This Privacy Notice helps you understand the different ways we may use your data, inform you of your rights and how to exercise your rights. Before using our Services or purchasing our Products, please ensure that you have read and understood the terms of this Privacy Notice. If you do not agree with our policies and practices, please discontinue the use of our Services immediately.
The type of data we collect and process depends on how you interact with us and use our Services and what products you order. Depending on your use of our Services or products, the personal information, as defined by applicable data protection laws, we may have collected and disclosed in the prior 12 months include:
Technical data: When you use our Services, we collect technical data in order to ensure the functionality and security of these offerings. This includes IPs, logs and other device data. To ensure the functionality of these offerings, we may also assign an individual code to you or your terminal device. When signing up, downloading, installing, and/or accessing content as part of the Services we provide, we process information from you and your device.
Registration data: Certain Services can only be used with a user account or
registration, which can happen directly with us or through our third-party login service providers. In this regard you must provide us with certain data, and we may collect data about the use of such Services.We generate or collect this information when you voluntarily create an account to use our Services.
Communication data: When you contact us by any means of communication, we may collect the data exchanged between you and us, including your contact details and the metadata of the communication.
Master data: With master data we mean the basic data that we need, in addition to contract data (see below), for the performance of our contractual and other business relationships or for marketing and promotional purposes. We collect information when you interact with our customer service department. In certain cases, we may ask you to provide a copy of a document or government-issued ID to verify your identity, location, and/or account ownership. When photo identification is provided to us, we ask that you remove or hide any sensitive information and it is normally deleted as soon as the identification verification is complete or within other legally permissible limits.
Contract data: This means data that is collected in relation to entering into or the conclusion or performance of a contract, for example information about the contracts and the Services provided or to be provided, as well as data from the period leading up to the conclusion of a contract, information required or used for performing a contract, and information about feedback. We collect contact information when you create an account or use our Services to contact us. We generally collect this data from you, from contractual partners and from third parties involved in the performance of the contract, but may also collect from third-party sources and/or public sources.
Preference data: Depending on our relationship with you, we try to get to know you better and to tailor our products, services and offers to you. For this purpose, we may collect and process data about your preferences. Based on this data, we may for example determine if you are interested in certain services . The data processed for this purpose is already known to us (for example where and when you use our Services), or we collect it by recording your behavior (for example how you navigate our website). We collect browsing information automatically when you visit our Websites.
Social Media Information: We collect this information automatically when you share information through social media widgets on our Services. We also collect it when you voluntarily provide it to us.
Much of the data is provided to us by you (through forms, when you communicate with us or when you use our Services or buy our Products). You are not obliged or required to disclose data to us, unless you choose to continue using our Services.
As far as it is lawful, we may also collect data from public sources (for example the media, or the internet including social media) or receive data, from service providers and other third parties in connection with your use of our products or services or your interactions with us on other platforms or when you buy our Products.
We generally process your data for purposes related to communicating with you, including responding to inquiries or to help you exercise your rights . For this purpose, we may use communication data and master data, and registration data in relation to offers and Services that you use and the Products that you purchase. We keep this data for purposes such as documenting our communication with you, training purposes, quality assurance, providing our Services and any associated support for them including follow-up inquiries.
We process data for the administration and performance of contractual
relationships including providing you with Services and Products. We may also use data if you take part in studies in order to measure the effectiveness of our Products and to improve these.
We process data for marketing purposesand relationship management, for example to send you personalized advertising for products and services from us, some of which may be offered in partnership with third parties. This may happen in the form of newsletters and other regular contacts, through other channels for which we have contact information from you, but also as part of marketing campaigns and may also include free services.
We further process your data for data analytics, market research, to improve our services, products and operations, and for product development.
We may also process your data for security and access control purposes.
We process personal data to comply with laws, directives and recommendations from authorities and internal regulations («Compliance»).
We also process data for the purposes of our risk management and as part of our corporate governance, including business organization and development.
We may process your data for further purposes, for example as part of our internal processes and administration or for quality assurance purposes and training.
The legal bases on which we process your personal data depend on the Services you use and how you interact with them and the applicable law. We may ask for your consent for certain processing activities. You may withdraw your consent at any time with effect for the future by contacting us through the relevant Service. Once we have received notification of withdrawal of consent, we will cease processing your information for the purpose(s) you consented to within the legally required timeframe, unless we have another legal basis to continue doing so. Withdrawal of consent does not, however, affect the lawfulness of the processing based on the consent prior to withdrawal.
Where we do not ask for consent for processing, the processing of your personal data relies on the requirement of the processing for initiating or performing a contractwith you or on our legitimate interestin the particular processing. Our legitimate interests also include compliance with legal regulations, insofar as this is not already recognized as a legal basis by applicable data protection law. This also includes the marketing of our products and services, the interest in better understanding our markets and in managing and further developing our Products other Services, and Keto Swiss Corporation, including its operations, safely and efficiently.
We may process your data on other legal basis, for example, in the event of a dispute, as required in relation to a potential litigation or for the enforcement or defense of legal claims. In some cases, other legal basis may apply, which we will communicate to you separately as necessary.
We may automatically evaluate personal aspects relating to you, where we wish to determine preference data, but also to detect misuse and security risks, to perform statistical analysis or for operational planning. We may also create profiles for these purposes, i.e., we may combine behavioral and preference data, but also master data, contract data and technical data relating to you in order to better understand you as a person and your experiences. In particular we tailor or customer information (including newsletters) to your interest based on the feedback we receive from you through forms or your interaction with our newsletters.
In this case, we pay attention to the proportionality and reliability of the results and take measures against misuse of these profiles. Where these can produce legal effects concerning you or similarly significantly affect you, we ensure human review.
In relation to our contracts, the website, our Services and products, our legal obligations or otherwise with protecting our legitimate interests and the other purposes, we may disclose your personal data to different parties:
Service providers: We may work with service providers in the US, Europe and abroad who process your data on our behalf. This includes for example hosting services. We disclose personal information to these service providers for a business purpose.
Parties you Authorize, Access, or Authenticate: Third parties you access through the services, social media services you use or other users with whom you communicate. For example, we work with businesses such as Shopify and Stripe. We receive transactional information from the business e.g., if the payment or age verification was successful or information on your shopping experience.
Contractual partners:This refers to contractual partners we may enter into partnerships or other contractual relationships with. For example, they may receive anonymized registration data in relation to issued and redeemed vouchers or invitations. These recipients may also include contractual partners with whom we cooperate or who carry out advertising for us and to whom we may therefore disclose anonymized or pseudonymized data about you for analysis and marketing purposes.
Authorities: We may disclose personal data to agencies, courts and other authorities in the US and abroad if we are legally obliged or entitled to make such disclosures or if it appears necessary to protect our interests.
Disclosure in Merger, Sale or Other Asset Transfer: In the event of a reorganization, dissolution, merger, sale or bankruptcy, we may transfer any information we collect to relevant third parties and will obtain your consent to do so where required.
Other persons: This means other cases where interactions with third parties follows from the purposes, for example service recipients, the media and associations in which we participate or if you are included in one of our publications.
In addition, we enable certain third parties to collect personal data from you on our website and in our Services. Where we have no control over these data collections, these third parties are sole controllers.
When you use our Services or access our Websites, we may collect personal data about you which may be transferred, processed and/or accessed by us in the United States or any other country in which we or our service providers operate (such as in the EEA, Switzerland and Mexico). Please be aware that the privacy laws and standards in certain countries, including the rights of government authorities to access your personal information, may differ from those in the country in which you reside. We will only transfer personal information to those countries to which we are permitted by law to transfer personal data.
For data transfers, Keto Swiss has taken the necessary steps to comply with applicable data protection laws to ensure that international transfers of data are carried out with an adequate level of protection by implementing an agreement incorporating the European Commission's standard contractual clauses.
We generally store and retain your data for as long as our processing purposes, legal retention periods and our legitimate interests in documentation and keeping evidence may require, or where storage is a technical requirement. When determining applicable retention periods, we consider multiple criteria including the minimum requirements under applicable law, applicable industry standards and whether the data is required to prevent fraud, cheating or other forms of misuse of our Services. If there are no contrary legal or contractual obligations requiring otherwise and there are no further purposes for processing the data, we will delete or anonymize your data once the retention period has expired as part of our usual processes.
Applicable data protection laws grant you the right to object to the processing of your data in some circumstances, in particular for direct marketing purposes, for profiling carried out for direct marketing purposes and for other legitimate interests in processing.
You may have the following rights depending on the data protection law(s) applicable to you:
The right to request information from us as to whether and what data we process from you;
The right to have us correct your personal data if it is inaccurate;
The right to request deletion of your personal data;
The right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
The right to withdraw consent, where our processing is based on your consent;
The right to receive, upon request, further information that is helpful for the exercise of these rights;
The right to express your point of view in case of automated individual decisions and to request that the decision be reviewed by a human.
If you wish to exercise the above-mentioned rights or have any questions relating to those rights, please contact us. For us to be able to prevent misuse, we need to verify your identity.
Selling and Sharing.
Keto Swiss Corporation does not sell your personal information, nor have we done so in the last twelve months. By sell, we mean exchanging your data with another party for financial compensation.
We do share your information. By share, we mean making personal information available to another party for cross-site or interest-based advertising. We share information with analytics service providers, such as Google. Those parties may combine your browsing information, including information from your use of our Websites, to generate interest-based advertisements.
By clicking the link Privacy Settings on this website you are given the option to choose how we can use your personal information. If you decide not to allow any other than the necessary cookies, your personal information will not be shared or sold.
Keto Swiss Corporation provides you with the ability to access, edit, or remove certain information, as well as choices about how we contact you. Although some of these rights apply generally, certain rights apply only to limited individuals or circumstances.
Right to Know and Access Information.
For example, you have the right to know about our information practices. You also have the right to know the categories of information we collect, with whom we share that information, and in some cases, what specific personal information we associate with you or your account.
Right to Data Portability.
We will provide you with a copy of certain information we hold about you in an easily accessible format if you request it.
Right to Deletion or Erasure.
You may request that we delete the personal information we have collected about you.
Right to Correct Information.
You may request that we correct or amend any inaccurate information we have about you or your account.
Right to Object to & Restrict Processing.
You may object to the processing of your personal information on the basis of our legitimate interests at any point in time. You may object to (and opt-out of) direct marketing. You may restrict or limit the way we use your information when:
You contest the accuracy of the personal information.
You believe our processing to be unlawful, but don’t want us to delete it.
We no longer need the personal information for the purposes we collected it, but must retain it for legal purposes (for example, defending legal claims).
You have objected to our processing of your personal information and we are verifying whether that objection controls our legitimate use of the personal information.
Right to Universal Opt-Out.
You can limit certain ways in which we use and disclose your personal information (also called "opting out" or "requesting an opt-out"). You can opt out of having your personal information shared for targeted advertising purposes and opt out of having your sensitive personal information shared. This can be done it through the
Privacy Settings.
Right to Withdraw Consent.
You may withdraw your consent to our consent based data processing at any time.
Right to Non-Discrimination.
You have the right not to be discriminated against by us for exercising the rights listed in this section. What we mean by discrimination is denying you access to our services or limiting the quality of our services. However, restricting or deleting your personal information may limit the purposes or uses that rely on that information. If you need further assistance, you may contact us through any of the channels listed in this notice.
California’s Shine the Light Law: If you are a California resident, you may request and receive information about our disclosures of your personal information to third parties for their direct marketing purposes in the preceding year. If applicable, this information would include a list of the categories of personal information shared and the names and addresses of the third parties with whom we shared your information in the immediately preceding year.
California’s Online Eraser Law: If you are a California resident under the age of 18 and a registered user of our websites, you may request and obtain removal of content or information that you have posted. A request to remove content or information that you have posted does not ensure or require the complete or comprehensive removal of such content or information from our databases (for example, content that has been reposted by another user may not be removable). To exercise any of your privacy rights, please fill out the appropriate form under this link: https://www.brainritual.com/pages/us-laws-compliance?id=do-not-sell
The age at which minors can create an account with Keto Swiss or have access to some of our Services depends on the laws of the person’s respective country. Our Services are intended to be suitable for a general audience and are not directed at persons under the age of 13. Keto Swiss does not intentionally collect personal information from minors.
We will change this Privacy Notice from time to time to reflect changes in any relevant laws or our privacy practices. In some cases, we may also notify you of the relevant changes by email or within the Services. The version published on this website is the current version. We encourage you to review this notice regularly to ensure you understand your relationship with us and the ways we may collect and process information in connection with the Services.
Last updated: September 14, 2023
Keto Swiss Corporation,300 Delaware Ave, Ste 210 #391, Wilmington, DE 19801 is the controller for Keto Swiss Corporation’sprocessing under this Privacy Notice, unless we tell you otherwise , for example in additional Privacy Notices, on a form or in a contract.
You may contact us for privacy concerns and to exercise your rights as follows:
Keto Swiss Corporation
300 Delaware Ave
Ste 210 #391
Wilmington, DE 19801
Attention: Data Protection
Please contact us at dataprotection@brainritual.com.