Privacy Policy

This privacy policy explains the processing of personal data in connection with our website and the services described below. Swiss data protection law applies.

1. Controller and contact

Anykey Solutions GmbH
Ferenbacherstrasse 15E
8909 Zwillikon
Contact for data protection matters: Marc Schwarz, info@atemkrafttraining.ch

2. Scope

This policy concerns the website atemkrafttraining.ch and the associated data processing described here. Independent third-party services are subject to their own privacy information.

3. Principles of data processing

We process personal data for the purposes described in this policy. In particular, the principles of proportionality, purpose limitation and data security under the Swiss Federal Act on Data Protection (FADP) apply. Where processing requires consent, this must be obtained separately; this policy does not replace consent.

4. Data processed

Visiting the website generates technical connection data, in particular the IP address, time, requested content, and browser and device details. Further data depends on the functions you use and the services described below. This includes information you provide to us for the respective transaction.

5. Purposes and website functions

Technical data is used to provide and secure the website and to investigate disruptions and misuse.

Orders and services: We process the contact, order, billing and payment details needed for the order in order to perform contracts, provide services and document business transactions. Payment data is processed according to the payment method selected.

The purposes of additional services used are described in the following section.

6. Services and technologies used

The following sections describe the services specified for this website.

6.1 Server log files

Our website maintains server log files that automatically record technical connection data when our pages are accessed.

Data collected
The following information is stored as part of log file recording:

• Your device's IP address

• Date and time of the request

• Requested URL and referrer (previous page)

• Browser type, operating system and device data (user agent)

• Access status or HTTP status code

• Volume of data transferred

Purpose of processing
We use log file data exclusively to

• ensure the operation and availability of our servers,

• identify and resolve technical errors (such as failed page requests),

• identify and repel attacks or unauthorised access attempts.

Legal basis
Recording this technical data is necessary for the secure and uninterrupted operation of our website. We rely on our overriding legitimate interest in a functioning IT infrastructure.

Opt-out option

Opting out is not possible here because log file recording is technically necessary to provide and protect our services.

6.2 Cookies

We use cookies and comparable technologies on our website to enable its operation and provide certain functions.

Data collected
Depending on the cookie category, the following data is collected and stored:

• Session cookies: Temporary identifiers that identify devices during a browser session.

• Persistent cookies: Long-term identifiers to recognise returning visits.

• Functional cookies: Settings such as language selection or layout preferences.

• Security cookies: Tokens or hash values to secure login sessions.

Purpose of processing

• Technically necessary cookies: Essential for shopping carts, login sessions and load balancing.

• Functional cookies: Store your preferences to improve the user experience.

• Security cookies: Protect against manipulation and CSRF attacks.

Legal basis
For cookies required to operate the website, we rely on our overriding legitimate interest in a functioning IT infrastructure. This also covers functional and security cookies.

Data recipients and transfers to third countries
Depending on the service used, information collected through cookies may be shared internally and with external service providers. For details of recipients and possible transfers abroad, please refer to 7. Recipients of personal data and 8. Processing abroad in this privacy policy.

Opt-out option
You can prevent or restrict cookies through your browser settings. Please note that some website functions may then no longer be fully available.

6.3 Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows us to manage and control program code and services integrated into our website. Tag Manager can respond to events such as page views or clicks and pass information from a so-called data layer to the tags configured for this purpose.

According to Google, Google Tag Manager itself does not set its own cookies or create user profiles. However, loading the container transfers technically necessary connection data to Google, in particular the IP address, time, and browser and device details. Google states that it retains standard HTTP request logs for no more than 14 days and may additionally process aggregated diagnostic information on tag firing. This does not contain IP addresses or personal measurement identifiers.

Any further data processing depends on the services integrated through Tag Manager. Google may also process data outside Switzerland, particularly in the United States. Further information is available in the privacy information for Google Tag Manager and Google's privacy policy.

Google LLC in the United States may be an additional recipient. For covered transfers from Switzerland, Google relies on the Swiss-U.S. Data Privacy Framework. For other required safeguards, the Google Ads Data Processing Terms, Appendix 3A, provide for standard data protection clauses. Google explains their applicability in its information on international data transfers; this does not apply automatically to additionally linked products.

Subprocessors and countries of establishment: Google Tag Manager. The entries for "Google Tag Manager" are relevant. The country column identifies company locations, not an exhaustive list of processing locations.

6.4 Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The service helps us understand how visitors use our website so that we can improve its content, functions and usability.

In particular, this involves processing a randomly generated client ID, pages visited, usage events, referring page, approximate location and technical information about the browser, operating system and device. The IP address is technically transmitted to Google when the connection is established. For access from Switzerland, Google states that it uses this address only to derive an approximate location and discards it before storing measurement data. We cannot access the full IP address in Google Analytics.

In its usual configuration, Google Analytics uses cookies such as _ga to recognise visitors and sessions. Retention of user-level and event-level data depends on the Google Analytics property settings; standard accounts generally provide for 2 or 14 months. Aggregated statistics may be retained longer.

Google generally processes Analytics data on our behalf. Affiliates and subprocessors may be involved, and data may be processed in the United States or other countries. Google provides appropriate transfer mechanisms and contractual safeguards for this purpose. General information on disclosure abroad can be found in the corresponding section of this privacy policy.

You can prevent measurement by Google Analytics using Google's browser add-on and delete or block cookies in your browser. Further information is available in the privacy information for Google Analytics.

Google LLC in the United States may be an additional recipient. For covered transfers from Switzerland, Google relies on the Swiss-U.S. Data Privacy Framework. For other required safeguards, the Google Ads Data Processing Terms, Appendix 3A, provide for standard data protection clauses. Google explains their applicability in its information on international data transfers; this does not apply automatically to additionally linked products.

Subprocessors and countries of establishment: Google Analytics. The entries for "Google Analytics" are relevant. The country column identifies company locations, not an exhaustive list of processing locations.

6.5 PayPal

We offer PayPal as a payment method. For Swiss PayPal accounts, the payment service is provided by PayPal Pte. Ltd., 5 Temasek Boulevard, #09-01 Suntec Tower Five, Singapore 038985, Singapore.

If you select PayPal, we disclose the data necessary for payment to PayPal. This may include, in particular, your name, email address, billing and delivery addresses, order and transaction data, amount, currency, payment status, and technical device and connection data. PayPal receives login credentials and payment information that you enter directly with PayPal directly from you. We receive, in particular, the information required for the order and the payment confirmation and status.

We and PayPal process the respective data as independent controllers. We use it to process payments and contracts, issue refunds and fulfil accounting obligations. PayPal states that it also processes data for authentication, fraud and risk checks, and compliance with legal obligations, and may use automated procedures for these purposes.

PayPal may share data within its corporate group and with banks, payment networks, payment processors, service providers, identity and fraud verification bodies, and authorities. Disclosure to PayPal takes place to Singapore; further processing may take place particularly in the United States and other countries. PayPal provides appropriate transfer mechanisms and safeguards for this purpose.

We retain our order and payment data in accordance with statutory retention obligations. PayPal determines retention periods for the data it processes according to its own legal and contractual obligations. If you do not wish to transmit data to PayPal, select another available payment method. Further information is available in PayPal's privacy policy.

6.6 YouTube videos

We embed YouTube videos provided by Google Ireland Limited ("Google"). Loading the player transmits, in particular, the IP address, page visited and referring page, time, browser, device and language information, and cookies or similar identifiers to Google. If you play a video or are signed in to Google, Google may process additional usage and interaction data and associate it with your account. A connection to Google remains even in privacy-enhanced mode. Google and service providers may process data outside Switzerland, particularly in the United States.

We generally receive only aggregated information or information provided for the player and retain it according to its purpose and legal obligations. You can block YouTube content through browser or privacy settings; the video will then be unavailable. Further information is available in Google's privacy policy.

7. Recipients of personal data

The providers named in the services section receive data according to the use described there. Within our company, access is granted according to the duties of the persons involved.

Disclosures required by law to competent authorities remain reserved.

8. Processing abroad

Whether and in which countries personal data is processed outside Switzerland is specified in the information about the respective services and the hosting information below. Disclosure abroad may also occur where foreign providers or their subcontractors access personal data during support or maintenance.

Web hosting: Hostpoint. Operation of the website involves processing, in particular, technical access details and website data stored on the hosting service. Specified countries of processing for web hosting: Switzerland. This does not automatically cover additional services used.

A distinction must be made for disclosures abroad: either the recipient country ensures adequate data protection according to the Federal Council's assessment, or appropriate safeguards under Article 16 FADP are required, such as standard data protection clauses recognised by the FDPIC. Applicable statutory exceptions under Article 17 FADP remain reserved. Details of the respective recipients, countries of processing and transfer arrangements can be found under the individual services in section 6.

9. Retention

The retention period depends on the respective processing purpose. Relevant factors include, in particular, completion and necessary follow-up of an enquiry, handling of a business relationship, and the period for which technical logs are needed for secure operation and investigation of disruptions.

Statutory retention obligations apply to the documents concerned, not indiscriminately to all website data. For example, accounting records and accounting vouchers must generally be retained for ten years (Article 958f of the Swiss Code of Obligations). Longer retention may be necessary where the data concerned is still needed to establish, exercise or defend legal claims.

Once personal data is no longer required for its purpose and there is no longer a legally permissible reason for retention, it must be deleted or anonymised so that no individual can be identified. Additional information about retention by individual services can be found in their respective sections.

10. Your rights

Subject to the FADP, you may request information about your personal data and rectification of inaccurate information. Depending on the applicable conditions, you may also request deletion, cessation of processing, or the release or transfer of certain data. You may withdraw consent with effect for the future. Statutory obligations and other permissible grounds may prevent deletion. Please contact info@atemkrafttraining.ch. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

11. Required information

The information needed for an enquiry or service depends on the respective process. Without the necessary information, we may be unable to handle your enquiry or provide the requested service.

12. Data security

Processing personal data requires technical and organisational safeguards appropriate to the risk. Completely risk-free data transmission or storage cannot be guaranteed. When using general contact channels, submit only the information necessary for your enquiry.

13. Changes

We may adapt this policy to changes in data processing or legal requirements. The current version is published on this website.