends so that we can improve our offers accordingly. This is our legitimate interest in data processing.

The IP address is also evaluated together with other data for the purpose of clarification and defence in case of attacks on the network infrastructure or other unauthorised/abusive website use and, if necessary, used against the users in the context of criminal proceedings for identification, for civil and criminal proceedings. We have a justified interest in such data processing in order to prevent unauthorised access in the future and to improve our system stability accordingly.


WHAT DATA DO WE COLLECT WHEN YOU PURCHASE PRODUCT KEYS FROM OUR ONLINE SHOP?

You have the option of purchasing product keys directly via our website as a guest, with your Facebook or Google account or as a registered customer. For that, we require the following information:

  • E-mail address; and
  • payment information.

We use this data and any additional information you provide voluntarily (e.g. company name, address, voucher/discount code) only to be able to offer and deliver the product keys to you in the best possible way. The processing of this data is therefore necessary in order to implement pre-contractual and contractual measures and is in our legitimate interest, as we want to provide you with a comprehensive service.


WHAT DATA DO WE COLLECT WHEN YOU REGISTER WITH US AS A CUSTOMER AND CREATE AN ACCOUNT?

You have the option of opening a customer account on our website, through which you can easily use our online shop and the associated services. To do this, we require the following information:

  • Email address; and
  • payment information.

We use this data and any additional information you provide voluntarily (e.g. title, name, surname, company, VAT-ID, address, country, language) only to be able to offer and deliver the product keys to you in the best possible way. The processing of this data is therefore necessary in order to implement pre-contractual and contractual measures and is in our legitimate interest, as we want to provide you with a comprehensive service.


WHAT DATA DO WE COLLECT WHEN USING OUR CONTACT FORM?

You have the option of using a contact form to get in touch with us. For this purpose, we require the following mandatory information:

  • First name;
  • Surname;
  • E-Mail address;
  • Telephone number;
  • Country; and
  • Message and/or comment.

We use this data and any additional data you may provide (in particular company and address) only to be able to answer your contact request in the best possible and personalised way. The processing of this data is therefore in our legitimate interest to provide you with a professional and comprehensive service.


WHAT ARE COOKIES? DO WE NEED COOKIES?

Cookies help in many ways to make your visit to our website easier, more pleasant and more useful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website. We use the following cookies in particular:

  • Technically required cookies;
  • Performance cookies;
  • Functional cookies; and
  • Advertising cookies.

We use these cookies, for example, to identify you as a registered user - after having previously registered on our website - without having to log in again when you call up another subsite.

Most internet browsers accept cookies automatically. However, you can reconfigure your browser that cookies are not stored on your computer or that a message always appears when receiving a new cookie.

Deactivating cookies may limit some functions of our website.


DO WE NEED TRACKING TOOLS? WHAT ARE TRACKING TOOLS?

For the purpose of demand-oriented design and continuous optimisation of our website, we use the web analysis service of Google Analytics. Cookies are used in this context. The information generated by the cookies about your use of this website is transmitted to the servers of these service providers, stored there and processed for us. In addition to the data listed under point 1, we may receive the following information as a result:

  • Navigation path that a visitor follows on the website;
  • the time spent on the web or sub-page;
  • the sub-page visited via the website; and
  • the country, region or city from where an access is made;
  • Terminal device (type, version, colour depth, resolution, width and height of browser window); and
  • Returning or new visitor.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of this website. This information may also be transferred to third parties if this is required by law or if third parties may need to process any of this data.


WHAT IS “GOOGLE ANALYTICS”?

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (hereinafter "Google").

Google Analytics is used exclusively with the extension "anonymizeIP" on this website. This extension ensures anonymisation of the IP address by shortening it and excludes any direct personal reference. The extension means that the IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the corresponding browser within the scope of Google Analytics will not be merged with other Google data.

On behalf of the website operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activities and to provide the website operator with further services related to website and internet use. The legitimate interest in such data processing lies in the optimisation of this website, the analysis of the use of the website and the adaptation of the content. This usage data also forms the basis for statistical, anonymous evaluations so that trends can be identified, which we can use to improve our offers accordingly.

The collection by Google Analytics can be prevented by adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by the cookies can also be revoked at any time with effect for the future. The corresponding browser plugin can be downloaded and installed at the following link: https://tools.google.com/dlpage/gaoptout.

The visitor can prevent the collection by Google Analytics on this website by clicking on the following Link. An opt-out cookie will be set, which prevents the future collection of data when visiting this website. Further information on data use by Google, setting and objection options can be found in Google's privacy policy (https://policies.google.com/privacy) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).


WHAT OTHER DATA DO WE PROCESS THAT RELATE TO OUR BUSINESS ACTIVITIES?

What data do we collect when you buy product keys directly from us?

In order to obtain product keys, you have the option of contacting us directly, for example by e-mail or telephone. For this purpose, we require the following information:

  • Email address; or
  • Mail address; and
  • Payment information.

We use this data and any additional information you provide voluntarily (e.g. company name, address, voucher/discount code) in order to offer you and deliver the product keys to you in the best possible way. The processing of this data is therefore necessary in order to implement pre-contractual and contractual measures or the data processing is in our legitimate interest, because we want to provide you with a comprehensive service.


WHICH DATA DO WE PROCESS FOR ADVERTISING PURPOSES?

We use data which is made publicly available on the internet or which we have otherwise lawfully obtained in order to draw the attention of existing customers and potential new business customers to our offer. For this purpose, we process the following information:

  • email address, if available; and
  • Business address.

We use this data, as well as additional business data available on the internet, to create direct advertising for our products. Unless we have the consent of a customer to receive direct mail, we only use publicly available information about companies. Such information may contain personal data. The processing of publicly available information on companies (e.g. business address) and any personal data contained therein is in our legitimate interest in being able to conduct direct advertising.

As a data subject (natural or legal person), you can object to such processing free of charge at any time by writing to us at welcome(at)keys.discount.


STORAGE AND EXCHANGE OF DATA WITH THIRD PARTIES?

How long will my data be kept?

We only store personal data for as long as it is necessary to use the above-mentioned processing within the scope of our legitimate interest.

Contract data will be stored by us for longer, as this is prescribed by statutory storage obligations. According to these regulations, business communications, concluded contracts and booking vouchers are to be stored for up to 10 years. If we no longer need this data to perform our services to you, the data will be blocked. This means that the data will be used only for accounting and tax purposes.

Transfer of data to third parties

We only pass on your personal data to third parties if you have expressly agreed to it, if there is a legal obligation to do so or if this is necessary to exercise our rights - in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties where this is necessary in the context of the website use and contract processing (also outside the website), specifically the processing of your orders.­


WHO IS OUR WEB HOST?

Our web host ist web host skycore ag. A service provider to whom personal data collected via the websites is passed on or who has or may have access to it. The websites are hosted on servers in Switzerland.


WHO IS OUR PAYMENT PROVIDER?

We offer on our website the possibility to pay via different payment providers. For this purpose, we work together with the providers listed below:

  • Bank in CH: Acrevis Bank AG and WIR Bank Cooperative
  • Accounts receivable administration: A.B.S. Factoring AG, Huobstr. 3, CH-8808 Pfäffikon SZ
  • Credit cards: Mastercard and Visa via Stripe, BS Payone and Payrexx
  • Credit cards: American Express via AECS Swisscard GmbH and Payrexx
  • TWINT: Datatrans AG and Twint Aquiring AG
  • PayPal: PayPal Pte Ltd Singapore
  • Bitcoin: Bitpay, Coinbase Commerce und Bitstamp
  • Sofortüberweisung: Klarna Bank AB

By selecting the respective payment option, you agree that we may transmit personal data to the provider of the payment service. The transmission of personal data is for the purpose of payment administration. Regarding the handling of personal data, please refer to the privacy policy of the respective payment provider.


LINKS AND SOCIAL PLUG-INS

We have included links on our website to the websites of some of our partners and to other relevant websites. If you access such links from our website, data may be passed to the owner of the website you are accessing. We have no control over the data processing by operators of such websites.

In addition, we also use social plug-ins such as Facebook, Instagram, Twitter and YouTube. We have no influence on the processing activities of these social media platforms. Therefore, please read the respective privacy policies before accessing the platform(s).

Please note that when you visit our website, social plug-ins can establish a direct connection between your browser and the social media server. The provider thereby receives the information that you have visited our site with your IP address. If you do not want a provider to be able to assign your visit to our site to your user account, please log out of your user account before visiting.

reCAPTCHA

To protect your enquiries via internet forms, we use the reCAPTCHA service of the Google company. The query serves to distinguish whether the input is made by a human being or improperly by automated, machine processing. The query includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. The deviating data protection provisions of the Google company apply to this data.


TRANSFER OF PERSONAL DATA ABROAD

We may also transfer your personal data to third parties (commissioned service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are obliged to the same extent as we are ourselves to protect your data. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we will ensure by contract that the protection of your personal data is equivalent to that in Switzerland or the EU at all times.

Is there the same protection when data is transferred to the USA?

For the interests of completeness, we would like to point out for users residing or domiciled in Switzerland as well as in the EU that there exist surveillance measures by US authorities in the USA which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and their subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated with both the access to and the use of these data.

Furthermore, we would like to point out that in the USA there are no legal remedies available to data subjects from Switzerland that allow you to obtain access to the data concerning you and to obtain their correction or deletion, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw your attention to this legal and factual situation in order to enable you to make an appropriately informed decision to consent to the use of your data.

We would also like to point out to users who are resident in a member state of the EU, the EEA or Switzerland that the USA does not have an adequate level of data protection from the point of view of the European Union as well as Switzerland - among other things due to the issues mentioned in this section. Insofar as we have explained in this data protection declaration that recipients of data (such as Google) are based in the USA, we will ensure either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield that your data is protected with our partners with an appropriate level.


IS THERE ANYTHING ELSE YOU NEED TO KNOW?

You have a right of information, rectification, cancellation and limitation of processing, as well as a right to data transferability.

You have the right to request information about the personal data that we store about you. In addition, you have the right to have incorrect data corrected and the right to have your personal data deleted, provided that this does not conflict with any legal obligation to retain the data or any permission that allows us to process it.

You also have the right to demand that we recover the data you have given us (right to data portability). On request, we will also pass on the data to a third party of your choice. You have the right to receive the data in a standard file format. You can contact us for the above-mentioned purposes via the e-mail address welcome(at)keys.discount. For the processing of your requests we may, at our discretion, require proof of identity.

In many countries you also have the right to complain to the relevant data protection authority if you have concerns about how we process your data.

These rights vary according to the applicable data protection legislation and may therefore be either more limited or more extensive.


IS IT POSSIBLE TO COMPLAIN ABOUT US?

You have the right to complain to a data protection authority at any time.

Which law do we apply? And where is the law applied?

This data protection declaration and the contracts concluded on the basis of or in connection with this Privacy Policy are subject to Swiss law, unless the law of another country is mandatorily applicable.

The place of jurisdiction is the registered office of Stratus Holding AG, unless a different place of jurisdiction is specified.

Can this declaration be amended?

Should individual parts of this data protection declaration be invalid, this shall not affect the validity of the rest of the data protection declaration. The invalid part of the data protection declaration shall be replaced in such a way that it comes as close as possible to the economically intended purpose of the invalid part.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration is published on our website.


QUESTIONS ON DATA PROTECTION?

Please, contact us!

This page was last modified on 22.02.2021. If you have any questions or comments about our legal indications or data protection, please contact us at welcome(at)keys.discount.