Privacy policy
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for processing your personal data is Starnet24 GmbH, Sonnhaldenstrasse 1, 8113 Boppelsen, Switzerland, operating under the Online Planet brand. For questions about data protection, contact us at eservice@online-planet.ch or by post at the address above.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example because you live in the EU, we also comply with it.
2. Visiting this website
When you visit, the web server stores technically necessary information such as IP address, date, time, page visited, referrer and browser type in log files. We use it exclusively for secure and stable operation and delete it after 30 days at the latest. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR).
This website does not set cookies, does not use third-party tracking services and does not load fonts or scripts from third parties.
Visitor statistics. To improve our services, we keep our own anonymous statistics. We record the page visited, the referring website, device type, browser, operating system, browser language, time on page and clicks on order, phone and email links. We only recognise a visit for one day, using an anonymous key calculated from the IP address and browser identifier with a random value that changes daily. We do not store the IP address itself and no cookies are set. The data stays on our server, is not passed on to third parties and is deleted after 25 months. If you have enabled “Do Not Track” or “Global Privacy Control” in your browser, your visit is not recorded. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR).
3. Contact form, help bubble and enquiries
If you contact us via a form, email, phone or WhatsApp, we process your details (e.g. name, email address, phone number, message) to answer your enquiry. Enquiries about domain extensions are recorded as tickets in our customer centre. We store the IP address only in encrypted, non-reversible form to prevent misuse. We delete enquiries once they have been dealt with and no retention obligation applies. The legal basis is pre-contractual measures and our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
If you write to us via WhatsApp, WhatsApp’s (Meta’s) privacy policy also applies. If you prefer not to use it, please use email or phone instead.
4. Orders, contracts and customer centre
For orders, contracts, invoices and support, we process your contact, contract, billing and payment details in our customer centre. The customer centre uses technically necessary cookies for logging in. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations (point (c)). We keep business records such as invoices for the statutory periods, usually ten years.
You can pay by QR bill, credit card or TWINT. Credit card and TWINT payments are processed by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland). Stripe receives the necessary details such as name, email address, amount and payment data and also processes them under its own responsibility, for example to prevent fraud. Data may also be transferred to Stripe, Inc. in the USA; Stripe relies on the Data Privacy Framework and standard contractual clauses for this. We do not store card details ourselves. With a QR bill, you pay through your bank without third parties receiving any additional data from us.
To protect against automated sign-ups, the customer centre uses its own captcha, without third-party providers and without cookies.
5. Hosting and email
The servers for web hosting and email are located in data centres in Germany (EU). Under Swiss data protection law, Germany provides an adequate level of protection.
Data that you store on our servers yourself, for example on your website or in your mailboxes, is processed by us on your behalf as a processor. The details are set out in section 17 of our terms. You are the controller for this data.
6. Domain registration
To register domains, we pass the necessary holder details (name, address, email address, phone number) to our registrar Internet.bs Corp., based in the Bahamas, and to the responsible registry, for .ch and .li to SWITCH in Zurich. Depending on the extension, the registrar and registry are based in a country without an adequate level of data protection. The transfer is essential for registration and takes place to perform the contract (Art. 17(1)(b) FADP, Art. 49(1)(b) GDPR). Depending on the extension and holder, some details can be looked up in public directories (WHOIS/RDAP).
7. Other recipients
We only pass on personal data where this is necessary for the purposes described, where you have consented or where we are legally obliged to do so. Recipients include in particular data centre operators, email delivery providers, payment service providers, the registrar and registries, and authorities where required by law. Our service providers are contractually bound to protect data. We do not sell personal data.
8. Data security
We protect your data with appropriate technical and organisational measures such as encrypted connections, access restrictions, separate customer accounts and regular backups.
9. Your rights
You have the right to request information about your personal data, to have inaccurate data corrected and to have data deleted unless a retention obligation applies. You may object to processing, withdraw consent at any time and request your data in a common electronic format. Where the GDPR applies, you may also request the restriction of processing.
To exercise these rights, contact us at the address in section 1. We may ask for proof of identity. You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with the supervisory authority in your country of residence.
10. No automated decisions
We do not make decisions based solely on automated processing and do not carry out profiling.
11. Changes
We update this policy when our data processing changes. The version published on this page applies.