Privacy policy

Allreal Holding AG, together with its subsidiaries (Allreal Group), Grabenstrasse 25, 6340 Baar, (CHE-101.079.312), is operator of this website and in that capacity is responsible for collecting, processing and using your personal data and ensuring that data is processed in line with the applicable data protection law.

Your trust is important to us, so we take data protection seriously and ensure that appropriate security measures are in place. We naturally follow the legal provisions set out in the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and any other applicable data protection provisions under Swiss or EU law, including the General Data Protection Regulation (GDPR) in particular.

Please read the information provided below so you are aware of which personal data we collect and the purposes for which we use it.

Using our website

  • Whenever you visit our website, our servers temporarily store data in a web server log. The following technical data is collected automatically – as it is any time you connect to a web server – and stored until it is automatically erased no more than 12 months later:

    • the IP address of the computer making the request,
    • the name of the owner of the IP address range (normally your internet access provider),
    • the date and time the website was accessed,
    • the website from which a link was followed (referrer URL) and the search term used where applicable,
    • the name and URL of the requested file,
    • the status code (e.g. error message),
    • the operating system being used on your computer,
    • the browser being used (type, version and language),
    • the transfer protocol being used (e.g. HTTP/1.1), and
    • the username you used for registration/authentication where applicable.

    This data is collected and processed for the purposes of enabling you to use our website (establishing a connection), ensuring that the system remains secure and stable, optimising our website, and gathering statistics for internal use. The data is processed for the purposes of our legitimate interests in accordance with Art. 6 (1) (f) of the GDPR.

    In the event of attacks on the network infrastructure or other unauthorised access or misuse of the website, the IP address may also be combined with the other data and analysed to aid investigations and take defensive action. If criminal proceedings are initiated, the IP address may be used for identification purposes and to take action against the user in question under civil and criminal law. The data is processed for the purposes of our legitimate interests in accordance with Art. 6 (1) (f) of the GDPR.

  • Cookies help make your visit to our website simpler, smoother and more efficient in many ways. Cookies are small data files that your web browser automatically saves to your computer’s hard drive when you visit our website.

    For example, we use cookies to temporarily save your selections and entries when you fill in a form on our website so that you do not have to select and enter the same things when you fill in another form on another page on our website.

    Most internet browsers have the default setting to accept cookies. You can, however, update your browser settings to stop cookies being stored on your computer. Alternatively, you can also choose to be notified every time you receive a new cookie. You can click on the links below to find out more about configuring the settings for cookies on the most popular browsers:

    Please note that if you disable cookies, you may not be able to use all the features of our website.

  • We use Google Analytics, a web analytics service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to help us analyse how users use our website so we can continually optimise it. Google Inc. is owned by US holding company Alphabet Inc.

    In this context, pseudonymous user profiles are created and small text files (called cookies) are stored on your computer. The information generated by these cookies about the use of this website, including

    • the browser type/version,
    • the operating system used,
    • the referrer URL (the site linking to our site),
    • the host name of the computer used to access the website (IP address),
    • the time of the server request, and
    • the device,

    is transmitted to and stored by Google on servers in the USA. With IP masking (anonymizeIP) activated on this website, your IP address is anonymised before being transmitted within the member states of the European Union or other countries party to the European Economic Area (EEA) Agreement and Switzerland. Google will not link the anonymised IP address transmitted by your browser through Google Analytics to any other data. In exceptional cases only, the full IP address is sent to a Google server in the USA and shortened there. In that scenario, we have contractual guarantees that Google has sufficient data protection measures in place.

    The information is used to analyse how the website is used, to compile reports on website activities and to provide other services relating to use of the website and the internet for the purposes of market research and optimising the design of this website. It might be the case that this information is shared with third parties where this is required by law or where third parties are contracted to process this data. According to Google, the IP address is never linked to any other data relating to the user.

    Users can opt out to stop the data about their use of the website that is generated by the cookie (including the IP address) from being collected and processed by Google by clicking on the link below and downloading and installing the browser plug-in:

    http://tools.google.com/dlpage/gaoptout?hl=en

    As an alternative to the browser plug-in, users can click on this link to prevent data being collected through Google Analytics on this website in future. In this case, an opt-out cookie is stored on the user’s device. If the user deletes cookies (see the section on cookies above), they will need to click on the link again.

    In the interests of covering all bases, we want to point out that US laws permit the US authorities to undertake surveillance. All data transmitted from the European Union to the USA can be stored across the board as part of this. This happens without distinction, restriction or exception on the basis of the objective being pursued and without objective criteria which would make it possible to restrict the US authorities’ access to personal data and its subsequent use to specific, strictly limited purposes that would justify access to this data.

    We wish to alert users based in a member state of the EU that data protection in the USA is not sufficient by European Union standards – in part for the reasons covered in this section. Where we have specified in this privacy policy that recipients of data (including Google) are based in the USA, we will ensure that we either have contractual arrangements in place with these companies or verify their certification under the EU-US Privacy Shield to guarantee that your personal data is being sufficiently protected by our partners.

  • You can subscribe to our media releases on our website. We send subscribers sporadic updates about ongoing developments at the Allreal Group. If you choose to subscribe, we will save the data you enter in the subscription form once it has been transferred to us.

    The following additional data will also be stored when you submit your subscription request:

    • IP address
    • Date and time the request was submitted
    • Page where the form was completed
    • Your attention will be drawn to this privacy policy before you submit the contact form.

    You will need to consent to us processing your data and agree to this privacy policy as part of the subscription process. We will never share your data with third parties when processing your data for the purpose of sending you media releases . Your data will be processed solely for the purpose of sending you media releases.

    We collect your email address so we can send you media releases. Any other personal data we collect as part of the subscription process is to avoid misuse of our services or the email address entered. We process the personal data we collected from you when you subscribed to our media releases on the basis of your consent.

    The personal data collected will be stored until you decide to unsubscribe from our media releases.

    Any other personal data collected during the subscription process is generally deleted after 30 days.

    You can unsubscribe from our media releases at any point. We will include the link to unsubscribe with every media release we send you. You also have the option of revoking your consent to us storing the personal data we collected during the subscription process.

  • You can subscribe to our newsletter on properties for sale and to rent on our website. We send subscribers sporadic updates about ongoing projects. If you choose to subscribe, we will save the data you enter in the subscription form once it has been transferred to us.

    The following additional data will also be stored when you submit your subscription request:

    • IP address
    • Date and time the request was submitted
    • Page where the form was completed
    • Your attention will be drawn to this privacy policy before you submit the contact form.

    You will need to consent to us processing your data and agree to this privacy policy as part of the subscription process. We will never share your data with third parties when processing your data for the purpose of sending you our newsletter. Your data will be processed solely for the purpose of sending you our newsletter.

    We collect your email address so we can send you our newsletter . Any other personal data we collect as part of the subscription process is to avoid misuse of our services or the email address entered. We process the personal data we collected from you when you subscribed to our newsletter on the basis of your consent.

    The personal data collected will be stored until you decide to unsubscribe from our newsletter .

    Any other personal data collected during the subscription process is generally deleted after 30 days.

    You can unsubscribe from our newsletter at any point. We will include the link to unsubscribe with every newsletter we send you. You also have the option of revoking your consent to us storing the personal data we collected during the subscription process.

  • You can register your interest in a property for sale or to rent on our website. Fill in the form for interested parties on our website to be added to the list. If you choose to register your interest, we will save the data you enter in the form for interested parties once it has been transferred to us.

    The following additional data will also be stored when you submit your subscription request:

    • IP address
    • Date and time the request was submitted
    • Page where the form was completed
    • Your attention will be drawn to this privacy policy before you submit the contact form.

    Alternatively, you can ask to be added to the list of people interested in a property for sale or to rent by email or over the phone.

    We will process the personal data you enter in the form for interested parties or share with us by email or over the phone for the purpose of adding you to our database of people interested in a property or letting you know about properties that come up in the future. The contact details for the list of interested parties are shared with the aim of entering into a contract. This means that the data processing is necessary in order to take steps prior to entering into a contract and for the performance of a contract.

    The other personal data processed when the request is submitted are used to prevent misuse of the form for interested parties and to keep our IT systems secure.

    In other words, we have a legitimate interest in processing the data.

    You can request to have the contact details you shared in the form for interested parties or provided by email or over the phone erased at any time by emailing us or giving us a call.

    Any other personal data collected when the request is submitted is deleted within 30 days.

  • Client and contractual relationship

  • People who are interested in a rental property can register their interest by filling in a form for that property (registration form for potential tenants). If you fill in this registration form, the data you enter will be transmitted to us.

    The registration form will refer you to this privacy policy.

    By signing the registration form, you give us permission to verify the details you entered in the registration form with third parties named by you (debt enforcement office, employers and/or previous landlords). We will only collect this information for interested parties who are actually being considered as tenants for a specific rental property.

    When requesting information from third parties, we will provide them with your name, address and possibly also your date of birth in advance.

    Data processing is necessary for the purposes of accepting (initiating a contract) and rejecting interested parties as tenants. We also have to process data when assessing whether a potential tenant is suitable for the specific rental property (using credit checks, identity checks and so on). Data processing is necessary for the purposes of preparing and concluding a contract. In other words, we have a legitimate interest in processing the data.

    Where a field on the registration form is marked as compulsory, we will not be able to provide our service as intended if you object to us processing that data.

    We will only store your personal data for as long as is necessary for the purpose of managing the specific rental property. The exception is cases where storage or documentation is required for longer for legal reasons.

    If a rental agreement is signed at the end of the registration process, the provisions under Section 2.b. will apply. If a rental agreement is definitely not going to be signed with a potential tenant, their personal data is deleted within six months. Where properties are being rented out for the first time, the personal data is deleted six months after the initial letting of the complex in question.

  • If you are a tenant in one of our rental properties, we process your personal data for the purpose of managing your lease. This is the personal data that we collected during the registration process (see Section 2.a. for further details) and that you provided when we were in the process of concluding the contract.

    We need to process your personal data so that we can properly manage your rental property (complying with rights and fulfilling duties from the rental agreement as well as the assertion/enforcement thereof). This includes checking your identity, checking for rental payments, billing for additional costs and communicating with you. In line with our legal reporting requirements, such as the law on the reporting system and the register of residents for the canton of Zurich (MERG), we are required to process your name, address and nationality.

    Your personal data has to be processed in order for us to process your rental agreement. This processing is also necessary for the purposes of our legitimate interests. Your name, address and nationality have to be processed by law.

    Your details are deleted as a tenant as soon as your rental agreement ends and has been fully processed. It may be necessary for us to keep storing your personal data beyond this point where a longer retention or documentation period applies or where we are required to do so by law (especially for the purpose of providing evidence).

  • We collect your personal data when you buy a property from us.

    We need to process your personal data to check your identity, run credit checks and communicate with you.

    Your personal data has to be processed in order for us to process and prepare your purchase agreement. This processing is also necessary for the purposes of our legitimate interests.

    We will only store the personal data we collect while we still need to process it to manage our contractual relationship or for any other related purposes. Otherwise, it may be necessary for us to keep storing your personal data beyond this point where a statutory retention or documentation period applies or where there is an overriding private or public interest. The personal data we collect will be deleted or anonymised, where possible, as soon as it is no longer required for the purposes mentioned above.

  • You have access to the PIKA online platform as you are buying residential property from us. This platform can be used to guide buyers through their purchase and process the sale from start to finish.

    Buyers can use the platform to approve plans and submit amendments, for example. It is also where buyers can find various details relating to the property they are buying (e.g. contract, addenda).

    The data submitted by you via the PIKA platform may include the following:

    • Details on actions taken (choices, approvals and so on)
    • Messages and communications relating to the sale

    Whenever a user performs an activity on the PIKA platform, the following data will also be stored in relation to that activity:

    • IP address
    • Date and time the request was submitted
    • Page on which the activity was performed

    Consent to use of the PIKA platform is provided in the form of a written declaration of consent. Any data collected via the platform is used for the sole purpose of processing the sale.

    Data is processed to conclude the purchase agreement and handle any errors, complaints or guarantee claims. Data processing is thus required for the performance of a contract and in order to take steps prior to entering into a contract. We will only store the personal data we collect while we still need to process it to manage our contractual relationship (from contract initiation to termination) or for any other related purposes. Otherwise, it may be necessary for us to keep storing your personal data beyond this point where a statutory retention or documentation period applies or where there is an overriding private or public interest. The personal data we collect will be deleted or anonymised as soon as it is no longer required for the purposes mentioned above.

    Any other personal data collected during the subscription process is generally deleted after seven days.

  • We will only share your personal data when you have given us your explicit consent, when there is a legal requirement, when it is required for the purpose of managing our contractual relationship (for example, we may be required to share data with an external management company for a rental property or condominium, to craftsmen, suppliers for the purpose of carrying out work on the apartment or property concerned) or when it is necessary for us to assert our rights and in particular to make claims arising from our contractual relationship.

    We will also share your data with third parties to the extent required to allow use of the website and to process a contract – in particular to provide services you have requested and to analyse your user behaviour. Third-party use of any data shared to that end is strictly restricted to the purposes specified.

    A number of third-party service providers are explicitly mentioned in this privacy policy (see the section on tracking tools).

    Our website host EveryWare is one service provider with whom we share personal data collected through the website and who has access (or can gain access) to that personal data. The website is hosted on servers in [country]. We share data with this service provider for the purpose of providing and maintaining the functionality of our website. The legal basis is our legitimate interests in accordance with Art. 6 (1) (f) of the GDPR.

  • We are entitled to transmit your data to third-party companies abroad provided that it is required for the purpose of processing your enquiries, providing our services and delivering marketing campaigns. These third-party companies are obliged to respect users’ privacy to the same extent as the provider itself. If the level of data protection in a country is deemed to be inadequate by Swiss standards and within the context of the EU General Data Protection Regulation, we make contractual arrangements to ensure that your personal data is protected in line with Swiss provisions and the EU General Data Protection Regulation at all times.

    A number of third-party providers have already been mentioned in the previous section (‘Sharing data with third parties’) along with their registered business addresses. Some of the third-party providers mentioned in this privacy policy are based in the USA (see the section on tracking tools). You can find further information about transmitting data to the USA in the section called ‘Tracking tools’.

  • We only store personal data for as long as we need to use it for the tracking services mentioned above and process it in line with our legitimate interests. We store contractual data for longer in accordance with the statutory retention periods. The retention periods requiring us to store data are based on legislation relating to financial records and tax, for example. Data is deleted once it has been archived for the required length of time.

  • You have the right to be informed about your personal data we are storing on request. You also have the right to have incorrect data rectified and to have your personal data erased provided that we do not have a legal obligation to continue storing the data or permission to continue processing the data.

    Furthermore, you have the right to receive the data you have provided to us (right to data portability). We will also transmit the data to a third party of your choosing upon request. You have the right to receive the data in a commonly used and machine-readable format.

    Please email us at info@allreal.ch to exercise any of the rights set out above. We may ask you for proof of your identity before processing your request – at our discretion.

  • We take appropriate technical and organisational security measures to protect any of your personal data we are storing and prevent it from being tampered with, lost in full or in part, or accessed by unauthorised third parties. We optimise our security measures as the technology advances.

    You should always keep your login details confidential and close the browser window once you have finished communicating with us, especially if you are using a shared computer.

    We take data protection very seriously internally at our company. We require all our employees and any service providers we work with to maintain confidentiality and observe data protection laws.

  • You have the right to lodge a complaint with a supervisory authority at any time.

  • Updated: June 2023