Privacy Policy

1. Data Controller

KikoSpace AG is the data controller responsible for the processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

2. Data We Collect

We collect and process personal data in the following categories:

Contact Form Submissions

• Name and email address
• Phone number (optional)
• Message content and inquiry details
• Date and time of submission
• IP address

Email Correspondence

• Email address
• Message content
• Attachments and metadata
• Communication timestamps

Website Analytics

• Pages visited and time spent on each page
• Referral sources
• Browser type and operating system
• IP address (anonymized)
• Approximate geographic location (country/region level)

Automatically Collected Information

• Device information (browser, OS, device type)
• Access logs and timestamps

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

Legitimate Interest (Article 6(1)(f))

• Website analytics and performance optimization
• Security and fraud prevention
• Improving our website and services

Consent (Article 6(1)(a))

• Optional contact form submissions
• Marketing communications (where applicable)

Contract Performance (Article 6(1)(b))

• Processing information to respond to your inquiries
• Fulfilling service requests

4. Cookies and Tracking

This website uses only essential cookies necessary for basic functionality and security. We do not use cookies for tracking, profiling, or targeted advertising.

5. Data Retention Periods

After the retention period expires, data is securely deleted or anonymized.

6. Your Rights Under GDPR (EU/EEA Residents)

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your data (the "right to be forgotten")
• Right of Restriction: Request limitation of processing in certain circumstances
• Right to Portability: Request your data in a structured, portable format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Withdraw previously given consent at any time

7. Your Rights Under Swiss FADP (Swiss Residents)

Under the Swiss Federal Act on Data Protection, you have the right to:

• Right of Access: Request information about your personal data held by us
• Right of Rectification: Request correction of inaccurate data
• Right of Deletion: Request erasure of your personal data
• Right of Opposition: Object to processing in certain circumstances

8. Exercising Your Rights

To exercise any of these rights, please contact us at:

9. International Data Transfers

All data processing occurs within Switzerland or the European Economic Area (EEA). We do not transfer personal data to countries outside the EEA or Switzerland unless:

• An adequacy decision by the European Commission applies
• Appropriate safeguards (Standard Contractual Clauses) are in place
• You have provided explicit consent

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized processing, accidental loss, and unlawful access, including:

• Encryption of sensitive data in transit and at rest
• Secure server infrastructure and regular backups
• Limited access to personal data (need-to-know basis)
• Regular security audits and vulnerability assessments

However, no system is entirely secure. We encourage you to use strong passwords and keep your login credentials confidential.

11. Third-Party Service Providers

We may engage third-party service providers (e.g., email hosting, server infrastructure) to process personal data on our behalf under data processing agreements (DPAs) that ensure GDPR and FADP compliance. These providers are prohibited from using your data for their own purposes.

12. Children's Privacy

Our website is not intended for children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from children. If we become aware that a child has provided personal data, we will promptly delete it.

13. Complaints and Regulatory Authorities

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the supervisory authority in your jurisdiction:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the "Last Updated" date above and, where required, by email. Your continued use of the website constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or our data protection practices, please contact: