×

Privacy Policy

The English version of our terms and conditions is a courtesy translation. Only the German version is legally binding.

Privacy Policy

1. Introduction And Contact Details

HouseKey recognizes the importance of protecting your personal information. This Privacy Policy is designed to inform you about how we collect, use, share and protect your information. If you have any questions or concerns about our privacy practices, you can contact us as follows:

info@housekey.ch

2. Types Of Collected Data

The personal data that the provider processes independently or through third parties includes Usage Data; email address; first name; last name; address, payment and banking details, property ownership, unique device identifier for advertising (Google advertising ID or IDFA, for example); phone number; device information; Universally Unique Identifier (UUID) and other Personal Data collected from Users in the context of their use of the Owner's websites or obtained from Users in the context of business relationships with the Owner.

Full details on each type of personal data processed are provided in the dedicated sections of this privacy policy or selectively through explanatory texts that are displayed before the data is collected.

Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using a website of the Owner.

If the provision of data is necessary for the use of the service, the user will be informed of this when entering the data. If the user refuses to provide the data, this may result in the provider being unable to provide its services to the user. In cases where the provision of personal data is voluntary, users may choose not to provide this data without any consequences for the availability or functionality of the service.

Users are responsible for all personal data of third parties that is obtained, published or passed on by the Provider and confirm that they have obtained consent to the transfer of personal data of any third parties to the Provider.

3. Purpose Of Collected Data

Personal data about the user is collected to enable the provider to provide the service and also to comply with its legal obligations, respond to claims, protect its rights and interests (or those of users or third parties) and detect harmful or fraudulent activities. In addition, data is collected for the following purposes: Analytics, tag management, user database management, infrastructure monitoring, content and feature performance testing (A/B testing), displaying content from external platforms, payment processing, creating and managing backups, interacting with data collection platforms and other third parties, advertising, remarketing and behavioral targeting, hosting and backend infrastructure, managing contacts and sending messages, human resources, and registration and login.

Users can find more detailed information about these processing purposes and the personal data used for each purpose in the "Detailed information on the processing of personal data" section of this document.

3.1. Processing Methods

The provider processes the user data properly and takes appropriate security measures to prevent unauthorized access and unauthorized disclosure, modification or destruction of data. Data processing is carried out using computers or IT-supported systems in accordance with organizational procedures and practices that are specifically geared to the aforementioned purposes. The provider uses external service providers for the operation of its services. Data will only be transferred if permission has been granted under data protection law.

3.2. Hosting And Backend-Infrastructure

The purpose of this type of service is to host data and files so that the provider's websites can be managed and used. In addition, these offerings may provide a ready-made infrastructure that performs certain functions or entire components for the provider's websites.

Some of the services listed below may be operated via geographically dispersed servers, making it difficult to determine the actual location of the personal data.

3.3. Informaniak Webhosting

Informaniak is a web hosting and backend service provided by Infomaniak Network AG. Personal Data processed: Various types of Data as specified in the privacy policy of the service

Place of processing: Switzerland –Datenschutzrichtlinie

3.4. Interaction with data collection platforms and other third parties

These types of services allow Users to interact with data collection platforms or other third parties directly from their websites in order to store and reuse data.

If such a service is installed, it may collect browsing and usage data on the pages where it is installed, even if users do not actively use the service.

3.5. Cookies

The provider uses cookies. You can find more information about the use of cookies in the cookie policy.

4. Legal Basis For The Processing

The provider may only process users' personal data if one of the following points applies:

  • Users have given their consent for one or more specific purposes. Note: In some jurisdictions, the provider may be permitted to process personal data until the user objects to such processing ("opt-out") without relying on consent or any other of the following legal bases. However, this does not apply if the processing of personal data is subject to European data protection law.
  • The collection of the data is necessary for the performance of a contract with the user and/or for pre-contractual measures arising therefrom.
  • The processing is necessary for compliance with a legal obligation to which the provider is subject.
  • The processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider.
  • Processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party

In any case, the provider is happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.

5. Further information on the processing of personal data

5.1. Data Processing – Contract Fullfillment

The provider processes users' personal data (in particular contact data such as first name, surname, date of birth, address, place of residence, e-mail address and telephone number as well as other information required for the conclusion and processing of the contractual relationship) in order to be able to provide the services it offers. This personal data is provided by the user during registration or results from the use of the services offered by HouseKey. HouseKey is entitled to request further information from the user if this is necessary for the execution of an investment requested by the user or for the execution of the contractual relationship with the user. In particular, HouseKey requires a current certified copy of the user's identity card.

The personal data that the user provides to HouseKey as part of the registration process and the subsequent contractual relationship will be processed for the purpose of providing the services offered on the website (i.e. brokering real estate offers to prospective buyers and investors and managing real estate), for the purpose of managing the contractual relationship with the respective user and for the purpose of managing the investments made and/or planned by the respective user. They may also be processed for marketing and market research purposes.

HouseKey may pass on or disclose the user's personal data to group and partner companies as well as to contracted data processors in Switzerland and abroad and commission them to process the user's personal data. These service providers process your personal data only on our behalf and for our purposes and are contractually obliged to treat it confidentially. HouseKey may also disclose the user's personal data to the bank entrusted with the financing of the investment requested by the user and to all offices, authorities and agencies involved in the acquisition, processing and holding of the property (e.g. notaries commissioned by name), insofar as this is necessary for the provision of the services offered (e.g. to carry out notarial certifications, land register registrations or to carry out the necessary clarifications within the framework of the Federal Act on the Acquisition of Real Estate by Persons Abroad [BewG], etc.). HouseKey does not pass on personal data to third parties for their own purposes without the user's consent, unless HouseKey is obliged to do so by law or by official or court order.

If personal data is transferred abroad, the personal data is not always subject to the same level of protection in the recipient's country as in Switzerland. In such cases, HouseKey ensures that an appropriate level of data protection is nevertheless guaranteed abroad and that the necessary technical, organizational, contractual and personal protection measures are taken.

5.2. Information, Authorization, Deletion und Contact

You can request information about the data processed about you or request the deletion or correction of your data from the provider at any time using the form under the following link:

Contact Form

Your data will then be corrected or deleted immediately, unless the deletion is not possible due to an existing, continuing interest in the website or due to another existing contractual relationship between HouseKey and the user.

6. Location Of The Data

Data processing generally takes place in Switzerland or the EU. Depending on the user's location, data transfers may involve the transfer of the user's data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section on the processing of personal data.

If data is transferred to a third country (a country outside the EU) for processing, the provider must ensure that an adequacy decision exists for this country or that appropriate security measures - organizational, technical and contractual - have been taken to ensure an adequate level of data protection.

If such a transfer takes place, the User can find out more by checking the relevant sections of this document or by contacting the Owner using the information provided in the "Contact" section.

7. Retention Period Of The Data

Personal data is processed and stored for as long as is necessary for the purpose for which it was collected. On the basis of this:

  • Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.
  • Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes. Users can obtain more information about the legitimate interests of the Owner in the relevant sections of this document or by contacting the Owner.
  • Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked or if this data is required for the assertion or defence of legal claims.

In addition, the provider may store personal data for longer if the user has consented to the processing, as long as the consent is not revoked or if this data is necessary for the assertion or defense of legal claims. After the retention period has expired, the personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability can no longer be exercised after the retention period has expired.

8. Right Of The Data Subject

Users may exercise certain rights in relation to their data processed by the provider. Users who are entitled to more comprehensive standards can exercise all the rights described below. In all other cases, users can contact the provider to find out which rights apply to them.

Users who are entitled to more comprehensive standards can exercise all the rights described below. In all other cases, users can contact the provider to find out which rights apply to them.

In particular, users have the right to do the following:

  • Request information: The user can obtain information as to whether their personal data is being processed. If processing is taking place, the user has the right to the following information
    • the purposes of processing
    • the categories of personal data being processed
    • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations
    • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
    • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
    • the existence of a right to lodge a complaint with a supervisory authority if the personal data was not collected from the user, all available information about the origin of the data
    • the existence of automated decision-making, including profiling - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject
  • revoke the consents at any time: If the user has previously consented to the processing of personal data, he or she may revoke his or her own consent at any time.
  • to object to the processing of the data :
    • The user has the right to object to the processing of their data if the processing is based on a legal basis other than consent. After receipt of an objection, the provider shall no longer process the personal data concerned unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the user, or the processing serves the establishment, exercise or defense of legal claims.
    • If the user's personal data is processed for the purpose of direct marketing, the user has the right to object at any time to the processing of personal data concerning him or her for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.
    • If the user objects to processing for direct marketing purposes, the personal data concerning him or her will no longer be processed for these purposes.
  • to verify the accuracy of his/her data and to request that it be updated or corrected.
  • to request the restriction of the processing of their data: Users have the right to restrict the processing of their data in certain circumstances. In this case, the provider will not process the data for any purpose other than storage.
  • to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary:
    • to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary:
    • to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary: to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary:
    • to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary:
    • to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary:
    • to demand the deletion or other removal of personal data: Users may, under certain circumstances, have the right to request that the provider erase their data, unless erasure is not possible due to an existing contractual relationship between the provider and the user. There is no right to erasure if the processing is necessary:
  • to receive a copy of their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted without hindrance to another controller, where the processing is carried out by automated means and the processing is based on the user's consent, on a contract to which the user is party or on pre-contractual obligations.
  • submit a complaint to a supervisory authority.
  • be informed of the appropriate safeguards relating to the transfer when personal data are transferred to a third country or to an international organization.

9. Legal Measures

The user's personal data may be processed by the provider for the purpose of enforcing the law in the context of or in preparation for legal proceedings arising from the misuse of the provider's websites or the associated services.

The user declares that he is aware that the provider may be required by the authorities to disclose personal data.

10. Changes To The Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and possibly on another website of the Owner and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.

If changes affect the use of data that is based on the user's consent, the provider will - if necessary - obtain new consent..

11. Final Provisions

This Privacy Policy has been prepared on the basis of the provisions of various legal regulations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

Last updated: March 01, 2024