PRIVACY POLICY

What is this all about?
When you use the website https://planb.lugano.ch (hereinafter, the "Site") and related resources, such as the contact form, the e-commerce area (purchase event tickets), telephone support, email, social media profiles or the newsletter (hereinafter, the "Platform"), Altkey SA collects and processes information about you (hereinafter, "personal data"). The purpose of this page is to inform you about the personal data collected, the processing carried out, the purposes pursued, the recipients of the data and their possible transfer abroad.
Since you have a wide choice of online resources at your disposal, you will find below a general section with information that applies to the entire platform and special sections with information specific to individual resources.
Who are we and how can you contact us?
AltKey SA, Lugano (TI - CH) decides on the purpose and the means of the processing of your personal data.
To communicate with us, please use the following contacts: (i) postal address: c/o PM Consulenze SA Viale Stefano Franscini 16, 6900 Lugano; (ii) e-mail: [email protected] .
Our philosophy on the processing of personal data
We only collect and use the personal data necessary to operate the Platform in a smooth and secure manner. We do not profile you, we do not monitor your behaviour and we do not pass on your personal data to third parties without your consent. In order to expand and improve our services, we limit ourselves to analyzing the use of the services in an aggregate manner, thus guaranteeing the anonymity of the users concerned. In addition, we carry out the processing that is obligatory by law.
We give preference, where necessary, to expressly given consent as the justification for processing and only delegate processing to carefully selected external providers who have undertaken strict data protection obligations.
Finally, we give priority to localizing processing in Switzerland. Processing carried out abroad is, where possible, limited to States offering an adequate level of data protection in accordance with the guidelines provided by the Federal Data Protection Commissioner (the full list of States can be found here ).
If you are a natural person living in the European Union, please also read here
Switzerland is not a Member State of the European Union (EU), so European law is not directly applicable. Article 3(2) of the General Data Protection Regulation (EU) 679/2016 (hereinafter " GDPR ") specifies that the GDPR applies to entities not established in the EU, where the processing of data is related to (i) the offering of goods or services to natural persons in the EU or (ii) the monitoring of the behaviour of natural persons in the EU.
Altkey SA does not direct its activities to the EU, nor does it monitor the behaviour of those in the EU. Swiss law offers an adequate level of protection of personal data, as determined by the European Commission on 26 July 2000 (read the adequacy decision here ).
When subject to the GDPR, this document shall be regarded as a privacy policy within the meaning and for the purposes of Articles 13 and 14. In addition to benefiting from all the protections provided by the GDPR, you may assert your rights as outlined in Articles 15, 16, 17, 18, 19, 20, 21, 22 GDPR, by contacting Altkey SA. You have the right, at any time, within the limits and under the conditions set out in the GDPR, to ask Altkey SA for access to your personal data, to rectify them, to delete them or to restrict the processing of your personal data or to object to its processing, as well as to exercise your right to the portability of such data. If the processing is based on Article 6(1)(a) or Article 9(2)(a) GDPR, you have the right to withdraw your consent at any time. You have the right to lodge a complaint with the competent supervisory authority. In the event of a request for data portability, Altkey SA shall provide you with the personal data concerning you in a structured, commonly used and machine-readable format, subject to paragraphs 3 and 4 of Article 20 GDPR.
Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority (EU: list of national authorities ).
Under no circumstances are references to the GDPR to be construed as voluntary subjection to such legislation or to the supervision and/or decision-making power of any foreign authority (with respect to Switzerland).
If you are under 18, please also read here
Processing based on your consent is only lawful if you are at least 16 years old.
If you are under 16, consent must be given or ratified by your parents (or legal guardian).
Although we make reasonable efforts and in view of available technology to verify that parental consent, where mandatory, is present and effective, you have an obligation to state your correct age and to refrain from giving consent where parental involvement is required.
General information (applies to all online resources)
Applicable law. In the context of making the Platform available, Altkey AG carries out activities of an economic nature in the private sector. The processing of personal data is therefore governed by the Federal Data Protection Act ( DPA ; SR 235.1).
Obligation to consult. The privacy policy is variable over time as data processing evolves according to the services offered. Since changes are only published online, it is your duty to visit this page each time you use the services so that you are always up-to-date.
What rules apply to the use of the Platform? This is the privacy policy for the website and related resources/activities. You can view the contractual clauses concerning the use of the Platform and the purchase of event tickets by clicking here .
What is 'personal data'? All information relating to an identified or identifiable natural person, such as name, surname, address, date of birth, e-mail, telephone number, IP address ( what is this? ), personal preferences and interests, purchases made, web pages visited, geolocation and movement data, etc. Until 1 September 2023, information relating to legal persons is also considered personal data.
What is 'sensitive personal data'? This refers to particularly sensitive personal data: (i) data on religious, ideological, political or trade union related views or activities, data on health, the intimate sphere or the racial or ethnic origin, (ii) genetic data, (iii) biometric data which unequivocally identifies a natural person, (iv) data on administrative or criminal proceedings and sanctions, (vi) data on social security measures.
Help us protect your data: it is also your duty. The use of the Internet and e-mail is exposed to risks. Protect your devices and confidential data (such as user name, password and access PIN) properly by implementing the security recommendations of specialists ( link ). Store such data in such a way that they are not accessible to third parties. Do not provide information relating to the contractual relationship (such as customer number, consumption data, contract ID and counter number) to unauthorised persons who could use it to commit identity theft. Only send information by e-mail that you would be willing to make public. Given the nature of the Internet as an 'open network', we cannot guarantee that your data will not be intercepted, modified or acquired by unauthorised third parties.
Help us keep your data up to date: it is also your duty. By using our services, you are responsible for the accuracy of the personal data and information you provide us with. You also undertake to inform us spontaneously and promptly of any changes to your data so that our records can be kept constantly up-to-date.
Authorisation for the use of e-mail. E-mail is not a means of communication that protects the confidentiality, authenticity and integrity of transmissions, so it is possible for unauthorised third parties to access the information and possibly modify its contents or otherwise manipulate it. We therefore advise you not to send confidential information and data by e-mail. However, by providing us with your e-mail address, unless expressly instructed otherwise, you authorise us to send you the requested documents and information, including any personal data or confidential information, by non-certified and unencrypted e-mail, assuming the associated risks.
Period of storage of the personal data. When the purposes for which the data was collected are fulfilled we destroy or anonymise your data. The retention obligations provided for by law are reserved (e.g. 10 years if the information has an accounting value). You can request detailed information on the data retention policy for a specific processing activity by writing to [email protected] .
Legal basis of personal data processing. The processing of personal data is unlawful when it constitutes a violation of the personality. A violation of the personality may be justified by the consent of the data subject, by an overriding private or public interest or by law. An overriding private interest exists, in particular, if the processing is necessary for the supply of goods and/or services requested by the customer. Where required by law, e.g. in the case of marketing or advertising activities involving user profiling or automated decision-making or the processing of sensitive data, Altkey SA will submit a request for informed consent to you via electronic (online or e-mail) or analogue (regular mail) channels.
Service providers in contact with personal data. We involve external service providers in order to be able to provide the required services in the best possible way. External service providers only have access to data to the extent strictly necessary for the performance of their tasks, subject to strict confidentiality and non-use obligations in relation to personal data. Wherever possible, we use service providers established in Switzerland or in States that adequately protect personal data (exception: Bitfinex Pay for user-requested payment transactions in virtual currencies, which is operated by companies established in the British Virgin Islands (BVI); see relevant section). Without prejudice to the data processing provided for by law, the data collected within the Platform may be made accessible or communicated to recipients outside Altkey SA belonging to the following categories: (a) entities providing IT and telecommunications services; in particular, these are the following areas: issuing and management of tickets for events ( www.tickettailor.com ), management of payments in virtual currencies ( https://pay.bitfinex.com ) and in fiat currencies ( www.tickettailor.com ) in connection with the purchase of tickets for events, hosting of the website https://planb.lugano, cloud computing services (text and data processing, archiving, backup, IT management system and e-mail) and sending and management of newsletters; (b) credit institutions; (c) parties providing services in the marketing, legal, technical, accounting, administrative, tax and auditing fields.
The complete and up-to-date list of external suppliers is available for viewing at our premises. For reasons of data and IT systems security, certain information may be anonymised or appropriately masked.
If you visit our website, please also read here
Showcase on products and services, events and promotions. Subject to the data processing required by law and the exceptions, derogations and restrictions to the duty of information, when you visit our Site in search of information on products and services, events and promotions, the processing of personal data may be summarised as follows:
  • Data collected: IP address ( what is this? ); settings and characteristics of the browsing programme (name, language, plug-ins installed); pages visited, length of stay, page of origin (e.g. google search or previous site); approximate location based on IP address (generally corresponding to the location of your Internet access provider); search terms; unique identifier of the mobile device used; technical and analytical and statistical cookies (for cookies, see dedicated section).
  • Purposes pursued: (i) to enable navigation on the site; (ii) to perform analysis and anonymous statistics on the website’s usage on the basis of aggregated, depersonalised and/or anonymised data for the purposes of optimising the security, usability and quality of services and content, as well as introducing new content, products, services, functions and interfaces.
  • Recipients: no third parties.
  • Transfers abroad: none.
When you view videos published on our Site, the videos may be called up by your browser from www.youtube.com (see Youtube ’s privacy policy).
If you subscribe to the newsletter or receive it because you are a customer, please also read here
The Newsletter is a free service made available to all interested parties and buyers of event tickets. To receive it, you must register by providing your e-mail address in the form provided ( https://planb.lugano ). If you are a customer, you will automatically receive the Newsletter in connection with goods, works and services similar to those contracted with Altkey SA. Unsubscription from the list of recipients is possible at any time and with immediate effect by activating the dedicated link at the bottom of each e-mail.
The Newsletter does not track or profile you on the basis of the content or links you activate. Instead, we conduct statistical analyses in an aggregated manner, thus ensuring anonymity, to assess general interest in the content and events offered.
Your e-mail address is not passed on to third parties. For technical reasons, we delegate the handling of the Newsletter to an external provider, which must be established in Switzerland or in a State that offers an adequate level of data protection (e.g. EU).
If you use the contact form on the Site, please also read here
Subject to data processing required by law and exceptions, derogations and restrictions to the duty of information, when using the contact form ( link ), personal data processing may be summarised as follows:
  • Data collected: name and surname; e-mail; message; IP address; other information voluntarily provided;
  • Purposes pursued: provision of required information;
  • Transit mode: electronic mail;
  • Recipients: no third parties;
  • Transfers abroad: none.
If you use the portal to purchase tickets for events, please also read here
Subject to data processing required by law and exceptions, derogations and restrictions to the duty of information, personal data processing may be summarised as follows:
We use your personal data for direct marketing purposes
We use your personal data for direct marketing purposes if you have given your consent, subject to Altkey SA's right to transmit advertising communications and offers in the context of existing or pre-existing contractual relationships concerning similar goods, works and services in compliance with legal requirements. We do not pass your data on to third parties, we do not analyse your surfing habits and we do not cross-reference data with information from third parties in order to propose personalised offers to you without your consent. Subject to data processing required by law and exceptions, derogations and restrictions to the duty of information, personal data processing may be summarised as follows:
  • Data collected: name/surname; telephone number; home address; telephone numbers; e-mail; information on products and/or services purchased; correspondence;
  • Purposes pursued: manual and automated direct marketing by means of (i) sending information-advertising material, surveys, events and initiatives concerning products and/or services previously purchased or according to the interests communicated by the user; (ii) carrying out analyses and statistics for the purpose of optimising consumption, usability and quality of products, services and content, as well as introducing new products, services and content (in particular by means of the Newsletter and cookies; see dedicated sections).
  • Methods of communication SMS, telephone calls with operator, paper mail and e-mail.
  • Recipients Newsletter service provider, limited to related data (for Newsletter, see dedicated section)
  • Transfers abroad For Newsletter, see dedicated section.
We use 'cookies' to provide you with the best possible user experience
What are cookies? Cookies are small text files deposited in your system by the relevant servers when you browse the web or use Apps. Thanks to cookies, the servers are able to detect your browser and device during your browsing and in the event of a next visit.
Types of cookies. There are several categories of cookies.
  • Considering who deposits a cookie on your system, if it is the owner of the visited website and he does not disclose data to third parties, then it is a “first-party” cookie. Otherwise, it is called a 'third-party' cookie.
  • 'Session' cookies are automatically deleted when you close your browser, while 'persistent' cookies are stored until their expiry date. 'Technical' cookies make it possible to browse the web safely and easily and to provide the services and content requested by the user.
  • 'Analytical-statistical' cookies are assimilated to technical cookies when they are used directly by the site to collect information on the number of users and how they interact with the site.
  • 'Profiling' cookies are cookies, generally third-party cookies, used to detect and analyze your online behavior in order to present you with personalized advertisements.
Disabling or deleting cookies, technical consequences. You may choose, via the cookie management plug-in on the “home page” of the Site, which cookies to authorize and which to refuse. You also have the possibility, with one "click", to refuse consent to unnecessary cookies, while keeping the technical cookies active.
You may set up your browser to receive cookie alerts or to block cookies (all cookies, or by type or website). Generalized blocking of all cookies, since it also applies to technical cookies, can result in a severe limitation in the use of the Site. You may delete cookies from your browser history, as well as setting your browser to automatically delete cookies when you close the program (suggested option).
By default, browsers accept cookies automatically. You can find instructions on disabling or deleting cookies on your browser’s developer website: Microsoft Internet Explorer and Edge ; Google Chrome ; Apple Safari ; Mozilla Firefox and Opera .
There are methods to reduce the risk of online tracking, such as (cumulatively):
We integrate some of the possibilities offered by 'social media'
What are social media 'plug-ins' and 'widgets'? Social plug-ins are small, optional software that link sites to social media to allow you to easily interact with content you find online (e.g. 'Like' or 'Share' in Facebook). Social plug-ins include so-called 'widgets', graphic command elements that are inserted in the corresponding sections of the website in order to allow the user to access the plug-in functionality. With a simple click on the widget, you will publish a chosen online content on your social media profile. By activating the social plug-in, your browser establishes a direct connection to the servers of the provider of the social plug-in (e.g. Facebook). For this reason, certain personal information, such as your IP address and the pages you have visited, is transmitted to the provider of the social plug-in. This occurs even if you are not a registered user of social media. If you are a registered user, social media may link your activity to your personal profile in the social media. The information published on social media is shown to your contacts or made public (in the case of a public profile).
List of active social media plug-ins, provider, privacy policy :
The Platform includes simple graphics/links that link to our social profiles, such as:
What happens if you cease using our online resources? Please also read here
We have no control over the processing of personal data carried out independently by third parties (other than Altkey SA), so we do not conduct any audits, nor do we assume any liability in this respect. It is your duty to inform yourself about the processing carried out by these third parties before purchasing goods or services, visiting sites, using applications or devices.
By way of example, you leave the Platform whenever:
  1. you view our videos on www.youtube.com (see Youtube ’s privacy policy);
  2. you write us an e-mail or connect to the Internet;
  3. you visit our social profiles;
  4. you visit web pages outside the ' https://planb.lugano.ch ' domain.
What are your rights under data protection law?
Within the limits and under the conditions laid down by law, respectively, subject to the restrictions set out therein, we hereby grant you in particular the following rights (this is not an exhaustive list):
  • you may request that incorrect or outdated personal data be corrected;
  • you may request to be informed in writing and free of charge whether personal data concerning you are being processed;
  • you may revoke the consent to data processing you have previously given (contact us at [email protected] );
  • you may request that the disclosure to third parties of sensitive personal data be prevented;
  • you may state your position on an automated individual decision or request that the decision be reviewed by a natural person;
  • you may obtain delivery of your personal data or demand their transmission to third parties;
  • you may request that data processing be stopped, that disclosure to third parties be prevented, or that personal data be rectified or destroyed;
  • you may request that a specific data processing be prohibited, that a specific disclosure of personal data to third parties be prohibited, or that personal data be deleted or destroyed;
  • if neither the accuracy nor the inaccuracy of the personal data can be determined, you may request for a note that indicates the objection to be added to the personal data;
  • you may request the correction, the deletion or the destruction, the prohibition of processing or of disclosure to third parties, the note indicating the objection or the judgement be communicated to third parties or published;
  • you may request that the unlawfulness of the processing of personal data be established.
Legitimacy and exercise of rights. If you wish to exercise your rights, you have to submit a request in writing, stating the reasons for the request, by regular mail or e-mail, enclosing the necessary supporting documents, as well as proof of your identity. It is indeed our duty to rigorously verify that requests for access to data are submitted by the entitled parties and not by unauthorized third parties.
Time to reply. We shall comply with your request without delay but, in any case, unless there are exceptional circumstances, within 30 days of receiving the request complete with all the information necessary for judgement.
Do you still have doubts? Write to us!
In order to promote transparency and a relationship of trust with users, we have appointed an internal data protection advisor, whose task is to advise on the regime applicable to personal data, conduct regular audits, respond to requests for information and follow up on the exercise of users' rights.
You may contact the data protection advisor by ordinary mail at the following address: Altkey SA, Referente Privacy, c/o PM Consulenze SA, Viale Stefano Franscini 16, 6900 Lugano. Alternatively, you may send a message by e-mail to [email protected] .