sarimmo & design GmbH (hereinafter "Sarimmo" or "we") places the highest importance on the protection of your personal data. This policy explains what data we collect, for what purpose, on what legal basis, with whom it is shared and what rights you have.
It complies with the Swiss Federal Act on Data Protection (revised FADP, in force since 1 September 2023) and with the European Union General Data Protection Regulation (GDPR) where applicable.
1. Data controller
- Controller
- sarimmo & design GmbH, Kantonsstrasse 49, 3940 Steg-Hohtenn, Switzerland
- Data contact
- info@sarimmo.ch
- UID
- CHE-290.047.956
2. Data collected
Contact form
- First and last name
- Email address
- Phone number (optional)
- Message content
Online property valuation tool
- Identity: first name, last name, email, phone
- Property details: address, locality, surface, rooms, year, condition, amenities
- Intention to sell and contact preference
- IP address, anti-bot token (Cloudflare Turnstile)
"Present your property" form
- Contact details and information about the presented property
Browsing data
- IP address (anonymized for statistics)
- Browser type, operating system, resolution
- Pages visited, time on page, traffic source
3. Purposes and legal bases
- Respond to enquiries
- Handle messages received through the contact form — basis: consent and pre-contractual performance.
- Qualify and follow up on leads
- Assess and support enquiries related to selling, buying or valuing a property — basis: consent and legitimate interest.
- Provide an indicative valuation
- Calculate a value range based on the data supplied — basis: consent.
- Audience measurement and improvement
- Understand site usage through Google Analytics (with IP anonymization) — basis: consent via the cookie banner.
- Legal obligations
- Retention of accounting records and anti-money-laundering documentation (AMLA) — basis: legal obligation.
4. Recipients and processors
Your data is processed by authorized staff of sarimmo & design GmbH and by the following technical providers, bound by data processing agreements:
- Metanet AG (Switzerland)
- Website hosting, database and SMTP server (sora.metanet.ch). Data stored in Switzerland.
- Cloudflare, Inc. (United States)
- Turnstile service (anti-bot). Transfer secured by the European Commission Standard Contractual Clauses.
- Google Ireland Ltd. (Ireland / United States)
- Google Analytics 4 with IP anonymization. Activated only after consent via the cookie banner.
- DeepL SE (Germany)
- Machine translation API for multilingual content. Data hosted in the European Union.
- Tacelo (Switzerland)
- Design, technical maintenance and code interventions. Access limited to administration environments.
5. Retention periods
- Valuation leads
- 6 months after the last contact, unless a contractual relationship is established.
- Contact messages
- 24 months after the last exchange.
- Contractual and accounting data
- 10 years (Swiss legal requirement).
- Server logs
- Up to 12 months, for security and diagnostics.
- Cookies
- See section 8 for detailed durations.
6. International transfers
Data transferred to US-based providers (Cloudflare, Google) is governed by the European Commission's Standard Contractual Clauses (SCC 2021) and, for Switzerland, by the recognitions issued by the Federal Data Protection and Information Commissioner (FDPIC). We will inform you of any substantive changes in these transfers.
7. Your rights
Under the revised FADP and, where applicable, the GDPR, you have the following rights:
- Access — confirm whether data concerning you is being processed and obtain a copy.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data, subject to overriding legal obligations.
- Objection — object to processing on legitimate grounds.
- Portability — receive your data in a structured, machine-readable format.
- Withdrawal of consent — at any time, without retroactive effect.
- Complaint — file a complaint with the competent data protection authority.
To exercise these rights, email info@sarimmo.ch with your request and proof of identity. We reply within 30 days.
8. Cookies
The website uses three cookie categories whose consent you can manage at any time via the "Cookies" button at the bottom of every page.
- Essential cookies
- Required for the website to function (session, consent memory, security). Cannot be disabled. Duration: session to 12 months.
- Analytics cookies
- Google Analytics 4 with IP anonymization (
_ga,_ga_*). Set only after explicit consent. Duration: up to 14 months. - Marketing cookies
- Activated only with your consent and used, where applicable, to measure advertising campaigns. Duration: varies by provider.
9. Security
We implement appropriate technical and organizational measures to protect your data: HTTPS encryption, prepared SQL statements, password hashing (bcrypt), anti-bot verification on forms, restricted access to admin interfaces, encrypted backups.
10. Supervisory authority
You may file a complaint with the competent authority:
- Switzerland — Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — edoeb.admin.ch
- European Union — the national authority of your country of residence.
11. Changes to this policy
This policy may be updated at any time to reflect legal or technical developments. The last update date is shown at the top of the page. We recommend consulting it regularly.