Privacy and Data Protection Policy

Data Protection Act

Last amended May 31, 2025

1. Important Legal Information

This data protection declaration informs you about the personal data that PrêtImmobilier.ch, its branches, or its various entities (hereinafter jointly and severally referred to as “the Company”), such as its websites or online services (hereinafter referred to as “Sites”), uses and collects, how it is collected, and for what purposes the Company uses and processes it. We recommend that you take the time to read this data protection declaration carefully. If you do not agree with this declaration, please refrain from viewing or attempting to access other pages of the Company’s website.

2. Identity of the Data Controller

The contact details of the person responsible for data protection and processing, within the meaning of this data protection declaration, within the Company are as follows:

• PrêtImmobilier.ch
• Data Protection Officer
• p.a. Ch. de l’Ermitage 20
• CH – 1619 Les Paccots
• questions@pretimmobilier.ch

3. What information do we collect about you?

Generally speaking, when you visit our Websites, the web server automatically records details of your visit (e.g., your IP address, the website from which you are visiting us, the type of browser used, and the website pages you open, including the date and duration of your visit). For more information on this subject, you can consult our “Cookie Policy” document. In addition, you may be required to provide us with other personal data via our websites in the situations described above. This data is only required if you explicitly wish to benefit from the services offered on each of the Sites.

When you voluntarily submit a request through one of our websites, the following generic data may be collected; this data may vary depending on the site visited (see above):

• Last Name
• First Name
• Email
• Mobile Phone Number
• Type of your request
• Additional Information

Request about a mortgage

When you submit a request through our website pretimmobilier.ch, the following additional data may be collected:

• Location of investment
• Amount of your available equity
• Annual Income
• Any other information necessary to analyze your financial situation with a view to obtaining a mortgage

4. Purpose of Data Processing

The Company processes your personal data for the following purposes:

• To contact you to determine if the Company is able to assist you;To provide information, services, or products you have specifically requested;
• To operate, improve, and personalize its own products and services through market research or to display advertisements on the Website that may be of interest to you;
• To communicate regularly with you by email, telephone, or any other messaging service (e.g., WhatsApp) regarding information, services, or products you have specifically requested; and
• To provide you with information about new products, general information, or safety instructions.

The Company does not create an individual personality profile about you.

5. Data Retention Period

Personal data collected from the Websites is retained under the following conditions:

• Personal data is retained by the Company only for the period necessary for the purpose for which it was collected (see above under “What information do we collect about you”).
• Personal data stored on the Sites (hosting servers) are deleted in all cases after a maximum retention period of 12 months.
• Personal data transmitted and received by the Company are deleted in all cases after a retention period of 10 years or immediately upon request from the user or customer, provided that a legal retention period is not applicable. See the section “Right to Information, Rectification, or Deletion of Your Personal Data” for more information on this subject.
• Data strictly related to newsletter subscriptions (any type of distribution such as email, SMS, WhatsApp, or other communication systems), such as first name, last name, email address, and telephone number, are retained indefinitely and may be deleted immediately upon request from the user. See the section “Right to Information, Rectification, or Deletion of Your Personal Data” for more information on this subject.

6. Processing and transmission of your personal data

The cantons, municipalities, consumer credit intermediaries, and software service providers are hereinafter referred to, as the “Competent Bodies,” as appropriate.

The user acknowledges and agrees that the Company may retain the data provided through the forms available on the Websites in accordance with the “Data Retention Period” section.

The Company does not have specific information on the length of time the Competent Bodies retain user data. The Company is not responsible for the processing of your data by the Competent Bodies. If you have any questions about this, we invite you to contact them directly. Their contact details are provided upon request via the contact form on our Websites, by email, or by telephone. All actions relating to the transmission and processing of your data between the Company and the Competent Bodies are carried out in accordance with the Swiss Federal Data Protection Act (FADP).

Real Estate Rental Request

The user agrees, once they have submitted a request through the website les-paccots-relax.ch and their request has been accepted, to provide a copy of the identity document of all visitors so that the Company can notify the relevant authorities of the overnight stays.

Request regarding a mortgage loan

The Company is not a bank, a money lender, or any other mortgage intermediary. The Company only collects requests from users interested in a mortgage loan and forwards them to a relevant authority to provide the service. The user is hereby informed and agrees that their contact information will be forwarded to one of the relevant authorities that has a partnership with the Company (Agence Mendes, Plus-Group, or other service provider in the field), and that it is the latter that will provide the service, not the Company. The Company therefore assumes no responsibility for the potential mortgage loan that may be granted to the user or the procedure for obtaining it.

Online Payment

When processing an online payment on one of our Sites, the user agrees to use the proposed payment service (PayPal or other online payment system, hereinafter referred to as the “Payment Provider”). The access data required for online payment services is entered directly on a secure platform provided by the Payment Provider, via the interface available on our Sites, an interface made available by the Payment Provider. This data is not stored on our site. The management of this payment interface and the associated technical infrastructure are entirely the responsibility of the Payment Provider, which is recognized for its high security standards. Consequently, the Company cannot be held responsible for the user’s use of this payment method.

When you make your purchase through the Payment Provider, your credit card information is securely stored by the Payment Provider. This information is encrypted in accordance with the data security standard established by the Payment Card Industry. Your purchase transaction information is retained by the Payment Provider for the time necessary to complete your order. Once your order is complete, the transaction information is deleted. It is important to note that the Payment Provider has its own privacy policy regarding the data we are required to provide to it for your online transactions. We advise you to carefully read the Payment Provider’s privacy policy to understand how your personal data will be processed. When you leave our Sites or are redirected to a third-party website or application, you are no longer subject to this privacy statement for the Company’s Sites.

PayPal website: https://www.paypal.com/ch/webapps/mpp/ua/privacy-full?locale.x=en_CH

7. Security and Data Protection

We use systems and networks that comply with current technical standards. To ensure the security of your data, we implement technical and organizational measures. These measures are designed to protect your information against loss, destruction, alteration, manipulation, and unwanted access. This includes specific policies, training, technological solutions, security protocols, and encryption systems. However, given that the Internet is an open space, neither we nor our partners or competent authorities can guarantee absolute confidentiality of data during online transmission or complete anonymity when browsing our digital platforms.

Aware of the importance of protecting our users’ data, we are committed to implementing the following measures:

• Encryption: use of SSL/TLS protocols or any new protocols made available by our web service providers to secure exchanges between your browser and our websites; Encryption of all data stored on our websites, through systems provided by our web service providers, to ensure its security in the event of unauthorized access.
• Firewall: Implementation of a series of technological barriers designed to prevent unauthorized access to our infrastructure using tools provided by our web service providers.
• Malware Protection: We use advanced tools provided by our web service providers to detect and prevent malware threats.
• Access Rights Management: A rigorous system that limits access to data to only those members of our team who need it to perform their duties in your interest.
• Two-Factor Authentication: An additional identity verification system to strengthen access security is implemented if this option is made available by our web service providers.
• Ongoing Training: Our employees receive regular training on data security best practices. Constant technological updates: We regularly ensure that all our tools, software, and hardware are updated with the latest security updates; our Sites are regularly updated with the latest versions of the tools available to us.
• Regular backups: Regular backups of all data are performed to prevent any loss.
• Strict security policy: Each member of our team is required to comply with data protection regulations.
• Proactive vulnerability management: We apply recommended patches as soon as a vulnerability is detected by our web service providers.

8. Authorized Service Providers and Data Transfers to Countries Other than Switzerland or the European Union

The Company informs you that it uses qualified service providers to assist in the collection and management of the information you share with us. These service providers may operate outside Switzerland or the European Union and have access to the data collected through various tools and forms on our Sites.

The Company wishes to point out that, while it strives to select reliable and recognized service providers for data processing, it cannot be held responsible for the manner in which these third parties manage or secure the shared information. In particular, the Company works with the service providers listed below, who have access to certain information for the purposes of the services they provide. Users are advised to review the privacy policies of these service providers to better understand how their data is used. However, the Company expressly disclaims any liability for any failure, loss of data, or other incident related to these service providers.

• https://zapier.com/legal/data-privacy
  https://wpforms.com/privacy-policy/
  https://elementor.com/about/privacy/

9. General Disclaimer

The Company is not liable for any damage or loss of data, whether direct or indirect, resulting from access to its Sites, the use of the information on its Sites or software, or the inability to use the information on its Sites or software. The Company, including its branches, Sites, site operators, directors, managers, employees, collaborators and shareholders, are not liable for any damages or losses caused by errors, whether technical or otherwise, transmission problems, overloads, interruptions (including for maintenance), delays in the dissemination of information, incompatibilities between the sites and the user’s hardware or software, malfunctions, malicious acts such as viruses or intrusions, or other problems originating from telecom or network service providers or competent bodies. The Company’s liability for acts such as hacking, actions aimed at blocking telecommunications services, such as mass emailing or denial of service attacks, is also excluded.

10. Right to Information, Rectification, or Deletion of Your Personal Data

The Company gives you the ability to manage and control the personal data you provide to us. To exercise the rights set out below, visit the contact page of the website you are visiting and ask us any questions related to this topic.

Accessing Your Data

You may request to view the personal data we hold about you. To ensure the confidentiality and security of your data, you will be asked to prove your identity by providing a copy of a valid ID and/or other information necessary to identify you, such as your first and last name, telephone number, postal address, email address, or any information deemed necessary to protect your identity. Excessive or redundant requests may be refused. To facilitate your process and if you wish to contact us by mail, here is the letter template proposed by the CNIL: https://www.cnil.fr/fr/modele/courrier/exerce-son-droit-dacces

Modifying and Updating Your Data

If your data proves to be incorrect, outdated, or incomplete, you may request its rectification. You also have the option to correct instructions regarding the management of your data after your death. In this context, the heirs may request updates or acknowledge the death. To facilitate your process and if you wish to contact us by mail, here is the letter template proposed by the CNIL: https://www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-inexactes

Refusing the Use of Your Data

You may object to the use of your data, either for personal reasons or to prevent its use in commercial activities. To facilitate your process, and if you wish to contact us by post, here is the letter template proposed by the CNIL: https://www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet

Response times

We undertake to process and respond to your requests regarding your personal data within a maximum of 10 business days of receipt.

11. Complaint to the competent authority

If you believe that the Company is not adequately fulfilling its responsibilities regarding your personal information, you have the right to file a complaint or request with the appropriate body. In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC) is responsible for these matters. You can submit a request online via this link: https://www.edoeb.admin.ch/edoeb/fr/home.html

12. Amendments to this Privacy Policy are possible at any time.

The Company reserves the right to amend this Privacy Policy at any time. The second line of this Privacy Policy indicates the date of the last update.

13. Jurisdiction, Applicable Law, Partial Invalidity, and Language

The competent court for any dispute arising from or related to this Privacy Policy is the domicile of the Company’s registered office. However, the Company reserves the right to bring the dispute before any other court to which you would normally be subject.

The Privacy Policy on the Company’s website is governed by the Swiss Federal Act on Data Protection (FADP). Furthermore, for our activities concerning residents or citizens of the European Union, we also comply with the General Data Protection Regulation (GDPR) in force in Europe, as of the date of our knowledge. The Company is committed to respecting the principles and obligations set out in these two legislative frameworks, thereby ensuring robust protection of our users’ personal data, regardless of their geographic location, to the best of our ability.

If any provision of this Privacy Policy is found to be invalid, unsuitable, or unenforceable, this will not affect the validity or enforceability of the remaining provisions. The relevant provision will then be replaced by a provision that, while valid and enforceable, respects the intent and purpose of the original provision as closely as possible.

Only the French version of this Privacy Policy is authoritative.

14. References and Useful Links

The Company is not responsible for the validity of the links below, which were valid at the time of writing.

• Conditions générales d’utilisation de ce site : https://pretimmobilier.ch/en/terms-and-conditions/
• Politique de la Société relatives cookies : https://pretimmobilier.ch/en/cookies-policy/
• Loi fédérale sur la protection des données (LPD) : https://www.fedlex.admin.ch/eli/cc/1993/1945_1945_1945/fr
• Préposé fédéral à la protection des données et à la transparence (PFPDT) : https://www.edoeb.admin.ch/edoeb/fr/home.html
• Règlement général sur la protection des données (RGPD) : https://eur-lex.europa.eu/FR/legal-content/summary/general-data-protection-regulation-gdpr.html
• Commission nationale de l’informatique et des libertés (CNIL) : https://www.cnil.fr/fr/
• Comité européen de la protection des données (EDPB) : https://edpb.europa.eu/edpb_fr