Privacy policy

Only the German version is legally binding.

Controller: Dartera GmbH, Bahnhofstrasse 11, 6300 Zug, hallo@genossenschaftsatlas.ch (see legal notice). This policy is based on the Swiss Federal Act on Data Protection (FADP). It describes which personal data Genossenschaftsatlas processes, for what purposes and for how long.

Principle

We only process data that is necessary to operate Genossenschaftsatlas or that you enter yourself. We do not sell any data and do not show advertising. We only use analytics services if you agree in the cookie notice (see Cookies and analytics). When you are logged in, we record how you use Genossenschaftsatlas (visit days, opened listings, see below) in order to show you your streak, speed and rank. The market data on the website is based on listings, not on your behaviour.

What data we process

• Account: email address, password hash or Google ID (with Google login, also name and email), email confirmation status, language, chosen notification channel, pauses of your alert, time of the last notification. For login links, we store a one-time code only as a checksum; it expires after 20 minutes. Purpose: managing your account and login.
• Searches, favourites and watchlists: saved searches (area, rooms, budget, filters), favourites, followed cooperatives, new build alerts, your notes, which waitlists you are on and when you confirmed them, and the status of your applications (application tracker). Purpose: alerts, reminders and overview in your account.
• “Fits you”: city, number of people and budget, if you use this filter. With an account, stored in your account; without an account, only in the fit cookie in your browser.
• Notifications: which listings and waitlist changes were reported to you and whether you have seen them, the optional daily summary, and a delivery log of our emails (recipient address, subject, type, time, delivery status). Purpose: delivering alerts reliably and tracing errors.
• Visit days (table user_days): when you are logged in, we store once per day the date on which you used Genossenschaftsatlas, without the time and without the pages visited. Purpose: showing your streak (“days active in a row”).
• Viewed listings (table listing_views): when you open an active listing while logged in, we store the listing and the time of your first view once. Purpose: showing how quickly you opened a listing after it appeared, and your ranking (“You were no. X of Y people”). For this, we count the first views of all logged-in people per listing. Other users only see these figures, never who you are.
• Application dossier: what you enter in the application dossier, for example name, address, phone, household, occupation and employer, household income, taxable assets, housing situation, references, pets and motivation, as well as the ticks in your document checklist (for example debt collection register extract, tax return, ID). We only store the ticks, no uploaded documents. The dossier is visible only to you and is used to print your dossier and application letter. We do not pass it on to cooperatives or third parties; you decide yourself what you print or send. You can clear or change the fields at any time.
• Referral programme: your personal referral code and, if someone registers via your link, who referred whom and whether a free month was credited for it. The code is kept in the session cookie until registration. You only see the number of invited and paying people, not their names or addresses. Purpose: crediting one month of Basis per paying referred person.
• Shared searches: if you share a search, we store the email address you enter (at most one other person). The recipient receives a message containing your email address and then the same alerts as you. Please only share a search with people who agree to it. You can remove the sharing at any time in your account; the recipient can unsubscribe by replying to us.
• Push notifications (optional): if you turn on push for a device in your account, we store the push address and the keys your browser generates for it, and send the alert notifications in encrypted form via your browser's push service (for example Google, Apple or Mozilla). You turn push off again in your account or in your device settings.
• Payments and invoices: subscription status, term, amounts, payment and transaction references, and the invoices. Card data and other means of payment are processed exclusively by Payrexx AG (Switzerland); we do not see them.
• Origin of your sign-up: regardless of your cookie choice, on your first visit our server records which page brought you to us (landing page, referring website, campaign parameters such as utm_source). When you sign up, we store this information with your account. Purpose: to see which content and channels bring in new users. We do not pass them on to analytics or advertising services.
• Contact: if you write to us, we process your message and your contact details in order to reply.
• Server logs: IP address, time, page requested and browser details for security and troubleshooting, stored for a short time.

Tips and offers by email

We occasionally send customers and people with a saved search information about our own similar offers (for example the instant alert or Basis): at most weekly for saved searches, at most monthly for Basis customers, and once after a cancellation. For this we store when you last received such an email and whether you have unsubscribed from offers. Every such email contains an unsubscribe link; you can also unsubscribe in your account under Settings. Alerts, receipts and login links are not affected.

Cookies and analytics

We use technically necessary cookies and convenience cookies and, only with your consent, analytics cookies. We do not use advertising cookies:

• Session cookie (session, technically necessary): keeps you logged in and stores short-term information such as notices after an action or a referral code. Without login, it lasts until you close the browser; after login, up to 60 days.
• cookie_ok and consent (technically necessary): remember that you have confirmed the cookie notice and which choice you made, 1 year.
• lang (convenience): your chosen language, 1 year.
• fit (convenience): your details in the “Fits you” filter (city, people, budget), approx. 180 days.

We only load analytics services once you choose “Accept” in the cookie notice. You can change your choice at any time under Cookie settings; we then delete the analytics cookies in your browser.

• Google Analytics 4 (Google Ireland Ltd. / Google LLC, USA): page views, origin (e.g. search engine or campaign), device, approximate region, and sign-up and purchase as events. Google does not store IP addresses; Google Signals and advertising features are switched off. Cookies: _ga, _ga_*, up to 13 months.
• Microsoft Clarity (Microsoft Ireland Operations Ltd. / Microsoft Corp., USA): clicks, scrolling and anonymised session recordings, so that we can find usability problems. Input in form fields is masked. Cookies: _clck, _clsk, up to 1 year.

For transfers to the USA, we rely on the Swiss-US Data Privacy Framework or standard contractual clauses.

You can delete cookies in your browser at any time. Without the session cookie, login is not possible.

Maps and external content

When you visit a page with a map, your browser loads the map data from the Federal Office of Topography swisstopo (vectortiles.geo.admin.ch) and the MapLibre map software from the unpkg.com service. In doing so, these providers receive your IP address, the requested file and information about your browser. We only embed analytics scripts after you consent (see above), and never advertising scripts.

Hosting and processors

Hosting: Sevalla (data centre in Zurich), data backup: Cloudflare R2 (EU), payments: Payrexx AG (Switzerland), login: Google (optional), email: Resend, Inc. (USA), customer support and accounting, if enabled: Zoho CRM (Zoho Corporation B.V., EU data centre; email, name if provided, subscription status, invoices, number of search alerts, origin of sign-up), analytics: Google Analytics, Microsoft Clarity, translation of listings, if enabled: OpenAI (USA; listing texts only, no personal data). When emails are sent, the email service may record whether an email was delivered or opened, or whether a link in it was clicked, if this measurement is enabled. Some of these providers are based abroad, for example in the USA. There, they process data only to the extent necessary for their service and with the safeguards required by the FADP, such as standard contractual clauses.

Retention

We store your account, sign-up origin, searches, favourites, visit days, viewed listings, application dossier, application tracker, referrals and shared searches for as long as your account exists, and delete them together with the account. You can remove individual entries (searches, favourites, shares, applications, dossier fields) yourself in your account at any time. Login links expire after 20 minutes. We retain payment and invoice data for as long as the law requires (accounting records and vouchers: 10 years, Art. 958f CO). Server logs are only kept for a short time.

Your rights

You have the right of access, rectification and erasure: you can find out at any time which data we process about you, correct inaccurate data and have data or your entire account deleted. You can also request your data in a common format and object to processing. To do so, write to hallo@genossenschaftsatlas.ch; we usually reply within 30 days. Deleting your account: yourself in your account under Settings, or by email to us. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Changes

We update this policy when our services change. The version published here is authoritative.