Privacy Policy

1. Controller

Wohnliegenschaften Management AG
Bahnhofstrasse 6, 8952 Schlieren, Schweiz
E-Mail: contact@wohnliegenschaften-management.ch

2. Scope and applicable law

This privacy policy applies to the AuctionPlace platform (auctionplace.ch). We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where users from the European Economic Area (EEA) use our services, we additionally comply with the General Data Protection Regulation (GDPR), in particular its requirements regarding legal bases, data subject rights and transfers to third countries.

3. What data we process

We process in particular account and contact data (e.g. name, email address, phone number), contract, membership and billing data (e.g. chosen plan, billing period, payment status), communication content, document requests, favourites and search alert data, as well as technical usage data such as IP address, timestamps, device type and browser information. Full payment card data is processed exclusively by our payment provider Stripe and never reaches our systems (see section 7).

4. Sources of data

We receive personal data directly from you upon registration, through enquiries and through your use of the platform. Property-related data is sourced from official or officially based publications and editorially prepared for AuctionPlace.

5. Purposes and legal bases

We process data to provide the website, manage user accounts and memberships, process payments, handle enquiries, deliver notifications, improve our platform, and maintain IT security and prevent abuse.

Where the GDPR applies, we rely on the following legal bases: performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR) for account, membership and payment processing; consent (Art. 6(1)(a) GDPR) for statistics cookies, marketing technologies and embedded external maps; legitimate interests (Art. 6(1)(f) GDPR) for IT security, abuse prevention and the development of our services; legal obligations (Art. 6(1)(c) GDPR) for statutory retention and accounting duties.

6. Service providers

We use technical service providers to the extent required for operations. Data processing agreements are in place with providers where required. The current technical setup includes:

• Vercel (Vercel Inc., USA) — hosting and delivery of the website
• Supabase — database and authentication (login sessions)
• Stripe — payment processing (see section 7)
• Resend — sending transactional and newsletter emails
• Cloudflare Turnstile — bot protection at registration (technically necessary)
• Google Analytics 4 — web statistics, only with your consent (see section 9)
• Google Maps — map embeds on property pages, only with your consent (see section 10)
• OpenStreetMap / CARTO — map tiles for the interactive map view (see section 10)
• Google Sign-In — optional sign-in with a Google account; we receive your name and email address from Google

7. Payment processing (Stripe)

Paid memberships are processed via Stripe (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA). You enter your payment details (e.g. card number) directly on Stripe's secured pages; we only receive confirmations, status and billing information (e.g. last four digits of the card, subscription status). Stripe is PCI-DSS certified. For transfers to the USA, Stripe relies on the EU-U.S. and Swiss-U.S. Data Privacy Framework as well as standard contractual clauses. More information: stripe.com/ch/privacy.

8. Cookies and similar technologies

On your first visit, a consent banner asks which categories we may use. Your decision is stored locally in your browser with a timestamp. You can change or revoke it at any time via the "Cookie settings" link in the footer.

• Necessary (always active): login session (Supabase), security and bot protection (Cloudflare Turnstile), language and display preferences, cart/checkout status. Legal basis: overriding (legitimate) interests or performance of contract.
• Statistics (only with consent): Google Analytics 4 (cookies "_ga", "_ga_*", stored for up to 24 months). Not loaded without your consent.
• Marketing (only with consent): remarketing pixels (e.g. Meta, Google Ads, LinkedIn). Currently not in use; should this change, such services will only be loaded after consent.
• External media (only with consent): Google Maps and Street View embeds on property pages.

9. Web analytics with Google Analytics 4

With your consent, we use Google Analytics 4 (Google Ireland Ltd., Ireland; Google LLC, USA) to statistically analyse how the platform is used (e.g. page views, approximate region of origin, conversion events). IP addresses are truncated or anonymised; we do not transmit names or email addresses to Google Analytics. Google Consent Mode v2 is also active: without your consent, Google Analytics is not loaded at all and no analytics cookies are set. You can revoke your consent at any time via "Cookie settings" in the footer. For US transfers, Google relies on the EU-U.S. and Swiss-U.S. Data Privacy Framework.

10. External maps and media

On property pages we embed maps and Street View from Google Maps (Google Ireland Ltd. / Google LLC). This content is only loaded once you have consented to the "External media" category or actively loaded a map by clicking. When loading, technical data (including your IP address) is transmitted to Google, and Google may set its own cookies.

The interactive map view under "Map" uses map tiles from OpenStreetMap and CARTO. Your IP address is transmitted to the respective provider to deliver the tiles; no tracking cookies are set. The legal basis is our legitimate interest in a functioning map display.

11. Newsletter and email notifications

By registering an AuctionPlace account, you activate the AuctionPlace newsletter (3× weekly, usually Monday, Wednesday and Friday). It informs you about new properties and relevant developments and is part of the free scope of your account. Legal basis: performance of contract and our legitimate interest in providing a usable service (Art. 31 para. 2 lit. a FADP, Art. 3 para. 2 UCA in connection with an existing business relationship).

You can deactivate the newsletter at any time without giving reasons:

• via the unsubscribe link at the end of every email,
• in your account under "Communication",
• by email to contact@wohnliegenschaften-management.ch.

Transactional emails (account confirmation, confirmation of submitted requests, invoices, security-related notices) are not affected by a newsletter opt-out and will continue to be delivered as long as you maintain an account. For every consent we store the time and context as proof of the legal basis.

12. Disclosure to third parties and transfers abroad

Data is only shared to the extent necessary for providing services, secure operations, communicating with you or complying with legal obligations. Some providers (in particular Vercel, Stripe, Google, Resend) also process data in the USA or other third countries. We base such transfers on recognised safeguards, in particular the EU-U.S. and Swiss-U.S. Data Privacy Framework and/or the EU Commission's standard contractual clauses (with the usual adaptations for Switzerland). We do not sell your personal data to third parties.

13. Retention period

We store personal data only as long as required for the respective purpose or as long as statutory retention obligations exist. Account and membership data is generally stored for the duration of the business relationship and beyond where evidence, security or archiving interests so require. Accounting-relevant documents (e.g. invoices) are retained for 10 years in accordance with Art. 958f of the Swiss Code of Obligations.

14. Data security

We protect your data through appropriate technical and organisational measures, in particular transport encryption (TLS/HTTPS) across the entire platform, encrypted storage with our infrastructure providers, access restrictions on a need-to-know basis, and bot and abuse protection. Passwords are stored exclusively as cryptographic hashes.

15. Your rights

Within the scope of applicable law, you may request information about the data processed about you, its rectification, erasure or restriction of processing, object to processing and — where the GDPR applies — request the handover or transfer of your data in a common electronic format (data portability). You may revoke any consent given at any time with effect for the future; cookie consents directly via "Cookie settings" in the footer.

You can delete your account yourself at any time: once signed in, under “My account” → “Login details” → “Delete account”. This removes your credentials, profile, saved listings and search preferences, cancels any running subscription and strips your name and contact details from your document requests. You may also email contact@wohnliegenschaften-management.ch; we will then delete your data unless statutory retention obligations prevent this, and we may require identity verification.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EEA with the data protection authority responsible for your place of residence.

16. No automated individual decision-making

We do not make automated individual decisions (including profiling) that produce legal effects concerning you or similarly significantly affect you.

17. Updates

This privacy policy may be amended if our services, processes or legal requirements change. The version published on this website is authoritative.