Data privacy

  • Privacy Policy Equans Switzerland Facility Management AG – Business Unit MIBA

  • General Information on the Privacy Policy

  • The protection of your personal data (hereinafter “data”) and your privacy is very important to us. We process your data in accordance with the revised Swiss Federal Act on Data Protection (FADP), the Data Protection Ordinance (DPO), and—where applicable—the EU General Data Protection Regulation (GDPR).

    Personal data means all information relating to an identified or identifiable person (e.g. name, address, email address).

    By “processing” we mean any handling of such data, in particular the collection, storage, use, disclosure, and deletion of data.

    We process personal data transparently, for specific purposes, and in a proportionate manner, and only for as long as is necessary to fulfil our tasks, contractual obligations, or legal requirements.

    This privacy policy explains how we process your data when you use our services, visit our website, contact us, or are in a contractual relationship with us.

    Additional information may be provided in separate privacy notices, consent declarations, or contractual documents. The most current version of this privacy policy shall always apply. We reserve the right to amend it as necessary in order to reflect legal or organisational changes.

  • Controller Responsible for Data Processing

  • The following responsible parties are involved in the processing of your personal data:

     

    • Equans Switzerland Facility Management AG, Business Unit MIBAG Property Managers, Brandstrasse 24, 8952 Schlieren
    • The respective property owners, their representatives, as well as companies associated with the owner.

     

    The privacy policies of the website and online channel service providers are available on the websites of these companies. Wincasa AG has no influence over these privacy policies and cannot provide information about their data processing.

     

    Each of these parties may independently be considered a data controller under data protection law.
You can generally direct your data protection inquiries or concerns to any responsible party. For efficient handling, we recommend contacting the following central point of contact:

     

    Equans Switzerland AG

    Legal & Compliance
    Reference: Data Protection
    Förrlibuckstrasse 150
    8005 Zürich Schlieren

     

    Or to our data protection advisory e-mail address:

    [email protected]

  • Purpose and Legal Basis of Data Processing

  • Your personal data is processed to ensure the management and administration of your tenancy and to fulfill all related legal, contractual, and administrative obligations.
    Processing is based on the following legal grounds pursuant to Art. 31 FADP and (where applicable) Art. 6 GDPR:

     

    • Performance of a contract (conclusion, management, adjustment, or termination of the tenancy)
    • Compliance with legal obligations, e.g., under tenancy, tax, energy, or registration laws
    • Protection of legitimate interests of the controllers or third parties, in particular:
      • efficient property management and maintenance
      • credit checks and debt collection
      • assertion of legal claims and defense in disputes
      • ensuring IT and data security
      • ensuring access and building security
      • optimization of our services and systems
  • Processed Categories of Personal Data

  • In the context of using our services, only the following personal data is collected and processed:

     

    • Technical data: This includes in particular the IP address, date and time of access, information about the browser used and its version, details about the operating system, as well as the referrer URL (the previously visited website).
    • Log data: This includes in particular server log files, which are automatically recorded with each access to our systems.

     
    The collection and processing of this data is carried out exclusively for the purpose of ensuring system security, stability, as well as for analyzing and improving our service offerings.

  • Recipients of Personal Data

  • We process your personal data for the purpose of concluding or managing the rental agreement with your landlord.

     

    We process your personal data to protect our overriding interests as well as the overriding interests of your landlord. Your data will – if necessary – be shared with the following categories of recipients:

     
    a) Responsible third parties:

    • Property owners and their representatives
    • Insurance companies, banks, financial institutions
    • Authorities and courts
    • Debt collection agencies, lawyers, and notaries
    • Credit reporting agencies and compliance service providers
    • Potential buyers of the property

     

    b) Processors (service providers):

    • IT providers (e.g., GARAIO REM AG, Creanet Internet Service AG)
    • Craftsmen, architectural offices, facility management partners
    • Security and surveillance companies
    • Companies for signage and property maintenance
    • Property valuation and market research firms
    • Accounting, archiving, and administrative service providers

    These service providers are contractually obliged pursuant to Art. 9 FADP to process personal data exclusively according to our instructions and in compliance with legal data protection requirements.

  • Data Processing Abroad

  • As a rule, data processing takes place within Switzerland.
If data is exceptionally transferred to recipients in countries that do not provide an adequate level of data protection recognized by the Federal Council, we ensure that appropriate safeguards are in place in accordance with Art. 16 FADP (e.g., EU standard contractual clauses, Binding Corporate Rules, or the explicit consent of the data subject).

  • Retention Period

  • Your personal data will only be retained as long as necessary to fulfill the purpose or as required by law (e.g., 10 years according to the Swiss Code of Obligations for accounting records).

    After these periods expire, your data will be securely deleted, anonymized, or archived, provided there are no overriding legitimate interests to the contrary.

  • Rights of Data Subjects

  • Pursuant to Art. 25–29 FADP (and Art. 12 ff. GDPR, where applicable), you have the following rights in particular:

     

    • Right of access: You can request information on whether and which data about you is being processed.
    • Right to rectification: You can have incorrect or incomplete data corrected.
    • Right to erasure: You can request the deletion of your data, provided no legal or contractual obligations prevent it.
    • Right to restriction or objection: You can, under certain circumstances, object to processing.
    • Right to data portability: You can request an electronic copy of certain data.

     

    To exercise these rights, please contact us in writing at: [email protected]
    We reserve the right to request a proof of identity to protect against misuse.

  • Data Security

  • We implement all technical and organizational measures (TOMs) in accordance with Art. 8 FADP to protect your personal data against unauthorized access, loss, misuse, or manipulation. These measures are regularly reviewed and updated according to the state of the art.
Our employees are obliged to maintain confidentiality and data protection.

  • Automated Individual Decisions / Profiling

  • As a rule, no automated decision-making or profiling takes place in connection with tenancy agreements.
Should an automated assessment (e.g., credit check) be conducted, you will be informed beforehand and have the right to request a human review of the decision.

  • Changes to This Privacy Policy

  • We reserve the right to amend this privacy policy at any time, particularly in the event of legal changes, new data processing activities, or technological developments. We will inform you of any significant changes by e-mail, by post, or via our online channels.

     

    Last updated: October 2025