Privacy Notice of Dinvest
1. What is this privacy policy about?
Dinvest Immobilien AG and Dinvest Bewirtschaftung AG process personal data relating to you or other individuals in different ways and for different purposes. Where we refer to βDinvestβ, βweβ or βusβ, this refers in each case to the company responsible for data processing operation (see para. 2).
βPersonal dataβ means all information relating to an identified or identifiable natural person, and βprocessingβ means any operation with it, such as collecting, using, and disclosing it.
This privacy notice explains our processing of such data (hereinafter referred to as personal data or data) when
β you visit our website dinvest.ag or use our user portal,
β you use our real estate services as the owner of a property or as a tenant in a property managed by us,
β you are otherwise associated with us by contract,
β you contact us via email, letter, on social media, by text message, via a contact form, etc.,
β you register for certain offers and our newsletter,
β you deal with us in the context of all other data processing related to our services.
Please take the time to read this privacy notice to learn how and why we processes your personal data, how we protect your personal data and what rights you have in this context. If you have any questions or would like further information about our data processing, please do not hesitate to contact us (para. 2).
2. Who is responsible for processing your data?
For the data processing according to this privacy notice, either one of the following companies is the "controller", i.e. the party primarily responsible under data protection law, depending on the entity you are in contact with:
Dinvest Immobilien AG
Baslerstrasse 62
4123 Allschwil
Switzerland
or
Dinvest Bewirtschaftung AG
Baslerstrasse 62
4123 Allschwil
Switzerland
In cases where both companies share responsibility for data processing, we may act as joint controllers. Similarly, when we determine the purposes and means of data processing together with third parties (e.g., the owners of the property you rent or have applied to as a tenant), we may also act as joint controllers with those third parties.
If you have any questions regarding data protection, please feel free to contact us at the following address so that we can process your request as quickly as possible:
βinfo@dinvest.agβ
3. What personal data do we process?
We process different categories of personal data depending on the occasion and purpose. You will find the most important categories below, whereby this list cannot be exhaustive.
You may provide us with data that relates to other individuals, such as details of family members. If you do submit data concerning third parties, we understand that you confirm this data is correct and that you are authorised to provide us with this data. We ask you to inform these third parties about our processing of their data (for example, by a reference to this privacy policy).
3.1. Master data
Master data is the basic data that we need to process our business relationships or for marketing and advertising purposes and that relates directly to your person and characteristics. For example, we process the following master data:
β salutation, surname and first name, gender and date of birth
β address, contact details such as e-mail address and telephone and mobile number
β nationality and status of residence permit
β further information from identification documents
β family data (e.g. marital status and relatives)
β language preference declaration
β details of occupational profile and employment (e.g. terms of employment, employer, start of employment) and training, if applicable
β [information on income and asset situation (e.g. gross income, rent and assets)]
β information on housing situation
β in case of contact persons of companies also relations to the company you are working for
β customer history
β signature authorizations and consent forms
We usually obtain this master data from you directly but possibly also from other persons who are related to you or who work for your company but may also obtain personal data from third parties, for example, from agencies you work for or from third parties such as our contracting parties, associations, and address dealers and from publicly accessible sources such as public registers or the internet (websites, social media, etc.).
3.2. Contract data
Contract data is information that incurs in connection with the conclusion or execution of a contract, for example information about contracts and cooperative partnerships and the services to be rendered or the services rendered, as well as data from the period prior to the conclusion of a contract, information on the conclusion of the contract itself (e.g. the closing date and the subject matter of the contract), as well as the information required or used for the execution. For example, we process the following contract data:
β date, information on the type and duration as well as conditions of the respective contract, data concerning the termination of the contract;
β contact details and delivery addresses;
β information on the use of services;
β information on payments and payment methods, invoices, mutual claims, contact with customer service, objections, defects, returns, information on customer satisfaction, complaints, feedback, etc.;
β for services available online, also access data and logins.
We receive this data from you, but also from partners with whom we work. This data may relate to your company, in which case it is not βpersonal dataβ, but it may also relate to you if you work for a company or if you obtain services from us.
3.3. Communication data
Communication data is data in connection with our communication with you, for example, when you contact us via contact form or via other means of communication. Communication data is, for example:
β name and contact details such as e.g. postal address, e-mail address and telephone number;
β content of correspondence (e.g. of e-mails, written correspondence, telephone conversations, chat messages, etc.);
β responses to customer and satisfaction surveys;
β information on the type, time and, if applicable, location of the communication and other peripheral data of the communication.
If we record telephone conversations, we will inform you in each case at the beginning of the conversation. If you do not agree to the recording and storage of the call, you also have the option to end the call or contact us via other communication channels.
3.4. Technical data
Technical data is generated in connection with the use of our website and/or user portal. This includes, for example, the following data:
β The IP address of the end device and device ID;
β information about your device, the operating system of your end device or language settings;
β information about your internet provider;
β accessed content or protocols in which the use of our systems is recorded;
β date and time of access to the website and your approximate location;
β details of the content and files accessed in the user account;
β other information that is required when using the user account, such as sending the access code via push message for logging into your user account via website.
We may also assign an individual code to you or your end device (e.g. by means of a cookie; see section 5.1). This code is stored for a certain duration, often only during your visit. We cannot usually deduce who you are from technical data unless, for example, you register for the newsletter on our website. In this case, we can link technical data with master data β and thus with your person.
3.5. Behavioural data
To tailor our offers and services to you or your company in the best way possible, we try to get to know you better and try to better tailor our services to you. For this purpose, we collect and use data on your behaviour. Behavioural data is, in particular, information about your use of our website. It may also be collected based on technical data. This includes, for example, information on your use of electronic communications (e.g. whether and when you opened an e-mail or clicked on a link, especially when sending newsletters). We may also use your other interactions with us as behavioural data, and we may link behavioural data with other data (e.g. with anonymous information from statistical offices) and evaluate this data on a personal and non-personal basis.
3.6. Preference data
Preference data tells us which needs you are likely to have, and which services might meet your interest or the interest of your company [(e.g. when selecting topics for the newsletter)]. We therefore also process data regarding your interests and preferences. For this purpose, we can link behavioural data with other data and evaluate this data on a personal and non-personal basis. This allows us to draw conclusions about characteristics, preferences, and anticipated behaviour.
3.7. Other data
We may also collect data from you in other situations. In connection with official or judicial proceedings, for example, data (such as files, evidence, etc.) incurs that may also relate to you. We may also obtain or produce sound recordings in which you may be identifiable or register who participates in events or campaigns and who uses our infrastructure and systems and when.
4. For what purposes do we process your personal data?
We use the personal data we collect primarily for the management of properties, including tenant communication, maintenance coordination, and financial administration. This includes organizing repairs and maintenance, managing and concluding rental agreements, organizing viewings and selecting applicants, and preparing financial reports related to building operations. This processing is essential for ensuring the proper operation, upkeep, and administration of properties under our management.
In addition, we also process your personal data, to the extent permitted and deemed appropriate, for other purposes in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:
β For communication purposes, i.e. to contact you and to stay in contact with you. This includes answering inquiries and contacting you in case of queries, e.g. by e-mail. For this purpose, we especially process your communication and master data.
β For customer care and marketing purposes to offer you information about new offers, for example, through the newsletter. For this purpose, we especially process technical data, master data, communication data.
β We also process data to improve our services and for product development.
β Job applications: We process personal data provided by applicants during the application process, including contact details, CVs, references, and other supporting documents. This data is used to assess suitability for the position, communicate with applicants, and manage the recruitment process. If necessary, data may be shared with third parties, such as background check providers, in accordance with applicable law. Applicant data is stored securely and retained only as long as necessary for the recruitment process or as required by law. Unsuccessful applications are deleted after an appropriate retention period unless consent is given for longer storage.
β To ensure IT security and for prevention: we process personal data to monitor the performance of our company, in particular IT, our website, applications, and other platforms, for security purposes, to ensure IT security, to prevent theft, fraud and abuse, and for evidence purposes. This includes, for example, the evaluation of technical records of the use of our systems (log data), the prevention, defence and investigation of cyber-attacks and malware attacks, analyses and tests of our networks and IT infrastructures, system and error checks.
β To maintain the internal rules and other measures for IT, building and facility security and for the protection of our employees and other persons and assets belonging to or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone records).
β To protect our rights: we may also process personal data to enforce claims in or out of court and before authorities in Switzerland and abroad, or to defend ourselves against claims. For this purpose, master data and communication data may be processed.
β To comply with legal requirements: this includes, for example, the processing of complaints and other notifications, compliance with orders of a court or an authority, measures to detect and investigate abuses, and generally measures that we are obliged to take by applicable law, self-regulation, or industry standards. For this purpose, we may especially process your master data and communication data.
β For administration and support: to shape our internal processes efficiently, we process data as far as necessary for the administration of IT, for accounting or for archiving data. For this purpose, particularly communication and behavioural data as well as technical data may be used.
β We may also process data for other purposes. These include company management, including business organization and company development, other internal processes and administrative purposes (e.g. management of master data, accounting and archiving), training as well as educational purposes and the preparation and processing of purchase and sale of business units, companies or parts of companies and other transactions under company law and the associated transfer of personal data, as well as measures for business management and the protection of other legitimate interests.
If we ask for your consent for certain processing activities, we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time by written notice.
5. What online tracking and online advertising techniques do we use?
On our website, we use various techniques to let us and third parties consulted by us recognise you when you use our website and, in some cases, track you across multiple visits. The use of such techniques is regulated separately. The following section provides information on this topic.
5.1. How and for what purpose do we use cookies and similar technologies?
We use third-party services for our website to measure and improve the user experience of the website and online advertising campaigns. For this purpose, we may embed third-party components on our website, which may in turn use cookies. When we track you or use similar technologies, the core purpose is to enable us to distinguish access by you (via your system) from access by other users so that we can ensure the functionality of the website and perform statistical analyses. We do not want to identify you in this process. The technology used is designed to recognise you as an individual visitor each time you access the site, for example, by having our server (or the servers of third parties) assign a specific identification number to you or your browser (so-called βcookieβ).
Cookies are files that your browser automatically stores on your end device when you visit our website. Cookies contain a unique identification number (an ID) that allows us to distinguish individual visitors from others, but usually without identifying them. Depending on the purpose use, cookies contain further information, for example, on accessed sites and the duration of the visit to a site. On the one hand, we use session cookies, which are deleted again when the browser is closed, and on the other hand, we use permanent cookies, which remain stored for a certain duration after the browser is closed and are used to recognise visitors on a subsequent visit.
We use the following types of cookies and similar technologies:
* Necessary cookies: necessary cookies are required for the functionality of the websites, for example, to allow you to switch between sites without losing information entered in a form.
β* Performance cookies: these cookies collect information about the use of a website and enable analyses, for example, which sites are most popular. They can thereby simplify the visit to a website and improve the user experience.
β* Functional cookies: functional cookies enable advanced features and can display personalised content.
β* Marketing cookies: marketing cookies help us and our advertising partners to target you on our websites and on websites of third parties with advertisements for products or services that may be of interest to you or to display our advertisements during your further internet use after visiting our websites.
We particularly use cookies for the following purposes:
β* personalisation of content;
β* displaying personalised advertisements and offers;
β* displaying ads on third-party websites and measuring their success, i.e. whether you respond to these ads (remarketing);
β* save settings between your visits;
β* determining whether and how we can improve our website;
β* collection of statistical data on the number of users and their usage habits, as well as to improve the speed and performance of the website;
β* we may process your contact details to target you with advertisement on third-party platforms.
We may also use similar technologies e.g. LinkedIn Insight Tags, Pixel Tags or Fingerprints to store data in the browser. Pixel Tags refer to small, usually invisible images or a program code that are loaded from a server and thereby transmit certain information to the operator of the server, e.g. whether and when the website was visited. Fingerprints are information that is collected when you visit our website via the configuration of your end device or your browser, and which make your end device distinguishable from other devices.
5.2. How can cookies and similar technologies be disabled?
When accessing our website, you have the option to activate or deactivate certain categories of cookies. You can configure your browser in the settings to block certain cookies or similar technologies or delete existing cookies and other data stored in the browser. You can also enhance your browser with software (so-called βplug-insβ) that blocks tracking by certain third parties. You can find out more about this in the help pages of your browser (usually under the heading βPrivacyβ). Please note that our website may no longer fully function if you block cookies and similar technologies.
5.3. Cookies from partners and third parties on our website
We use third-party services to help us measure and improve the user experience of the website and online advertising campaigns. Third-party service providers may be located outside Switzerland and the EU/EEA, provided that the protection of your personal data is adequately ensured. For example, we use analytical services to allow us to optimise and personalise our website. The respective third-party providers may record the use of the website for this purpose and combine their recordings with further information from other websites. This allows them to record user behaviour across multiple websites and end devices in order to provide us with statistical evaluations on this basis. The providers may also use this information for their own purposes, e.g. for personalised advertising on their own website or other websites. If a user is registered with the provider, the provider can assign the usage data to the relevant person.
Four of the most important third-party providers are Google and Meta/Facebook. You can find more information about them below. Other third-party providers generally process personal and other data in a similar way.
β*Google Analytics, an analysis service of Google LLC (1https://www.edoeb.admin.ch/edoeb/de/home.html600 Amphitheatre Parkway, Mountain View, CA, USA) and Google Ireland Ltd. (Google Building Gordon House, Barrow St, Dublin 4, Ireland; jointly "Google", with Google Ireland Ltd. being responsible for the processing of personal data). Google uses cookies and similar technologies to collect certain information on the behaviour of individual users on or in the relevant website as well as information on the end device used for this purpose (tablet, PC, smartphone, etc.). Google collects information on the behaviour of users on the website and the end device used and provides us with evaluations on this basis but also processes certain data for its own purposes. We have configured Google Analytics in a way that IP addresses of visitors are anonymised before being forwarded to the USA. You can find information on data protection at Google Analytics here. You can disable Google Analytics by installing a respective browser add-on.
β*Meta Pixel, an analytical tool of Meta Platforms Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). This allows us to control advertisements on Meta and Meta's partners to be displayed only to users for whom advertisements are likely to be of interest. We can also measure the effectiveness of such advertisements for statistical and market research purposes. We are jointly responsible with Meta for sharing data that Meta receives as a rehttps://www.edoeb.admin.ch/edoeb/de/home.html.sult, for displaying personalised advertisements, improving advertisement delivery, and personalising content. The data is stored on servers in the EU/EEA and the USA. Users may submit information requests and other inquiries directly to Meta/Facebook. Further information on data protection at Meta and corresponding settings options can be found here.
β*LinkedIn Insight Tag, an analytical tool from LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland). Using LinkedIn Tag, we are informed about you visiting our websites, whereby your IP address is also collected. In addition, timestamps and events such as access to websites are stored. This enables us to statistically evaluate your use of our website in order to constantly optimise it. For example, we learn which LinkedIn advertisement or interaction on LinkedIn you used to reach our website. This allows us to have better control over the display of our advertising. The data is stored on servers in the EU/EEA and the USA. We have configured LinkedIn Insight Tag to only forward visitors' IP addresses to the USA in a shortened or hashed version. Please note that LinkedIn can store the data allowing a connection to the respective user profile and LinkedIn can use the data for its own advertising purposes. Further information on LinkedIn's data protection and corresponding settings options can be found here.
β*Zoho One, a business software suite by Zoho Corporation GmbH (Trinkausstr. 7, 40213 Dusseldorf, Germany). Zoho provides integrated applications for customer relationship management (CRM), finance, HR, and other business functions. The platform enables businesses to manage their operations efficiently by centralizing data and automating processes. We use Zoho to optimize our customer management, marketing, and internal workflows. Zoho stores data on servers located in the EU. Users may submit information requests and other inquiries directly to Zoho. Further information on data protection at Zoho and corresponding settings options can be found here.
6. What applies to automated decisions?
To ensure the efficiency and consistency of our decision-making processes, certain decisions are made computer-based according to specific rules and, where appropriate, without being reviewed by one of our employees. These include, in particular, decision on tenants, credit checks, and the automatic blocking of certain transactions in the event of anomalies. As far as decisions are exclusively automated and lead to a negative legal consequence for you or otherwise significantly impairs you (βautomated individual decisionsβ), we will inform you accordingly. In this case, you may state your position and request that a natural person review the relevant decision.
7. How do we process data in connection with social media?
If you communicate with us via social media and our profiles there (e.g. on Facebook, Instagram, etc.) or comment on or share content, we collect information for this purpose, which we use primarily to communicate with you, for marketing purposes and for statistical evaluations. Please note that when you visit our social media sites the platform provider itself also collects and uses data (e.g. on user behaviour), possibly together with other data known to it (e.g. for marketing purposes or to personalise the platform content). For more information on data processing by social network providers, please refer to the privacy policies of the respective social networks.
8. To whom do we disclose your personal data?
In connection with our processing activities, we also disclose your personal data to other recipients.
Personal data that we receive from you or from third-party sources may be forwarded, in particular, to our group company (see section 2). This may serve the internal group administration or the support of the respective group company and their own processing purposes, e.g. for the development and improvement of services.
We further disclose personal data to service providers, as required for their services. This concerns IT service providers, but also maintenance companies, and utility providers who perform services related to the property, as well as consulting companies, analysis service providers, debt collection service providers, credit agencies, marketing service providers, etc. As far as service providers process personal data as processors, they are obliged to process personal data exclusively according to our instructions and to implement data security measures.
If you are a tenant or applicant, we may share your personal data with the landlord and/or owner of the property you rent or have applied for, for the conclusion or performance of a rental agreement. Conversely, as a landlord or owner of a property, we may disclose your data to tenants or applicants as part of managing the tenancy relationship.
Data may also be disclosed to other recipients, e.g. to courts and authorities as part of legal proceedings and legal information and cooperation duties, to legal advisors or law firms for legal advice, to buyers of companies and assets, to financing companies in the case of securitizations, and to collection agencies,
In individual cases, it is possible that we also disclose personal data to other third parties for their own purposes, e.g. if you have given us your consent to do so or if we are legally obliged or entitled to disclose such data.
9. Do we disclose personal data abroad?
Recipients of data are not only located in Switzerland. This applies in particular to certain service providers. These may be located outside the European Economic Area (EEA) and Switzerland (especially in the USA or Ukraine), but also in other regions and countries worldwide, e.g. Israel. For example, we may transmit data to authorities and other persons abroad if we are legally obliged to do so or, for example, in the context of a company sale or legal proceedings. Not all of these countries currently guarantee an adequate level of data protection according to the standards of Swiss law. We therefore take contractual precautions to contractually compensate for the lower level of legal protection, especially with the standard contractual clauses issued by the European Commission and recognised by the Swiss Data Protection and Information Commissioner (FDPIC).For more information and a copy of these clauses, please visit: https://www.edoeb.admin.ch/de/bekanntgabe-von-personendaten-ins-auslandβ
In certain cases, we may transmit data in accordance with data protection law requirements even without such contracts, e.g. if you have consented to the corresponding disclosure or if the disclosure is necessary for the execution of the contract, for the establishment, exercise or enforcement of legal claims or for overriding public interests.
10. How long do we process personal data?
We store and process your personal data as long as it is necessary for the purpose of the processing (in the case of contracts, usually for the duration of the contractual relationship), as long as we have a legitimate interest in storing it (e.g. to enforce legal claims, for archiving and or to ensure IT security) and as long as the data is subject to a legal retention obligation (for example, for certain data, a ten-year retention period applies). If there are no legal or contractual obligations to the contrary, we will destroy or anonymise your data after the storage or processing period has expired within our normal processes.
We generally retain master data for 10 years after the last exchange with you, but at least after the end of the contract. This period may be longer if this is necessary for reasons of evidence or to comply with legal or contractual requirements or for technical reasons. For pure marketing and advertising contacts, this period is usually much shorter, usually no more than 2 years since the last contact.
We generally retain contract data for 10 years after the last contract activity, but at least after the end of the contract. This period may be longer if this is necessary for reasons of evidence or to comply with legal or contractual requirements or for technical reasons.
As for applicants who were not selected for a flat, we will retain your master and contract data for [three months] following the successful letting of the flat to another party, unless you have given us your permission to retain it for longer.
In relation to cookies, you can find information on the duration of storage under the link "Cookie settings ".
11. How do we protect your data?
We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data to protect it against unauthorised or unlawful processing and to protect it against the risks of loss, accidental loss or alteration, unauthorised access. However, security risks cannot be completely ruled out; residual risks are unavoidable.
12. What rights do you have?
Under the applicable data protection law, you have certain rights to obtain further information about and influence our data processing. Particularly, these are the following rights:
β Access right: you can request further information about our data processing. We are at your disposal for this purpose. You can also submit a so-called information request if you wish to receive further information and a copy of your data.
β Objection and deletion: you may object to our data processing and request that we delete your personal data at any time if we are not obliged to continue processing or storing this data and if it is not necessary for the contract.
β Correction: you can have incorrect or incomplete personal data corrected or completed or complemented by a note that indicates your objection.
β Data portability: you also have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to have it transferred to a third party, as far as the respective data processing is based on your consent or is necessary for the execution of the contract.
β Revocation: if we process data based on your consent, you can revoke your consent at any time. The revocation is only valid for the future, and we reserve the right to continue to process data based on another basis in the event of a revocation.
Please note that these rights are subject to legal requirements and restrictions and are therefore not fully applicable in every case. In particular, we may need to further process and store your personal data in order to fulfil a contract with you, to protect our own legitimate interests such as the assertion, exercise or defence of legal claims, or to comply with legal obligations. To the extent legally permissible, in particular to protect the rights and freedoms of other data subjects and to safeguard interests worthy of protection, we may therefore also reject a data subject request in whole or in part (e.g. by redacting certain content relating to third parties or our trade secrets).
If you wish to exercise any rights against us, please contact us in writing. You will find our contact details in section 2. As a rule, we will have to verify your identity (e.g. by means of a copy of your ID card). You are also free to file a complaint against our processing of your data with the competent supervisory authority. The competent supervisory authority in Switzerland is the https://www.edoeb.admin.ch/edoeb/de/home.html.
Status of this privacy policy: 17/3/2025