DE · EN

Privacy policy

Applies to: this applicant portal (rental request form, viewing registration, document upload). Status: draft, see note at the end.

1. Data controller

RESTAY GmbH, Lachenstrasse 15A, 8500 Frauenfeld, Schweiz is responsible for processing the personal data you submit through this portal. For any privacy-related question or request, please contact verwaltung@restay.ch.

2. Purposes and principles

We process your information exclusively to review and process your rental request, in particular to:

• assess whether renting to you is possible and verify your identity;
• organise and manage viewing appointments;
• review deposit and liability insurance records;
• prepare and, where applicable, conclude a rental contract;
• communicate with you throughout the application process.

We only collect the data we need for these purposes and do not use it for other purposes.

3. Categories of personal data processed

• Contact details (name, email address, phone number, address, company name if applying as a company);
• Details of your rental request (desired property/room, desired period, number of people moving in) and the information you voluntarily provide in your introduction, including optional attachments;
• Nationality, a copy of your ID or passport and, for non-Swiss nationals, a copy of your residence permit;
• Records for the rental review (e.g. deposit proof, liability insurance proof) and their status;
• Viewing status and attendance at viewing appointments;
• Internal notes on the status of your request (approval log, status changes); internal comments among the RESTAY team are not shared with you;
• Technical data when using this portal (time, IP address, language setting) for security and operation.

Identity and residence documents. These documents may contain information that can be particularly sensitive (e.g. indications of origin). We therefore handle them with increased care: they are reviewed exclusively and manually by the RESTAY staff responsible, are not analysed by artificial intelligence, are stored in a non-public area and are accessible only to authorised RESTAY staff via the protected internal portal.

4. Source of the data

The data generally comes directly from you (through this portal or your communication with RESTAY). It may be supplemented, where necessary to process your request, by information from bodies you name or instruct (e.g. a debt-collection record or insurance confirmation you provide).

5. Recipients and service providers

Your data is not sold. It is disclosed only where necessary to process your request or where required by law, in particular to:

• the RESTAY staff member(s) responsible for the relevant property and, where applicable, the property owner;
• bodies you name or instruct to issue a record or confirmation;
• authorities, where RESTAY is legally required to do so;
• the following technical service providers (processors), to the extent needed for their service:
  • Hostinger – web hosting, database and email delivery of this portal (data centre: Frankfurt am Main, Deutschland);
  • Google – internal RESTAY staff sign in with a Google account and store dossier summaries and contract documents in Google Drive/Docs. The fonts of this website are served from our own server; no data is sent to Google for this purpose;
  • swisstopo (geo.admin.ch, Switzerland) – address search: while you type an address, the entered address parts are sent to the Swiss federal address register to suggest and verify official addresses;
  • DeepSign (Switzerland) – electronic signing of rental contracts, if used for your contract;
  • Anthropic (USA) – (a) if you use the AI chat assistant shown on this portal: your chat messages are sent to Anthropic to generate answers. Please do not enter sensitive information in the chat. (b) For automatic translation between German and English: listing texts and free-text entries (for example the introduction in your application or comments in your file) may be sent to Anthropic so that RESTAY staff and applicants can read them in their language; only the translated text is stored, in encrypted form. Uploaded documents (e.g. ID copies) are never sent to Anthropic.

6. Processing abroad

The portal is operated at the Hostinger data centre stated above (Frankfurt am Main, Deutschland). Google and Anthropic may process data outside Switzerland, in particular in the USA. Where a country does not have an adequate level of data protection recognised by the Swiss Federal Council, RESTAY relies on suitable safeguards (e.g. standard contractual clauses or the provider's certification under the Swiss-U.S. Data Privacy Framework, where applicable).

7. Retention period

• Rejected or withdrawn applications: if your application is rejected or you withdraw it, your uploaded documents (ID copy, residence permit, attachments) are deleted immediately, and all other data relating to it (dossier, viewing registrations) is deleted automatically 90 days after the rejection or withdrawal.
• Undecided applications: if there has been no activity on your application for 180 days and no decision has been made, it is treated as withdrawn and the data is deleted automatically after a further 90 days.
• Concluded tenancy: the data is kept for the duration of the tenancy. ID copies, residence permits and application attachments are deleted 24 months after the end of the tenancy; ID copies and residence permits are deleted at the latest 5 years after the contract was signed, even if the tenancy is still running. Submitting an ID copy with your application is voluntary. The remaining file (contract, deposit and insurance records, log) is kept for 10 years after the end of the tenancy (limitation period and retention of business records under the Swiss Code of Obligations) and then deleted.
• On request: you can ask us at any time to delete your data earlier, unless a statutory retention obligation or an overriding legitimate interest (e.g. evidence in a legal dispute) prevents it.

8. Data security

RESTAY takes appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. These include encrypted transmission (HTTPS), encrypted storage of personal information in the database, storage of uploaded documents in a non-public area, restricted, account-bound and logged access for RESTAY staff, and the manual-only review of identity documents described above.

9. Cookies and technical data

This portal uses only technically necessary cookies (session and language setting). It does not use tracking or advertising cookies. Technical data (time, IP address) is logged for security purposes, e.g. protection against abusive access attempts.

10. Your rights

Under the Swiss Federal Act on Data Protection you have in particular the right to request information about the personal data processed about you (we will respond within 30 days), as well as its correction, deletion or restriction of processing, the right to data release/portability, and the right to object to processing, to the extent the legal requirements are met. To exercise any of these rights, please contact verwaltung@restay.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

11. No automated individual decision-making

RESTAY does not make any decision about your rental request based solely on automated processing. The assessment and the review of all documents are carried out by RESTAY staff.

12. Changes to this policy

RESTAY may update this privacy policy as needed, e.g. following changes to the processing described above or to applicable law. The version displayed on this page at the time of your visit applies.

Status: October 2026 (draft, pending legal review before this portal goes live).