1. Introduction
The CHflat Association (hereinafter "CHflat", "we" or "us") operates the free platform chflat.ch, which connects apartment seekers, landlords, and property managers in Switzerland.
The protection of your privacy and your personal data is important to us. We process personal data exclusively in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and – insofar as applicable – the General Data Protection Regulation (GDPR).
We do not sell or rent personal data to third parties.
2. Controller
CHflat Association Switzerland
Email: info@chflat.ch
Data protection inquiries: info@chflat.ch
3. Which personal data we process
Depending on your use of our platform, we process the following personal data.
Registration
- Email address
- User role (tenant, landlord, or property manager)
- Language
- Time of registration
- Login information
- Google or Apple identifiers for OAuth login
Tenant profile – Personal details
- First and last name
- Date of birth
- Nationality
- Residence permit
- Marital status
- Telephone number
- Email address
- Residential address
Tenant profile – Professional details
- Employer
- Place of work
- Position
- Type of employment
- Type of contract
- Commencement of employment
- Probationary period
- Remote/hybrid status
- Income
- Other voluntary information
Tenant profile – References
- Current landlord
- Contact details of the landlord
- Employer reference
- Other reference persons
Tenant profile – Apartment search
- Desired location
- Search radius
- Budget
- Number of rooms
- Desired living space
- Commute time
- Means of transport
- Move-in date
- Other search criteria
Tenant profile – Additional information
- Roommates
- Children
- Pets
- Personal notes
- Letter of motivation
- Motivation video
Uploaded documents (voluntary)
- Identity documents
- Extracts from the debt enforcement register (Betreibungsauszüge)
- Salary statements
- Land register extracts
- Proof of insurance
- Other application documents
Landlords and property managers
- Name
- Company name
- Contact details
- Listing data
- Property information
- Rental price
- Images
- Descriptions
- Viewing appointments
Technical data
- IP address
- Browser type
- Operating system
- Device type
- Timestamp
- Server logs
- Security logs
4. Purposes of data processing
We process personal data in particular for the following purposes:
- Provision of our platform
- Creation and administration of user accounts
- Intermediation between tenants and landlords
- Operation of matching functions
- Provision of AI functions
- Processing of support requests
- Fraud prevention
- Abuse detection
- Ensuring data security
- Compliance with legal obligations
- Processing of voluntary donations
5. Access by CHflat Administrators
For the secure operation of our platform, authorized CHflat administrators possess technical access rights to personal data.
Access occurs exclusively when necessary, particularly for:
- technical support
- troubleshooting
- security incidents
- prevention of abuse
- recovery of user accounts
- legal obligations
Administrators may view—insofar as necessary—the following data, among others:
- profile data
- contact details
- search profiles
- employer details
- income details
- references
- uploaded documents
- account settings
- technical logs
6. Documents and Particularly Sensitive Personal Data
Particularly sensitive documents are stored in private storage areas and protected by technical access restrictions.
In principle, only the following persons have access:
- yourself
- landlords or property managers expressly authorized by you
- authorized CHflat administrators in support cases
7. Disclosure to Third Parties
We only disclose personal data if this is necessary for the operation of our platform, if you have given express consent, or if we are legally obligated to do so.
For the operation of our platform, we work with carefully selected service providers. These include in particular:
- Lovable Cloud (hosting, database, authentication, and storage)
- Supabase infrastructure
- Resend (dispatch of transactional emails)
- Stripe (voluntary donations)
- Google OAuth
- Apple Sign In
- Google Gemini (AI functions)
- ElevenLabs (voice functions)
8. AI Functions
CHflat provides various AI functions, for example:
- creation of cover letters
- support for advertisements
- AI-supported real estate information
- AI chat functions
9. Cookies
We exclusively use technically necessary cookies as well as the cookie settings selected by you.
Currently, we do not use any advertising or marketing cookies. No tracking is performed using Google Analytics or comparable services.
Google Search Console is used exclusively for search engine indexing.
10. Data Security
We implement appropriate technical and organizational security measures. These include, in particular:
- encrypted data transmission (TLS)
- encrypted storage
- role-based access rights
- row-level security
- audit logs
- security reviews
- backups
- access restrictions
11. Retention Period
Personal data are stored only for as long as is necessary for the respective purpose or as required by law.
In particular, the following periods apply:
- active accounts: for as long as the account exists
- deleted accounts: deletion after expiry of the 30-day grace period
- inactive data: in accordance with the defined retention policies
- motivation videos: automatic deletion after expiry of the respective period
- access logs: automatic deletion in accordance with the retention policy
- accounting-related documents: 10 years in accordance with statutory requirements
12. Deleting an Account
You may delete your user account at any time in the Privacy Center.
Upon receipt of your deletion request, a grace period of 30 days generally applies. The deletion request may be revoked during this period.
After the expiry of this period, your personal data will be deleted or anonymized, provided that no statutory retention obligations or legitimate interests preclude such deletion.
13. Data Transfer Abroad
Individual service providers may process data outside of Switzerland.
To the extent necessary, we ensure that appropriate data protection guarantees are in place, in particular through recognized standard contractual clauses or legally recognized data protection mechanisms.
14. Your Rights
You have, in particular, the following rights:
- Access to your stored personal data
- Rectification of inaccurate data
- Erasure of your data
- Restriction of processing
- Withdrawal of consent
- Data disclosure or data portability, to the extent provided for by law
- Complaint to the Federal Data Protection and Information Commissioner (FDPIC)
Anfragen richten Sie bitte an info@chflat.ch.
15. Amendments to this Privacy Policy
We may amend this Privacy Policy at any time if this becomes necessary due to technical, legal, or organizational changes.
The current version published on chflat.ch shall apply in each case.