Privacy Policy Equans Switzerland Facility Management AG – Business Unit MIBA
General Information on the Privacy Policy
The protection of your personal data (hereinafter “data”) and your privacy is very important to us. We process your data in accordance with the revised Swiss Federal Act on Data Protection (FADP), the Data Protection Ordinance (DPO), and—where applicable—the EU General Data Protection Regulation (GDPR).
Personal data means all information relating to an identified or identifiable person (e.g. name, address, email address).
By “processing” we mean any handling of such data, in particular the collection, storage, use, disclosure, and deletion of data.
We process personal data transparently, for specific purposes, and in a proportionate manner, and only for as long as is necessary to fulfil our tasks, contractual obligations, or legal requirements.
This privacy policy explains how we process your data when you use our services, visit our website, contact us, or are in a contractual relationship with us.
Additional information may be provided in separate privacy notices, consent declarations, or contractual documents. The most current version of this privacy policy shall always apply. We reserve the right to amend it as necessary in order to reflect legal or organisational changes.
Controller Responsible for Data Processing
The following responsible parties are involved in the processing of your personal data:
The privacy policies of the website and online channel service providers are available on the websites of these companies. Wincasa AG has no influence over these privacy policies and cannot provide information about their data processing.
Each of these parties may independently be considered a data controller under data protection law. You can generally direct your data protection inquiries or concerns to any responsible party. For efficient handling, we recommend contacting the following central point of contact:
Equans Switzerland AG
Legal & Compliance
Reference: Data Protection
Förrlibuckstrasse 150
8005 Zürich Schlieren
Or to our data protection advisory e-mail address:
Purpose and Legal Basis of Data Processing
Your personal data is processed to ensure the management and administration of your tenancy and to fulfill all related legal, contractual, and administrative obligations.
Processing is based on the following legal grounds pursuant to Art. 31 FADP and (where applicable) Art. 6 GDPR:
Processed Categories of Personal Data
In the context of using our services, only the following personal data is collected and processed:
The collection and processing of this data is carried out exclusively for the purpose of ensuring system security, stability, as well as for analyzing and improving our service offerings.
Recipients of Personal Data
We process your personal data for the purpose of concluding or managing the rental agreement with your landlord.
We process your personal data to protect our overriding interests as well as the overriding interests of your landlord. Your data will – if necessary – be shared with the following categories of recipients:
a) Responsible third parties:
b) Processors (service providers):
These service providers are contractually obliged pursuant to Art. 9 FADP to process personal data exclusively according to our instructions and in compliance with legal data protection requirements.
Data Processing Abroad
As a rule, data processing takes place within Switzerland. If data is exceptionally transferred to recipients in countries that do not provide an adequate level of data protection recognized by the Federal Council, we ensure that appropriate safeguards are in place in accordance with Art. 16 FADP (e.g., EU standard contractual clauses, Binding Corporate Rules, or the explicit consent of the data subject).
Retention Period
Your personal data will only be retained as long as necessary to fulfill the purpose or as required by law (e.g., 10 years according to the Swiss Code of Obligations for accounting records).
After these periods expire, your data will be securely deleted, anonymized, or archived, provided there are no overriding legitimate interests to the contrary.
Rights of Data Subjects
Pursuant to Art. 25–29 FADP (and Art. 12 ff. GDPR, where applicable), you have the following rights in particular:
To exercise these rights, please contact us in writing at: [email protected]
We reserve the right to request a proof of identity to protect against misuse.
Data Security
We implement all technical and organizational measures (TOMs) in accordance with Art. 8 FADP to protect your personal data against unauthorized access, loss, misuse, or manipulation. These measures are regularly reviewed and updated according to the state of the art. Our employees are obliged to maintain confidentiality and data protection.
Automated Individual Decisions / Profiling
As a rule, no automated decision-making or profiling takes place in connection with tenancy agreements. Should an automated assessment (e.g., credit check) be conducted, you will be informed beforehand and have the right to request a human review of the decision.
Changes to This Privacy Policy
We reserve the right to amend this privacy policy at any time, particularly in the event of legal changes, new data processing activities, or technological developments. We will inform you of any significant changes by e-mail, by post, or via our online channels.
Last updated: October 2025