Privacy Policy

Last updated: 30 October 2026

1. Controller

GenossenSchaffen GmbH
Bergstrasse 12
8044 Zurich
Email: info@genossenschaffen.ch

2. Purpose and scope

This privacy policy applies to the use of the website www.genossenschaffen.ch, the registration and management of a subscription for apartment notifications, the sending of notifications by email and – if selected – by WhatsApp, the verification of eligibility for the KulturLegi discount, as well as to billing via Chargebee/Stripe.

3. Personal data processed

The following categories of personal data may be processed:

• Master data: name, email address, and where applicable phone number
• Subscription data and preferences: chosen subscription, desired number of rooms or filters, notification status
• Billing and payment data: billing address, subscription status, payment status; payment processing via Chargebee (EU Data Center) with a connected Stripe account
• Communication data: contents of enquiries to us
• Usage data/technical data: IP address, date/time of the request, browser, device, pages visited, referral information (e.g. from immomailing)
• Cookie and tracking data as described in the overview below
• KulturLegi data: issuing office, KulturLegi number and date of birth (only if you use the KulturLegi discount)

4. Purposes of data processing

Processing takes place for the following purposes:

• Provision and operation of the website
• Conclusion and fulfilment of the subscription (sending matching apartment listings by email or WhatsApp)
• Management of the customer account
• Billing and payment processing
• Verification of eligibility for the KulturLegi discount and ensuring that each card has only one active discount
• Ensuring security and stability
• Compliance with legal obligations

The legal bases are in particular the necessity for the performance of the contract, our legitimate interests in secure operation, and statutory retention obligations.

5. Cookies and browser storage

The cookie overview explains cookies and browser storage. Use “Change cookie settings” to change or withdraw permission for detailed analytics, recordings and advertising. Limited usage statistics have a separate control; “Reject all” also turns these statistics off.

The following are used

• technically necessary cookies,
• Cookies for limited usage statistics and, with your permission, detailed analytics using PostHog EU and Google Analytics,
• as well as cookies from embedded third-party providers (e.g. Mapbox, YouTube/Embed.ly)

For visits detected as being from Switzerland, these limited statistics may run before you make a choice. For other or unknown locations, they start only after permission. We collect selected page views and actions, language, broad source groups, and approved campaign and experiment codes. Individual events with a random visitor identifier remain in our own statistics service in the AWS Frankfurt region. An hourly deletion job removes events after 30 days; outages can delay deletion. If the deletion job falls behind by more than two hours, the service stops accepting new events. Our existing PostHog project in the EU receives only daily totals by event type, where at least ten visitor identifiers are present. Page, language and source breakdowns are not transmitted. Visitor identifiers, individual event times, email addresses, customer identifiers, advertising click identifiers, form contents and session recordings are not sent to PostHog by this stream. Our infrastructure technically processes connection data. These statistics do not link data to your customer account. The visitor identifier is stored in gs_statistics_v1. Your explicit statistics choice or refusal is saved for one year in gs_statistics_choice_v1 or gs_statistics_rejected_v1.

6. Recipients and processors

We use the following categories of service providers:

• Amazon Web Services (AWS), particularly Frankfurt and Ireland: hosting, email delivery through Amazon SES and WhatsApp notifications. Our own limited-statistics service stores individual events in Frankfurt.
• Chargebee (EU Data Center): management of subscriptions and invoices
• Stripe (connected via Chargebee): processing of card or payment information as our payment service provider. Stripe acts on our behalf; no separate Stripe account is opened for you.
• Consent Pro: cookie consent management
• PostHog (EU): detailed usage analytics and session recordings with your permission, plus daily totals from our separate limited usage statistics.
• We use Google Ads to measure advertising performance. Depending on your choices, measurement signals without advertising cookies may be sent to Google. In that state, existing advertising cookies are not read and new ones are not set. These signals do not mean that no data is transmitted. Personal data for advertising personalization and customer data for enhanced conversions are used only within the applicable permission scope.
• Mapbox: display of apartment maps
• Cloudflare (DNS service): in the signup form we check whether the domain of your email address can receive email. To do so, your browser queries Cloudflare's public DNS service. Only the domain part of the address (not the full email address) and your IP address are transmitted.
• Embedded media providers (YouTube/Embed.ly)
• Immomailing referral: storage of a referral context if the visit comes from immomailing
• With your permission, we send purchase events to Meta for advertising measurement. These may include a hashed email address, a technical transaction identifier, time, currency and estimated lifetime value, together with available permitted advertising identifiers, IP address and browser information. Hashed information is pseudonymous, not anonymous. Meta may also process data for its own purposes under the applicable terms; it is not described here as solely our processor. The CHF 35 reported for monthly subscriptions and CHF 84 for yearly subscriptions are estimated customer lifetime values, not the amount of an individual payment.
• Sentry (Functional Software, Inc., USA): error and event logging to ensure technical operation and for troubleshooting. Technical data and, in individual cases, personal data (e.g. email address, phone number, IP address) may be processed in error reports; these are deleted automatically after a short time (typically within around 30 days).
• KulturLegi/Caritas: verification of card validity and eligibility for the discount

Where providers act as our processors, they process data under our instructions. Some providers, particularly Google and Meta, may also process data for their own purposes under the applicable terms; they are not universally described as solely our processors.

• Postmark (ActiveCampaign, LLC): sending of emails (in particular to Microsoft/Outlook recipients). Postmark processes the email addresses and the content of the notifications on our behalf.

7. Disclosure of data abroad

The main storage takes place in the EU (AWS Frankfurt and Ireland, Chargebee EU) and – for the KulturLegi discount – in Switzerland (AWS Zurich). Disclosure to other countries, in particular the USA, takes place in connection with the use of Postmark (email delivery), Stripe (payment processing), Meta (conversion measurement) and Sentry (error logging). In these cases we rely on the Swiss adequacy decision (e.g. Swiss-U.S. Data Privacy Framework) or on standard contractual clauses recognised by Switzerland.

8. Retention period

Personal data is retained only for as long as necessary for the purposes stated above.

• Account and notification data (in particular personal profile data for the subscription stored in Chargebee) is automatically deleted or anonymised 14 days after the end of the subscription.
• Billing and accounting records (e.g. invoices, payment receipts) are retained independently of this for up to 10 years in accordance with Swiss law.
• Logs and technical backups are stored only for as long as necessary for security and traceability.
• A released KulturLegi card identifier is deleted automatically after approximately 30 days.

9. Communication

We send

• contract-related emails (notifications about apartment listings, account/payment notices),
• service-related information (e.g. changes to the service).

10. Security

We take appropriate technical and organisational measures to protect the data (access restrictions, encryption, logging). Complete protection against all risks cannot be guaranteed.

11. Rights of data subjects

Under the Swiss Data Protection Act (DSG), data subjects have in particular the rights to information (Art. 25), rectification, erasure/anonymisation, data portability (Art. 28) and withdrawal of consent given.

12. Data breaches

In the event of a data breach likely to result in a high risk, we report the incident to the FDPIC and – where necessary – to the data subjects (Art. 24 DSG; Art. 15 VDSG).

13. Changes

We may amend this privacy policy if our services or the legal requirements change. The version published on the website at any given time applies.

14. KulturLegi discount

When you use the KulturLegi discount, we ask KulturLegi/Caritas to confirm that you are eligible. To perform this check, we send your card’s issuing office and number together with your date of birth over an encrypted connection. We keep only the result: valid or invalid. We do not retain any other information returned by KulturLegi.

We do not store the card number or your date of birth in plain text. Instead, we use a secret key to create a pseudonymous identifier from the issuing office and card number. The original card number cannot be recovered from this identifier. We store the identifier in AWS in the Zurich region together with the technical references needed to manage the reservation, discount code and associated subscription. This ensures that each card can be linked to only one active discount.

Temporary reservations expire after a short period. We retain the card identifier for as long as the discounted subscription remains active. When the subscription ends, we release the record and delete it automatically after approximately 30 days. Chargebee and Stripe process payment and subscription data as described above.