Skip to content

Legal

Privacy

Protecting your personal data is important to us. We process personal data in accordance with the Swiss Data Protection Act (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for processing your personal data is Andriollo Consulting (Benjamin Andriollo), Wallenhofring 24, 5040 Schöftland. For any privacy-related questions, contact us at datenschutz@andriollo.ch.

2. Processing via the contact form

When you contact us via the contact form, we collect the data you provide: name, email address, phone number and – if provided – subject and message.

This information is stored in a database on our server to process your request and is also sent to us by email. As we contact you by phone, providing a phone number is required.

Enquiries about listings and viewing appointments: if you enquire about a property or book a viewing, we additionally process the property concerned, the chosen appointment and the number of persons. You receive a confirmation by email with a link to cancel the appointment at any time. Your details are passed to the contact person responsible for the property; we only share them with the owner where this is necessary for letting or selling. The “Open in maps” link leads to Google Maps – data is only transmitted there when you click the link.

3. Email communication and AI-assisted processing

When you send us an email, we store it with sender, recipients, subject, content and attachments in our mailbox (OVH) and in our internal system. There it is filed in a searchable way and assigned as an internal task to the responsible person so that your request is handled promptly.

To detect spam and phishing and to summarise and route incoming emails, we use the AI service of OpenAI (for customers in Switzerland and the EEA: OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). We transmit sender, recipients, subject, text and the names of any attachments – not the attachments themselves. Processing in the USA is possible; it is based on appropriate safeguards (standard contractual clauses or the Data Privacy Framework). According to OpenAI, data submitted via its API is not used to train AI models and is retained for at most 30 days for abuse monitoring.

The AI does not take decisions with legal effect for you: emails identified as spam are not deleted but moved to a separate folder and can be restored by us at any time; replies are always written and sent by our staff. The legal basis is our legitimate interest in efficient and secure handling of our correspondence (or Art. 6(1)(f) GDPR, where applicable). You may object to this processing – in that case please contact us by phone or say so in your email.

We keep emails for as long as necessary to handle your request or as required by statutory retention obligations (e.g. for business correspondence).

4. Purpose and legal basis

We process this data exclusively to answer and handle your request and, where applicable, to initiate a contractual relationship. The legal basis is your consent and our legitimate interest in responding to enquiries (or Art. 6 GDPR where applicable).

5. Hosting and server log files

Our website and database are operated at our hosting provider OVH. When the website is accessed, the server automatically processes technical data (e.g. IP address, date and time of access, page requested, browser type) in log files. This serves the secure and stable operation of the website.

6. Cookies

The public website does not use any tracking or marketing cookies. In protected areas (administration, customer portal), technically necessary session cookies are set solely for login and security; they expire upon logout or when the browser is closed.

7. Disclosure to third parties

Your data is not sold or passed on to third parties for advertising purposes. It is transferred only to our hosting provider (processor) to the extent necessary, and where we are legally obliged to do so.

In addition, the content of incoming emails is transmitted to OpenAI (as processor) for the processing described in section 3.

8. Retention and deletion

We keep your data only for as long as necessary for the stated purposes or as required by statutory retention periods, after which it is deleted. You may request deletion of your enquiry data at any time.

9. Data security

Data is transmitted encrypted via HTTPS (TLS). We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

10. Your rights

You have the right to access, rectification, deletion, restriction of processing, withdrawal of consent and data portability. To exercise these rights, contact us at datenschutz@andriollo.ch.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a competent data protection authority.

11. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements. The version published on this page applies.