Legal

Privacy policy.

Version: 8 October 2026 · In case of any discrepancy, the German version prevails.

Selling a home is one of the most personal transactions there is, and we treat your data accordingly. This policy describes in full which personal data Immosmile GmbH processes, for what purposes, who receives it, how long we keep it and which rights you have. The Swiss Federal Act on Data Protection (FADP) governs; where the EU General Data Protection Regulation (GDPR) applies – for example to visitors from the EEA – its requirements apply in addition.

Personal data means any information relating to an identified or identifiable natural person (e.g. name, address, email, phone number, and property details attributable to a person). Processing means any handling of such data – from collection and storage to use and deletion.

1. Controller and contact

The controller responsible for the processing described in this policy is:

Immosmile GmbH
Bahnhofplatz 1, 8001 Zurich, Switzerland
Commercial register number: CHE-447.645.519
info@immosmile.ch · +41 76 325 11 95

The contact for all data protection matters is Dominik Devaja, managing director. For access requests, deletion requests or questions about this policy, email us with the subject line «Data protection».

2. What data we process

Depending on how you interact with us – as a website visitor, an owner, a prospective buyer or a referral partner – we process different categories of personal data:

Master and contact data: name, postal address, email address, phone number, preferred language and availability.
Property data: address and description of the property, type, year of construction, floor areas, condition, photos, plans, land-register and insurance details, valuation documents and the resulting net-proceeds calculation. Property data can be personal data because it can be attributed to an owner.
Mandate and contract data: content of the marketing mandate, reference value, correspondence, documentation of viewings and offers, details for the notary and land-register completion, invoicing data.
Buyer and search-profile data: search criteria, financing status (e.g. whether financing confirmation is available), viewing appointments, expressions of interest and offers from prospective buyers.
Communication data: content and metadata of emails, letters, SMS and messenger messages if you use those channels, and notes on phone conversations. We do not record phone calls.
Technical data: IP address, date and time of access, pages visited, browser and device type, and data from cookies and similar technologies (see section 5 and the Cookie Policy).
Marketing and preference data: newsletter registration, consents and their timestamps, the origin of an enquiry (e.g. the campaign or page that brought you to us), topics of interest.
Partner data: for referral partners additionally company, profession and website.

3. Where the data comes from

We receive personal data from the following sources:

From you – via forms, email, phone, messengers, in conversations and in the course of a mandate.
Automatically when you visit the website – technical data as described in section 5.
From publicly accessible sources – such as the land register, the commercial register, other public registers, property portals and generally accessible websites, where this is relevant to preparing a valuation or a mandate.
From third parties – for example from referral partners (with your knowledge), valuation institutes, relatives making an enquiry on your behalf (e.g. in an inheritance situation), or authorities and banks in the course of a transaction.

If you provide us with data about other people – for example the contact details of co-heirs, relatives or owners you act for – you confirm that you are authorised to do so and that you have informed those persons about this privacy policy.

4. Purposes and legal bases

We process personal data for the following purposes:

responding to enquiries and preparing initial assessments and valuations including the net-proceeds calculation;
preparing, concluding and performing marketing mandates (brokerage contracts) and the related communication;
marketing properties, managing prospective buyers, organising viewings, documenting expressions of interest and offers;
managing our customer relationships, appointments and availability;
information and marketing, where permitted or requested by you (e.g. newsletter, market updates);
measuring and improving our website (website statistics, section 5) and our advertising (with your consent, section 10);
security and operation of our IT (e.g. defence against attacks and spam);
compliance with legal obligations (e.g. bookkeeping and retention duties, information duties towards authorities);
establishing, exercising and defending legal claims.

Under the Swiss FADP we process personal data within the statutory processing principles; a specific legal basis is required only in particular cases. Where the GDPR applies, we rely on: performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR), your consent (point (a), e.g. for marketing cookies and the newsletter), our legitimate interests (point (f), e.g. running our business securely and economically, direct marketing to existing contacts, enforcing legal claims) and legal obligations (point (c)).

5. Data processing when you visit this website

Hosting and delivery: This website is delivered via Cloudflare (Cloudflare, Inc., USA, with infrastructure in Switzerland and the EU among other locations). Cloudflare processes technically necessary data such as IP address, page requested, time, browser and device type – to deliver the content, balance load and protect against attacks and abuse. This processing is required to operate the website.

Form protection: To protect our forms against automated abuse we use technical checks (e.g. a field invisible to humans and an origin check). The Cloudflare Turnstile service is prepared but currently not active; once we use it, technical characteristics of your browser are examined – no persistent identification takes place.

Audience measurement without cookies (Cloudflare Web Analytics): To see which pages are read and how quickly they load, we use Cloudflare Web Analytics (Cloudflare, Inc., USA). A small script reports the page viewed, the referring page, browser and device type, the approximate country and loading times. It sets no cookies, stores nothing on your device and builds no user profile; according to Cloudflare, visitors are not recognised through their IP address or any other characteristic. For visitors from Switzerland and Liechtenstein, the measurement is based on our legitimate interest in an understandable, easily accessible website; you can object at any time by switching off the «Statistics» category in the cookie settings. From all other countries – and whenever we cannot tell your country – we only measure with your consent. On the transfer to the USA see section 13.

Website statistics with Google Analytics 4: To understand which pages help and where visitors leave, we use Google Analytics 4 (Google Ireland Ltd. / Google LLC, USA). It records pages visited, time on page, scrolling, link clicks and downloads, the referring page, browser and device type and the approximate origin; for this Google Analytics sets cookies (cookie policy, section 4). Google does not store IP addresses; Google Signals and the use of the data for advertising are switched off. We keep the data for as long as Google Analytics allows (currently no longer than 14 months). For visitors from Switzerland and Liechtenstein the statistics run on the basis of our legitimate interest in an understandable, easily accessible website until you object: switch off the «Statistics» category in the cookie settings – the cookies are then deleted and nothing more is recorded. From all other countries – and whenever we cannot tell your country – we only measure with your consent. Google LLC is certified under the Swiss–U.S. Data Privacy Framework (section 13).

Link to your enquiry: If statistics are active and you send us a form, we store together with your enquiry in our customer management system (section 7) the pseudonymous identifier that Google Analytics assigned to your browser, the identifier of the visit, the entry page and the type of origin of your visit (search engine, AI search service, Google Business Profile, advertisement, link from another website or direct access). If we later report back that the enquiry led to an appointment, a mandate or a notarised sale, we only transmit this pseudonymous identifier, the type of event and an internal planning value to Google Analytics – never your name, email address or phone number. Purpose: to see which content genuinely helps owners. Legal basis and objection as for statistics above; if statistics are switched off, no identifier is created and nothing is linked.

Server logs: Our own form logs are designed to contain no personal data (only form type, result and error code are logged). Fonts and other website assets are served from our own servers – no third-party font services are contacted when the page loads.

Cookies and similar technologies: Details of all cookies used, their purpose and storage duration, and how to manage your consent can be found in our Cookie Policy.

6. Enquiries, valuations and online tools

When you submit a form (e.g. request a valuation, online valuation, callback, contact, home check, partner enquiry), we process the details you enter in order to answer your enquiry and provide the requested service. We also store the origin of the enquiry (e.g. campaign and page details) to understand which of our information offerings are useful.

Calculators and home check: Our online tools (e.g. the property gains tax calculator and the home check) run directly in your browser. Your entries are stored only temporarily in your browser (sessionStorage) and reach us only when you actively send a result to us. No usage profile is created.

Initial assessment – progress on your device: In the form for our initial assessment we remember your selections (e.g. property type, situation, postcode) on your device until you submit (localStorage), so that you can continue later. After submitting, your details remain in sessionStorage until you close the browser window so that we can show them to you on the thank-you page. This storage exists only in your browser; you can delete it at any time in your browser settings.

Postcode and address search, aerial image and building data (geo.admin.ch): On some pages (e.g. the initial assessment) we suggest postcodes and addresses from the official register as you type, show an aerial image of the area and – if you voluntarily select an address – public data from the Federal Register of Buildings and Dwellings (e.g. year of construction, living area). For this, your browser queries the interfaces of the federal geodata infrastructure geo.admin.ch (Federal Office of Topography swisstopo, Wabern) directly. Your search text or the selected address and technically necessary data such as your IP address are transmitted to swisstopo. The address only reaches us once you actively confirm it. Sources: aerial image © swisstopo; building data Federal Statistical Office (FSO), © Data: swisstopo.

Guides, checklists and calculations to download: If you request one of our documents (for example the sale folder or a fact sheet on property gains tax), we process your name, your email address, the chosen document and the page you came from in order to provide the document and send it to you by email. We only ask for a phone number if you tick «Please call me» – without that tick, nobody will call you. You only receive further emails on the topic (at most four within 14 days) if you tick this separately and confirm your sign-up via the link in the first email (double opt-in). We store your consent with its time and text version. Every further email contains an unsubscribe link. If you do not confirm, you receive no further emails, and we delete the unconfirmed consent after 30 days.

Your net calculation to print: The printable version is created entirely in your browser. The figures you enter in the calculator are only stored temporarily in your browser (sessionStorage) and are not transmitted to us; we only receive your name, your email address and the canton of the document.

7. Customer management and communication (CRM)

To manage enquiries, contacts, appointments and communication we use the customer management platform HighLevel (HighLevel Inc., USA; also known as «LeadConnector»). There we store contact details, the content of your enquiries, origin details, appointment and communication history. HighLevel may also send emails and SMS on our behalf (e.g. appointment confirmations and replies to your enquiry). Contractual data protection commitments are in place with the provider; for transfers to the USA see section 13. Emails we send via HighLevel (e.g. the confirmation of your search profile) are delivered on HighLevel's behalf by the mail service Mailgun (Mailgun Technologies, Inc., USA).

For our business email we use Google Workspace (Google Ireland Ltd. / Google LLC, USA). The content of emails you send us is stored and processed there.

Request for a review after completion: After a completed valuation or a notarised sale, we ask our clients once by email for an honest review on our Google Business Profile. We ask everyone according to the same criterion, without any incentive and without pre-selection. For this we use your name and email address from the mandate, based on our legitimate interest. You can object at any time; writing a review is voluntary. If you write a review, Google's terms apply (Google LLC, USA).

8. Property valuation by third parties

For substantiated valuations we use recognised Swiss valuation services, in particular hedonic valuation models such as those of IAZI AG (Zurich). We transmit the property data required for the valuation (e.g. address, property type, floor areas, year of construction, condition) and limit the transfer to what is necessary. The valuation services process this information under their own privacy policies.

9. Marketing of properties, buyers and portals

For owners: Under a marketing mandate we publish property materials (photos, films, descriptions, key facts) on our website, in our channels and – depending on the agreed marketing phase – on property portals (e.g. Homegate, ImmoScout24 and others). What is published, and when, is agreed with you in the mandate. Sensitive documents (e.g. detailed floor plans and land-register data) are shared only with serious prospective buyers.

For prospective buyers: If you are interested in a property, we process your contact details, search criteria, viewing and offer data to inform you about suitable properties, organise viewings and document the sales process properly. We present every offer and every expression of interest to the sellers; in doing so we pass on the details required for their decision. A list of interested parties with contact details may also form part of the mandate documentation provided to the owners.

Search profile for prospective buyers: If you create a search profile on our website, we process your name, email address, country, search criteria (property type, regions, municipalities, rooms, budget) and whether you intend to sell a current home, with optional location and type. Purpose: we notify you by email about properties we sell on behalf of their owners that match your search profile. Legal basis is your express consent, given with a separate box that is not pre-ticked (Art. 3(1)(o) Swiss Unfair Competition Act; where the GDPR applies, Art. 6(1)(a) GDPR). The search profile is free and creates no brokerage contract and no mandate; we do not advise prospective buyers and do not act on their behalf.

Confirmation (double opt-in): After you submit, you receive an email with a link to a confirmation page. Your search profile becomes active only when you click «Confirm search profile» there. For each consent (search profile, requested call, further emails where applicable) we store the type, the text version, the time it was given, the source, the time of confirmation and the status. If confirmation is missing after three days, we remind you once. Unconfirmed profiles are deleted after 30 days. If you state that you intend to sell your current home, the confirmation email contains a one-time note on how selling and buying fit together; you only receive a call if you expressly tick that box. After confirming, you may optionally add your timing and financing status.

Disclosure: Owners receive your contact details only once you respond to a specific property (documents, viewing, expression of interest or offer). When our mandate ends, they receive the names of the prospective buyers to whom we presented the property. We do not use your search profile for any other purpose – in particular not for third-party advertising and not for our own purchases. You can unsubscribe with one click in every email or informally by email; afterwards we keep only the record of your consent and withdrawal.

10. Newsletter, advertising and online marketing

Newsletter and market updates: If you sign up, we use your email address to send you the requested content. Every message contains an unsubscribe link; you can opt out at any time. We measure to a customary extent whether messages are opened and links clicked, in order to improve our content.

Direct marketing to existing contacts: We may inform existing customers and interested parties about our own, similar services to the extent permitted by law. You can object at any time.

Online marketing (only with your consent): We use marketing services that set cookies for advertising or build advertising profiles only if you have consented via our cookie banner (on website statistics see section 5). None of these services is currently active. Specifically envisaged are:

Google Ads including conversion measurement and remarketing, to measure the effectiveness of our ads and show you relevant ads; we use «Consent Mode», so that no cookies are set for these purposes without your consent;
Meta pixel and Conversions API (Meta Platforms Ireland Ltd. / Meta Platforms, Inc., USA) to measure and improve our advertising on Facebook and Instagram; for the collection of this data on our website and its transmission to Meta we are jointly responsible with Meta – you may also address data subject requests in this respect directly to Meta;
TikTok pixel (TikTok Technology Ltd., Ireland / TikTok Inc., USA) – currently not active; any future use would likewise take place only with your consent.

Details of the individual cookies, storage periods and how to withdraw your consent at any time can be found in the Cookie Policy.

We maintain profiles on platforms such as Instagram, Facebook, LinkedIn and YouTube. When you interact with us on these platforms, the platform operator and we process your data; the platforms' own privacy policies apply in addition. For statistics that platforms provide us about the use of our profiles («insights»), we may be jointly responsible with the operator.

Third-party content may be embedded on our website, in particular videos (e.g. Vimeo or YouTube) and maps. We load such content only after you have consented; when it loads, the third-party provider receives your IP address and technical details.

If you contact us via messenger services (e.g. WhatsApp), the provisions of the respective provider additionally apply; by contacting us via such a service you consent to the associated transmission.

We do not sell personal data. We disclose personal data only where necessary for the purposes described, where you have consented or where we are legally obliged to – namely to the following categories of recipients:

IT service providers (hosting, CRM, email, scheduling – see sections 5 and 7) processing data on our behalf and under our instructions;
valuation institutes (section 8);
property portals and advertising platforms in the context of the agreed marketing (sections 9 and 10);
prospective buyers and owners – mutually, to the extent required for viewings, offers and completion, and as agreed with you;
professional partners such as notaries, banks, fiduciaries or moving services – only at your request or where required to complete the transaction;
authorities and courts, where we are legally obliged or where necessary to enforce claims;
advisers (e.g. legal or tax advice, audit) bound by professional or contractual secrecy;
parties to a business succession: in the event of a sale or restructuring of our company, data may be transferred to the parties involved to the extent required – preserving the purposes of this policy.

We conclude data processing agreements with service providers that process personal data on our behalf.

13. Transfers abroad

Our service providers process data partly outside Switzerland, in particular in the EU/EEA and the USA (namely Cloudflare, HighLevel, Mailgun, Google and Meta). We disclose personal data to countries without adequate data protection under Swiss law only where suitable safeguards are in place – in particular:

certification of the recipient under the Swiss–U.S. Data Privacy Framework (recognised as adequate by the Swiss Federal Council), or
the standard contractual clauses approved by the EU Commission, with the adaptations customary for Switzerland,

or where a statutory exception applies (e.g. your express consent or necessity for the performance of a contract). HighLevel Inc. is certified under the Swiss–U.S. Data Privacy Framework; for Mailgun Technologies, Inc., which is certified only under the EU–U.S. Data Privacy Framework (and its UK extension), we rely on the standard contractual clauses for Switzerland. On request we will gladly provide further information on the safeguards in place.

14. Retention periods

We retain personal data for as long as required for the respective purpose, for as long as we have a legitimate interest in retention (e.g. documentation, limitation periods) or as long as statutory duties require. As a guide:

Business and contract records: generally 10 years (Art. 958f Swiss Code of Obligations);
Enquiries without subsequent business: generally up to 24 months after the last contact, then deletion or anonymisation;
Newsletter data and confirmed consents to further emails: until you unsubscribe;
Unconfirmed consents to further emails: 30 days, then deletion;
Search profiles: active until you unsubscribe; unconfirmed 30 days, then deletion; after 24 months without any response from you, we ask or delete; after unsubscribing, only the record of consent and withdrawal remains;
Technical logs: short-term (days to a few weeks);
Data relating to ongoing or threatened legal disputes: until conclusion and expiry of the relevant periods.

15. Data security

We protect personal data with appropriate technical and organisational measures: encrypted transmission (TLS), access restricted to authorised persons, two-factor protection of key accounts, separate storage of credentials, protection of forms against abuse, and continuous updates of our systems. No system is absolutely secure; we review and adapt our measures regularly.

16. Profiling and automated decisions

We do not take automated individual decisions that would have legal effects on you or significantly affect you. Valuation and analysis tools provide assessments that are reviewed by people. To improve our website we analyse usage data statistically (section 5), for our advertising only with your consent (section 10); this does not constitute high-risk profiling within the meaning of the FADP.

So that urgent matters are answered first, our system assigns every enquiry from an owner an internal urgency level based on your selection (form, type of property, reason, region). Only our team sees this level; it determines the order in which we work, not whether or how we reply to you. Every enquiry is read and answered by a person.

17. Use of artificial intelligence

We use AI tools as support – for example in creating and designing content (texts, images, films), for translations, for analysing market data and for organising our work. Three principles apply: first, a person reviews results before they are used towards customers. Second, AI systems do not take decisions with legal effect for you (see section 16). Third, we do not feed particularly sensitive personal data into AI tools without appropriate contractual and technical safeguards. Where AI providers process personal data on our behalf, they do so as processors under our instructions.

18. Your rights

Under applicable data protection law you have, in particular, the following rights:

Access to whether and which data we process about you (Art. 25 FADP);
rectification of inaccurate data;
deletion or restriction of processing, unless retention duties or overriding interests prevent it;
objection to certain processing, in particular direct marketing;
data portability in a common electronic format (Art. 28 f. FADP, Art. 20 GDPR);
withdrawal of consent with effect for the future – for cookies at any time via the «Cookie settings» link in the footer (see Cookie Policy), for the newsletter via the unsubscribe link, otherwise by email.

An informal message to info@immosmile.ch is sufficient to exercise your rights. For security we may request proof of identity. We normally reply within 30 days. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, and – within the scope of the GDPR – a European supervisory authority.

19. Do you have to provide data?

You can use our website without providing personal data. However, if you request a valuation, a callback or a mandate, we need the information required for it – without it we cannot provide the respective service. Information that is not required is marked as optional or not requested at all.

20. Changes to this policy

We amend this privacy policy when our data processing or the legal situation changes. The version published on this page applies; the version date is shown above. In the event of significant changes we will provide notice in an appropriate place on the website. This privacy policy is informational and does not form part of a contract with you.

See also: Cookie Policy · Terms of Use · Legal Notice