Privacy Policy

Responsible for data processing:

Bence Bendegúz Szilasi

c/o F2BII E-Commerce#233

Hintergoldingerstrasse 30

8638 Goldingen

Switzerland

Email: immobilien.cashflow.schweiz@gmail.com

This Privacy Policy provides information about the collection, processing, and use of personal data in connection with the use of IceShark Immobilien. It applies to all areas of the website and the paid membership areas.

Data processing is based on the Swiss Federal Act on Data Protection (nDSG) and is necessary for the performance of our contractual obligations according to the Terms and Conditions (T&C). For jurisdiction and applicable law, the provisions in our T&C apply.

If you enter data on behalf of third parties (in particular property owners), you confirm that you are authorized to do so and that all necessary consents have been obtained.

We collect and process in particular the following categories of personal data: Account data (in particular email address, password in encrypted form, name, billing address), property data (in particular data you enter about properties including purchase price, property address, financing data in particular equity ratio and interest rate, rent, and key figures), personal financial data (in particular marginal tax rate), payment data (in particular Stripe Customer ID, subscription status, payment history, payment method type, and last 4 digits of card number), whereby complete credit card data is stored exclusively by Stripe and is not processed on our servers, as well as technical data (in particular IP address, browser type, operating system, login timestamps for security purposes).

Your data is used in particular for providing and managing your account, storing and calculating your property data, processing payments and subscriptions via Stripe, sending transactional emails (in particular registration confirmation, password reset, payment confirmations), sending marketing communications (in particular offers and information about new features) if you have given your consent, and ensuring the security and stability of the platform.

To provide our services, we work in particular with the following service providers: Stripe Ireland Ltd. (payment processing, servers in the EU/Ireland, more information at https://stripe.com/privacy), Vercel Inc. (hosting and infrastructure, servers in the EU/Frankfurt), Neon (database hosting, servers in the EU/Frankfurt, more information at https://neon.tech/privacy-policy), Mailgun Technologies Inc. (email delivery, servers in the EU/Dublin), Hostpoint AG (email infrastructure, servers in Switzerland), and F2BII E-Commerce Dietziker (business address service for postal delivery, Switzerland). These service providers process data exclusively on our behalf and are contractually obligated to comply with data protection regulations. Your data is not shared with any other third parties.

All data processing takes place on servers in Switzerland and the European Union. No data is transferred to third countries.

Account and property data are stored until deletion of your account, but no longer than the applicable statute of limitations for claims, and are completely removed within 30 days after deletion. Payment data is retained according to legal retention requirements for 10 years (OR Art. 958f). Technical logs (IP addresses) are stored for 90 days for security purposes.

We implement appropriate technical and organizational measures for data security in accordance with nDSG Art. 8.

We use only technically necessary cookies to provide login functionality (session cookie). These cookies are required for the operation of the platform and do not require consent.

We do not use tracking cookies or third-party analytics tools.

No automated decisions or profiling measures are performed. All calculations on the platform are based exclusively on the data you enter and mathematical formulas.

According to nDSG, you have the following rights: You can request free information about the personal data we store about you, including their origin and recipients as well as the purpose of data processing (right of access, Art. 25 nDSG). You can request the correction of inaccurate data (right to rectification, Art. 32 Para. 1 nDSG). You can delete your account and all associated data at any time via the account settings, unless legal retention requirements apply (right to erasure, Art. 32 Para. 2 lit. a nDSG). You can request the restriction of data processing, in particular if you dispute the accuracy of the data or if a complaint to the FDPIC is pending (right to restriction, Art. 32 Para. 2 lit. b nDSG). You can object to data processing at any time (right to object, Art. 30 Para. 2 lit. b nDSG). You can receive your data in a structured, machine-readable format (JSON) upon request via email to immobilien.cashflow.schweiz@gmail.com (data portability, Art. 28 nDSG). You can withdraw granted consents (in particular for marketing communications) at any time with effect for the future. You have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch.

The exercise of your rights may conflict with contractual obligations and may result in consequences such as early termination of the contract or cost implications. We will inform you in advance in such cases. We reserve the right to apply applicable legal restrictions if we are required to retain or process certain data, if we have an overriding interest, or if we need the data to enforce our rights. The right of access can be exercised free of charge once per year. For additional requests, we reserve the right to charge a reasonable fee, about which you will be informed in advance.

For questions about data protection or to exercise your rights, please contact us at:

Email: immobilien.cashflow.schweiz@gmail.com

We will respond to your request within 30 days. To protect your data, we reserve the right to verify your identity before complying with your request. Your registered email address serves as proof of identity.

We reserve the right to update this Privacy Policy as necessary to comply with current legal requirements or to reflect changes to our services. The current version is always available on our website. We will notify you by email of any material changes.

This Privacy Policy is available in German and English. In case of discrepancies between the language versions, the German version shall prevail.