Legal information

Privacy policy

1. Controller

Koste Group SA, c/o AFI-Partner SA, Rue de la Dent-Blanche 20, 1950 Sion, Switzerland, UID CHE-110.580.717. Contact: [email protected]

This policy covers the koste-editions.com website. It follows the Swiss Federal Act on Data Protection (FADP) and, for data subjects in the European Union, the GDPR.

2. Data processed and purposes

  • Account: first and last name, email address, password stored in hashed form, and a session cookie. Purpose: creating the account, giving access to the account area, resetting the password. Basis: performance of the contract.
  • Google or Facebook sign-in, if you choose it: account identifier, name, email address and profile picture sent by that provider. Basis: performance of the contract.
  • Orders: name, email address, language and product type, amount, currency, date, order number and status, Stripe payment identifiers. Basis: performance of the contract and legal accounting obligations.
  • Personalised PDF: the name, email address, date and order number are printed on each page; the file is kept on our servers. Purpose: delivering the copy and protecting it against distribution. Basis: performance of the contract and legitimate interest.
  • Gift packs: a recipient who claims a copy creates or uses an account. Their name is visible to the pack buyer, and the buyer's name, or failing that their email address, appears in the gifted copy. Basis: performance of the contract.
  • Emails: order confirmation, pack links and password reset. The site sends no newsletter. Basis: performance of the contract.
  • Withdrawal: name, email address, order number, date and time of the declaration. Purpose: to process your request and keep proof of it. Basis: performance of the contract and legal obligation.
  • Reviews: name (the account name, or the one entered without an account), text, rating, language and link to the account. Reviews are published immediately and visible to everyone. Basis: consent given by publishing.
  • Internal audience measurement: page viewed, referring site, campaign source, language, device type, time spent, and two random identifiers kept in the browser. This measurement records neither IP address nor cookie. Basis: legitimate interest.
  • Google Ads tag: loaded on public pages, it sends browsing data to Google and may set cookies, in order to measure advertising campaigns. Basis: legitimate interest.
  • Technical data: IP address and connection data processed by infrastructure providers, technical server logs, language cookie. Basis: legitimate interest in the security and operation of the site.

3. Data taken over from liberteam.info

The book was first sold on liberteam.info. Accounts, sign-ins, purchases and reviews related to the book were taken over by this site. The Stripe account is shared with liberteam.info.

4. Recipients

We do not sell your data. It is entrusted to the following providers, for the purposes described:

  • Hetzner Online GmbH (Germany): website hosting.
  • Cloudflare: network and security between your browser and the site.
  • Stripe: payment, tax calculation, receipt. Stripe directly collects your payment data and, where needed, your billing address. We do not receive card numbers.
  • Smailor: sending emails.
  • Google: sign-in, if you choose it, and the Google Ads tag.
  • Meta (Facebook): sign-in, if you choose it.

5. Transfers abroad

Your data may be processed outside Switzerland and the European Economic Area, in particular in the United States, by the providers above. These transfers rely on an adequacy decision or on the safeguards provided by law, such as standard contractual clauses.

6. Retention periods

  • Account: for as long as it exists. There is no automatic deletion; deletion is on request.
  • Orders and accounting records: 10 years, the Swiss statutory period (art. 958f of the Code of Obligations).
  • Personalised PDFs: kept with the order.
  • Withdrawal declarations: as for the orders they relate to.
  • Reviews: for as long as they are published, or until a removal request.
  • Internal audience measurement: no automatic deletion is scheduled at present.
  • Password reset links: 1 hour.
  • Data processed by providers: according to their own policies.

7. Your rights

You may request access to your data, its rectification, erasure, restriction of processing and portability, object to processing based on legitimate interest and withdraw your consent. Write to [email protected]. Some data must nevertheless be kept to comply with the law.

You may also contact the Federal Data Protection and Information Commissioner (Switzerland) or the supervisory authority of your country of residence in the European Union.

8. Required data and automated decisions

An account and an email address are required to buy: without them, ordering and delivery are impossible. No decision with legal effects is made solely by automated means.

9. Changes

This policy may change as the site changes. The version in force is published on this page.

Version of 5 November 2026