Privacy Policy

• personal and master data you provide at registration for a user account and/or when using Fundort (username, name, e-mail, phone number, address);
• input and transaction data (title, description, images, documents, purchases, bookings, rentals, bids, reviews, chat messages between users);
• information relating to a buyer protection claim: your description, the evidence you attach (photos, PDFs) and the message history with our arbitration team. The description and the evidence are also made available to the other party to the transaction concerned, so that they can comment before a decision is made; your message history with the arbitration team remains closed to them. The files are stored outside the publicly accessible directories and are available only to the two parties to the transaction and to the responsible staff;
• information from your rental application dossier: household, employment, employer, occupation, income, residence status, current housing situation, pets and debt-collection entries as well as a reference person with contact details. If you are moving in as a couple or into a flatshare, this also covers the name, employment, income and residence status of the other adults. The dossier remains stored with us and goes to the landlord you choose with every application; the documents you attach (e.g. debt-collection extract, salary statement) are only passed on and are not stored by us. The details are stored encrypted (AES-256), which makes a database dump unreadable. This is not end-to-end encryption — Fundort is technically able to decrypt it, because your dossier has to be shown to the landlord you chose. Fundort staff only see the content case by case, only with a stated reason and only with a log entry recording who looked, when and why;
• payment and verification data in the context of purchases and buyer protection;
• the result of identity verification (KYC): verification status, document type and expiry, date of birth (age check), nationality, an irreversible document hash and a numeric match score — the ID images and biometric data themselves are processed by our service provider PXL Vision (see “Security and data processing”);
• technical data for operation and security (IP address, device/browser details, log and usage data, misuse signals);
• activity and access logs for security and evidence purposes (which action was taken when and by which account, including IP address and device characteristics);
• search and usage behaviour for saved searches, search-agent notifications and personalised suggestions (search terms, filters, recently viewed listings).

• performance of the contract (providing the user account and marketplace functions);
• your consent, where we obtain it (e.g. for identity verification);
• our legitimate interests (security, fraud prevention, service improvement);
• legal obligations.

• Payrexx AG, Burgstrasse 20, 3600 Thun (Switzerland) — payment processing as well as escrow/buyer-protection handling: Payrexx holds the purchase amount between payment and payout. As a financial intermediary, Payrexx carries out its own due-diligence check (KYC) for sellers who receive payouts. This includes confirming the residential address by means of an official invoice that may be no older than six months. That document is submitted to and processed by Payrexx; Fundort does not receive it, only the information whether the check was passed.
• Swiss Post Ltd (Schweizerische Post AG) (Switzerland) — shipping: franking, shipping labels and parcel tracking; receives the delivery address for this purpose. In addition, when you register and when you save your profile we check the address you entered against Swiss Post's address data (existence and spelling) to prevent made-up addresses; street, postcode and town are transmitted for this.
• Federal Office of Justice — Central Business Name Index (Zefix) (Switzerland) — for business accounts we query the UID you provided in the public commercial register and store the result (company name, legal form, registered office, status, time of check) as evidence. Only the UID is transmitted.
• PXL Vision AG (Switzerland) — identity/ID verification (KYC) where required; this involves processing the ID data and biometric facial features. Fundort receives only the verification result (see “Security and data processing”).
• Federal Office of Topography swisstopo (Switzerland) — map tiles for property maps and conversion of addresses into coordinates; loading the map transmits your IP address.
• OpenStreetMap Foundation (United Kingdom/EU) — map tiles for properties outside Switzerland; loading the map transmits your IP address.
• GeoNames (Unxos GmbH) (Switzerland) — mapping postcode and town to the canton during registration, in the location filter and in your profile; the postcode or town name you enter and your IP address are transmitted.
• Debt collection service provider (Switzerland) — only in the event of payment default: if an invoice remains unpaid despite a final reminder, we may pass the claim on for collection. Only the data required for this is transmitted (name and address, invoice data, reference number, outstanding amount and reminder history) — no listing, chat or identity document data. The legal basis is performance of the contract and our overriding interest in enforcing outstanding claims; the provider will be named once selected.

• Google LLC (USA) — reCAPTCHA to protect our forms, Google Maps to display the location of listings and profiles (loading the map transmits your IP address and browser details to Google), Google Safe Browsing to check links in chat messages for malware and phishing, Google Geocoding to convert addresses outside Switzerland into map coordinates (server-side; the property address is transmitted, not your IP address), Google Cloud Vision for automated image moderation of listings and chat attachments (detection of prohibited/offensive content, QR codes and text in images), Firebase Cloud Messaging for push notifications in the mobile app (push tokens and notification content), and YouTube for videos in property listings in privacy-enhanced mode (youtube-nocookie.com): only when you click a video are your IP address and browser details transmitted to Google — no request goes to Google before that. Floor plan images that a provider links from a third-party server are passed through via Fundort; the provider does not see your IP address.
• Cloudflare, Inc. (USA) — upstream protection and delivery network (protection against attacks and overload, caching); this processes your IP address, browser details and the addresses requested.
• Twilio Inc. (USA, region US1) — sending SMS/mobile verification codes (OTP) using your mobile number.
• OpenAI (USA) — AI-assisted convenience features (e.g. description/category suggestions, smart search) as well as automated moderation of listing and chat content (text and images) to prevent misuse and fraud.

When we delete an account we remove all personal data as a matter of principle (see Retention). In two cases we retain a small set of check values by way of exception:

• the account was blocked at the time of deletion, or
• the account had received a fee discount from a campaign.

The sole purpose is to prevent a block or a one-off discount from being circumvented by deleting the account and signing up again. In all other cases nothing of this is retained.

What is retained are only check values (hashes) of the identity document reference, the phone number and the bank details — no names, no addresses, no plain-text data. The original value cannot be reconstructed from such a check value, and it is not linked to any account or history. It only allows the comparison “has this value been used before”.

The check does not happen at registration but only when you verify your identity document or add bank details. A match does not lead to your account being refused; the discount simply no longer applies to that account.

These check values are retained for a limited period and deleted automatically afterwards: 18 months in connection with a campaign, 60 months in connection with a block. The legal basis is our legitimate interest in preventing abuse and enforcing our terms of use. If you believe such a measure is incorrect, contact us — we will review the individual case and can restore the discount.

• the right to access, rectification, erasure and restriction of processing;
• the right to data portability;
• the right to withdraw consent at any time with effect for the future and to object to processing.