collana solutions AG, Sihleggstrasse 23, CH-8832 Wollerau, Switzerland, is the data controller pursuant to the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR). We respect your privacy and handle your personal data confidentially and in accordance with applicable legal requirements.
This privacy policy explains what personal data we collect, how we use it, and what rights you have.
Personal data refers to any information relating to an identified or identifiable individual. A person is considered identifiable if they can be identified directly or indirectly, for example by name, ID number, location data, or other characteristics.
We process personal data on the basis of the following legal grounds:
Consent (Art. 6(1)(a) GDPR)
Contract performance or pre-contractual measures (Art. 6(1)(b) GDPR)
Legal obligations (Art. 6(1)(c) GDPR)
Legitimate interests (Art. 6(1)(f) GDPR)
We delete personal data as soon as the purpose of processing no longer applies or statutory retention periods expire. Extended storage is permitted only if legally required or justified.
When you visit our website, the following data is automatically collected:
Browser type and version
Operating system
IP address
Date and time of request
Referrer URL
Accessed files
Amount of data transferred
Purpose:
Security, system stability, abuse prevention, and statistical analysis
Legal basis: Art. 6(1)(f) GDPR
Storage period: 7 days
Required?: Not legally required, but technically necessary
Our website is hosted by GoDaddy Inc., 2155 E. GoDaddy Way, Tempe, AZ 85284, USA. Data collected during your website visit is processed on servers operated by this provider.
Legal basis: Art. 6(1)(f) GDPR
Data transfer: USA, based on Standard Contractual Clauses (Art. 46 GDPR)
Required?: Not legally required, but necessary for website operation
We use session cookies to improve website functionality.
Legal basis: Art. 6(1)(f) GDPR, Sec. 25(2) TTDSG
Storage period: Until the browser is closed
Required?: Voluntary; limited functionality if deactivated
We use the “Real Cookie Banner” tool to manage cookies, tracking pixels, web beacons, and related consent.
More information: https://devowl.io/en/rcb/data-processing/
Legal basis: Art. 6(1)(c) and (f) GDPR Required?: No legal or contractual obligation; if not provided, consent management is not possible
We use a CMS for managing website content. Data is processed locally without external transfer.
Legal basis: Art. 6(1)(f) GDPR
Storage period: For the duration of content management only
Required?: Not legally required
We use Elementor by Elementor Ltd., Israel, hosted locally without external data transmission.
Legal basis: Art. 6(1)(f) GDPR
Storage period: No personal data is stored
Required?: Voluntary
If you contact us via form or email, we store your data to process your inquiry.
Legal basis: Art. 6(1)(b) GDPR
Storage period: Until your request is resolved
Required?: Voluntary; we may be unable to respond without certain information
Tracking tools are only used with your explicit consent.
Legal basis: Art. 6(1)(a) GDPR, Sec. 25(1) TTDSG
Data transfer: USA; potential risk of U.S. authority access
Withdrawal: Possible anytime via our consent tool
Used with IP anonymization and only with prior consent.
Provider: Google LLC, USA
Purpose: Statistical analysis of website usage
Legal basis: Art. 6(1)(a) GDPR
Data transfer: USA, based on EU Standard Contractual Clauses
Storage period: 14 months
Required?: Voluntary
Extension of Google Analytics for demographic analysis.
Legal basis: Art. 6(1)(a) GDPR
Storage period: Up to 26 months
Data transfer: USA; based on SCCs and participation in the EU-U.S. Data Privacy Framework
Required?: Voluntary
We use Google Tag Manager (GTM) by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. GTM itself does not process personal data or use cookies. It serves to manage website tags via a user interface. Tags triggered via GTM may collect personal data, but GTM does not access this data.
Legal basis: Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) TTDSG
Data transfer: USA; Google is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR), and SCCs are in place (Art. 46 GDPR)
Storage period: GTM itself stores no personal data
Required?: No legal or contractual obligation; based on user consent
Used to analyze technical performance of our website.
Provider: Google LLC, USA
Purpose: Technical optimization
Legal basis: Art. 6(1)(f) GDPR
Data transfer: USA; certified under EU-U.S. Data Privacy Framework
Required?: Not required
We use media from the domain img1.wsimg.com (part of GoDaddy’s content infrastructure) to display images on our website (e.g., product visuals, team photos, graphic elements). These may involve depictions of persons and therefore constitute personal data.
Purpose: Verarbeitung personenbezogener Daten darstellen kann.
Purpose:
Visually enhance user experience and communicate our offerings
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
Our legitimate interest lies in ensuring a technically stable and visually appealing presentation of our website content.
Data transfer:
USA; not DPF-certified, but secured via Standard Contractual Clauses; residual risk of U.S. authority access
Storage period:
Media is hosted by GoDaddy for as long as it is used on our website and deleted when no longer needed
Required?:
Not legally required; disabling may affect visual functionality
Further details:
https://www.godaddy.com/legal/agreements/privacy-policy
You have the following rights under applicable data protection laws:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw your consent at any time
Right to lodge a complaint with a supervisory authority
We do not use automated decision-making.
We are not responsible for the content of external websites. Please refer to the respective privacy policies on those sites.
Your data is only processed on servers within our area of responsibility and will not be shared with third parties without your consent, unless legally required or expressly authorized by you.
We implement technical and organizational measures to protect your data and continuously update them in line with current best practices.
Keyed GmbH
Siemensstraße 12
48341 Altenberge
info@keyed.de
We reserve the right to update this privacy policy in response to legal changes or adjustments to our services.
Last updated: June 2025
DE