Privacy policy.
This policy describes how KO PLAN processes personal data. It is based on the revised Swiss Federal Act on Data Protection (revFADP), which came into force on 1 September 2023. An additional section covers the European General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for processing personal data on this website is:
- Company
- KO PLAN [[RECHTSFORM FEHLT - BITTE BESTAETIGEN]]
- Address
- Zürich, Schweiz
- info [at] ko-plan.ch
2. What data we process
We process personal data that you actively submit to us, as well as data generated technically when you visit the website.
- Contact data from forms: name, company name, email address, telephone number, town, type of business, project details and any voluntarily uploaded files
- Communication data: the content of your messages and our replies
- Technical data: IP address, date and time of access, page requested, volume of data transferred, browser type and operating system, referrer
3. Purpose and legal basis
We process your data in order to answer enquiries, prepare quotations, handle orders and operate the website securely and reliably.
Processing is based on your consent, on the initiation or performance of a contract, and on our overriding interest in secure operation of the website and in communicating with prospects and clients. Under the revFADP, processing personal data is generally permitted provided it is carried out in good faith, proportionately and transparently.
4. Server log files
When the website is accessed, the hosting provider automatically records access data in log files. This data is technically necessary to deliver the website and serves operational security and defence against attacks. It is not merged with other data sources and is generally deleted after 90 days at the latest.
5. Contact forms
The forms on this website allow you to send us enquiries. Mandatory fields are marked as such. Without those details we cannot process the enquiry.
Transmission is encrypted via HTTPS. The data is forwarded by email to our mailboxes and stored there. To protect against automated abuse we use a hidden field, a timing check and a limit on the number of requests per IP address. In doing so the IP address is stored briefly on the server in shortened or hashed form.
We retain enquiries for as long as required to process them, and beyond that where statutory retention obligations apply.
6. Cookies and tracking
This website sets no cookies for analytics, marketing or tracking purposes. No third-party services that evaluate your behaviour are embedded.
Your browser's local storage only records that you have acknowledged the privacy notice, together with a timestamp. That entry never leaves your device and can be deleted at any time through your browser settings.
Fonts and scripts are loaded exclusively from our own server. No connection is made to Google Fonts or other external services.
7. Hosting
The website is operated with a hosting provider whose servers are located in Switzerland. The provider processes data on our behalf and is contractually obliged to comply with data protection requirements.
[[HOSTING PROVIDER TO BE ENTERED, FOR EXAMPLE HOSTPOINT AG, CYON GMBH OR INFOMANIAK NETWORK SA]]
8. Disclosure to third parties
Your data is disclosed only where necessary to perform the contract, where you have consented, or where a legal obligation exists.
Recipients may include: the hosting and email provider, the manufacturer Floros Fine Shading (K. H. FLOROS S.A.) in Greece for order processing, and transport and installation partners. For transfers abroad we ensure an adequate level of protection, generally through recognition of the destination country by the Swiss Federal Council or through standard contractual clauses. Greece is a member of the European Union and provides an adequate level of data protection.
9. Retention period
We retain personal data only for as long as necessary for the relevant purpose or as required by law. Business correspondence and accounting records are subject to the ten-year retention obligation under commercial law. Data is then deleted or anonymised.
10. Your rights
Under the revFADP you have the following rights in relation to KO PLAN:
- Access to information on whether and which data we process about you
- Rectification of inaccurate data
- Erasure or destruction of data, unless a legal obligation prevents it
- Release or transfer of your data in a common electronic format
- Objection to a particular processing operation and withdrawal of consent given
A message to our contact address is sufficient to exercise your rights. To protect your data we may request proof of identity. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Bern.
11. Data security
The website is delivered exclusively over an encrypted HTTPS connection. Security measures are also active at server level, including protection against embedding in third-party pages, against incorrect file type detection, and a restrictive rule on the origin of content. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
12. Additional information under the GDPR
If your registered office or place of residence is in the European Union, the GDPR may apply in addition. This is particularly relevant because our group and the manufacturer are based in Greece.
In that case the legal bases for processing are Article 6(1)(a) GDPR (consent), (b) (contract or pre-contractual measures) and (f) (legitimate interest in communication and secure operation).
In addition to the rights listed above, you have the right to restriction of processing under Article 18 GDPR and the right to data portability under Article 20 GDPR. You have the right to lodge a complaint with a supervisory authority in your member state.
13. Changes
We update this privacy policy when data processing or legal requirements change. The version published on this page is the one that applies.