Privacy Policy
This policy explains how K-I-Soft IT&Holding GmbH ("we") processes personal data in connection with the Munot website and service. It follows the Swiss Data Protection Act (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
K-I-Soft IT&Holding GmbH, Bernstrasse 27b, 3122 Kehrsatz, Switzerland · info@k-i-soft.ch. UID CHE-366.968.537.
2. Categories of data we process
2.1 User account
To sign in we keep an account via AWS Cognito: email address, name and authentication data (the password is stored only as a hash by Cognito; optional two-factor via TOTP or passkeys). Purpose: providing the service and account security. Legal basis: performance of the contract.
2.2 Contact
If you send us a message via a form (e.g. account confirmation) or by email, we process your name, email address and message to answer your request (delivery via AWS SES). For spam protection we use privacy-friendly, server-side measures only, without any third party. No data is transmitted to any third party (in particular no Google reCAPTCHA). Abuse protection at the network level (rate limiting) is performed transiently by our infrastructure (AWS, Switzerland).
2.3 Server logs of the Munot website
Visiting the website generates technical access logs (IP address, user agent, timestamp, requested resource). They serve secure operation and troubleshooting. Legal basis: legitimate interest in secure operation.
2.4 Analytics of connected websites (processor)
The core of the service is analysing the CloudFront access logs of the websites you connect. These logs contain, among other things, IP addresses and user agents of the visitors of those websites. For this data the customer is the controller; K-I-Soft acts as a processor on the customer’s instructions and solely to provide the service. Munot aggregates the logs into metrics (classification human / search bot / AI crawler, aggregated per hour, day and month); these aggregated reports contain no raw IP addresses. If the customer additionally connects the logs of their AWS WAF, Munot also processes those records (among other things IP address, request headers without cookies and authorization, the WAF’s decision and rule) to analyse attacks, false positives and blocked crawlers. The view of individual requests and the history of an IP address are visible only to project owners and administrators; every access is logged.
3. Hosting and infrastructure
Munot runs on Amazon Web Services (AWS) in the Zurich region (eu-central-2) — data is stored and processed in Switzerland. AWS acts as our processor. AWS services used include CloudFront, S3, Cognito, DynamoDB and SES.
4. Third-party services
- AWS (Switzerland)
- Hosting, authentication, storage, email delivery
Spam protection uses no third-party services (no Google reCAPTCHA or similar).
5. Retention
Account data is kept until the account is deleted. Raw access logs of connected websites are retained only for a limited time after processing and then deleted; the aggregated metrics are retained for analysis. WAF logs and the per-request view built from them are deleted after 30 days. Contact requests are deleted once no longer needed.
6. Your rights
Subject to applicable law, you have the right to access, rectification, erasure, restriction and data portability, and to object to certain processing. Where the data concerns the analytics of a connected website, please contact the responsible controller (the customer). Otherwise you can reach us at info@k-i-soft.ch.
7. Right to complain
You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you may also complain to an EU supervisory authority.
8. Changes
We may update this policy. The version published here at any time applies.
9. Contact
K-I-Soft IT&Holding GmbH, Bernstrasse 27b, 3122 Kehrsatz, Switzerland · info@k-i-soft.ch