Privacy Policy

Last updated: 13. October 2025

1. Data Controller

College for Knowledge
c/o Andreas Gross
Althusweg 12
6315 Morgarten
Switzerland
Contact: by Contact Form

2. Applicable Law

This Privacy Policy is based on:

  • Swiss Federal Act on Data Protection (FADP) – Primary applicable law
  • EU General Data Protection Regulation (GDPR) – For customers in the EU
  • California Consumer Privacy Act (CCPA) – Additional rights for California residents

3. Data We Collect

3.1 When You Visit Our Website

When you access our website, our server automatically logs:

  • IP address
  • Date and time of access
  • Pages accessed
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)

Purpose: Ensure website functionality, security, and stability.

Legal Basis:

  • Switzerland: Art. 6(2)(a) FADP (legitimate interest)
  • EU: Art. 6(1)(f) GDPR (legitimate interest)

Storage Duration: Maximum 7 days

3.2 When You Place an Order

When you purchase an eBook, we collect:

  • Name
  • Email address
  • Billing address (if different from email)
  • Payment information (processed by third-party payment providers – see Section 4)

Purpose:

  • Order processing and fulfillment
  • Sending download links
  • Invoice generation
  • Legal record-keeping requirements

Legal Basis:

  • Switzerland: Art. 6(2)(a) FADP (contract fulfillment)
  • EU: Art. 6(1)(b) GDPR (contract fulfillment)

Storage Duration: 10 years (Swiss accounting requirements)

3.3 Cookies

We use cookies (small text files stored on your device).

Types of Cookies:

Essential Cookies (cannot be disabled):

  • Session cookies for shopping cart functionality
  • Security cookies

Optional Cookies (can be disabled):

  • Analytics cookies (if implemented) – anonymized data only

You can configure your browser to reject cookies, but this may limit website functionality.

4. Data Sharing

4.1 Payment Service Providers

We do NOT process credit card payments ourselves.

All payments are handled by certified third-party payment providers (such as PayPal, Stripe, or cryptocurrency payment processors).

What we share: Order amount, order ID
What we DON'T share: Complete credit card numbers (never stored on our servers)
What they share back: Payment confirmation (success/failure)

All payment providers are:

  • PCI-DSS certified
  • Contractually obligated to comply with data protection regulations
  • Process data only for payment purposes

4.2 Hosting

This website is hosted by us (College for Knowledge) on infrastructure provided by Flokinet (Romania/Iceland).

Flokinet has access to server data only for technical operation purposes and is contractually bound to data protection compliance.

4.3 Legal Obligations

We may disclose data if legally required by Swiss or applicable authorities.

4.4 No Data Sales

We do not sell your personal data to third parties. Period.

5. Data Retention

Data Type Retention Period
Order data 10 years (Swiss law)
Server logs 7 days maximum
Email correspondence Until purpose fulfilled or deletion requested
Cookies Session end to 12 months (depending on type)

After retention periods expire, data is securely deleted.

6. Your Rights

6.1 Swiss & EU Residents

You have the right to:

  • Access your stored data (Art. 25 FADP / Art. 15 GDPR)
  • Rectification of incorrect data (Art. 32 FADP / Art. 16 GDPR)
  • Erasure of your data (Art. 32 FADP / Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 28 FADP / Art. 20 GDPR)
  • Objection to processing (Art. 30 FADP / Art. 21 GDPR)

To exercise these rights: Contact us via [Contact Form]

Note: Some data may be retained for legal compliance (e.g., 10-year accounting records) even after deletion request.

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

  • Right to Know: What personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: We do NOT sell personal information (so nothing to opt out of)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise CCPA rights: Contact us via [Contact Form]

We will respond within 45 days.

7. Right to Withdraw Consent

If processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

8. Right to Complain

You have the right to file a complaint with a data protection authority:

Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
Website: www.edoeb.admin.ch

EU:
Your local data protection authority in your country of residence

California:
California Attorney General's Office
Website: oag.ca.gov/privacy

9. Data Security

We protect your data through:

  • SSL/TLS encryption (entire website – look for padlock in browser)
  • Encrypted payment processing (all payment data encrypted in transit)
  • Access controls (only authorized personnel can access personal data)
  • Regular security updates
  • Secure hosting (Flokinet – privacy-focused infrastructure)

However: No internet transmission is 100% secure. Use at your own risk.

10. No Automated Decision-Making

We do not use automated decision-making or profiling as defined in Art. 22 GDPR.

11. International Data Transfers

Primary storage: Switzerland / EU (Flokinet infrastructure)

If data is transferred outside Switzerland/EU, we ensure protection through:

  • EU Standard Contractual Clauses
  • Other approved safeguards under GDPR/FADP

Payment providers (e.g., PayPal) may process data in the USA under their own privacy policies.

12. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect data from children.

If you believe a child has provided us data, contact us immediately for deletion.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal changes or operational adjustments. Check this page periodically.

The current version with "Last updated" date is always authoritative.

14. Contact & Questions

Privacy inquiries: [Contact Form]

Postal address:
College for Knowledge
c/o Andreas Gross
Althusweg 12
6315 Morgarten
Switzerland

We typically respond within 48-72 hours.

Your privacy matters to us.
If you have concerns about how we handle your data, please reach out before filing complaints – we're committed to resolving issues directly.