Each time our website is accessed, the following data is collected for technical reasons and stored in server logs:

• IP address (anonymised after 7 days)
• Date and time of access and the visitor’s local time zone
• Visitor’s geolocation (country, region, city)
• Title of the page displayed
• URL of the page displayed
• Page generation time (the time taken for web pages to be generated by the web server and subsequently downloaded by the user)
• URL accessed, HTTP status code
• Files clicked on and downloads made
• Links clicked to third-party websites
• Browser type, language and version, operating system and screen resolution
• Referrer URL

If you contact us via our contact form or by email, we will process the following: your name, email address, telephone number and the content of your enquiry.

Legal basis: Article 31(1) of the Federal Data Protection Act (FADP) (pre-contractual measures / legitimate interest) / Article 6(1)(b) and (f) of the General Data Protection Regulation (GDPR). Retention period: Up to 2 years after the enquiry has been finalised, depending on the nature of the enquiry and provided that no contractual relationship arises and no statutory requirements stipulate a longer retention period.

4. Recipients and data processors

• Public authorities, where required by law
• Group companies in the context of centralised services or to respond specifically to your enquiry

5. Retention period

We only retain personal data for as long as is necessary for the relevant purpose or as required by statutory retention obligations (e.g. 10 years for business records under the Swiss Code of Obligations). Once the purpose no longer applies and there is no retention obligation, the data is deleted or irreversibly anonymised.

6. Your rights as a data subject

You have the following rights under the provisions of the FADP and – where applicable – the GDPR:

To exercise your rights, please contact: [email protected]

7. Cookies and consent management

Our website does not use or employ cookies of any kind that result in, or could result in, the collection, storage, processing or deletion of data. Consequently, there is no need to give or withhold consent of any kind.

8. Data security

The hosting partner and immopac ag employ technical and organisational security measures in accordance with recognised industry standards to protect stored personal data against accidental, unlawful or unauthorised manipulation, deletion, alteration, access, disclosure or use, and against partial or complete loss. The servers of the hosting provider and immopac ag are located in Switzerland. The connection to the servers is established using SSL encryption. The hosting provider and immopac ag carry out regular backups of customer data. To prevent data loss even in extreme circumstances (e.g. destruction of a data centre by an earthquake), the encrypted backups are stored in parallel across several data centres in Switzerland. Security measures are continuously adapted and improved in line with technological developments. Furthermore, the hosting provider and immopac ag cannot guarantee the security of data transmission over the internet; in particular, there is a risk of third-party access when data is transmitted via email. However, access to the website and transmission via the contact form are protected by HTTPS.

9. Duration of storage

We process and store your personal data for as long as is necessary to fulfil our contractual and legal obligations or for the purposes otherwise pursued by the processing; this includes, for example, the duration of the entire business relationship (from the initiation and execution of a contract through to its termination) and beyond, in accordance with statutory retention and documentation requirements. It is possible that personal data may be retained for the period during which claims may be brought against our company and to the extent that we are otherwise legally obliged to do so or where legitimate business interests so require (e.g. for evidential and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will, as a general rule and where possible, be deleted or irrevocably anonymised. For operational data (e.g. system logs), shorter retention periods of twelve months or less generally apply.

10. Reporting data breaches

In the event of a data breach that is likely to result in a high risk to data subjects, we will inform them without delay in accordance with Article 24 of the FADP and – where the GDPR applies – we will report the breach to the relevant supervisory authority within 72 hours (Section 33 of the GDPR).

11. Changes to this Privacy Policy

This Privacy Policy may be amended at any time. The version currently published on our website shall apply. In the event of significant changes, we will inform you by email, provided we have your email address.