Privacy policy

The data controller is Nostromos SA, which operates the CasaDeal brand, with its registered office in Geneva, Switzerland. For any question regarding data protection, you can write to contact@casadeal.ch.

User account: your email address and your password, the latter being stored as a hash by the Supabase authentication service. CasaDeal never has access to your password in clear text.

Contact requests on a listing: your name, your email address, your telephone number (optional) and the message you write. This information is transmitted to the relevant agency or advertiser only with your explicit consent, given via the checkbox on the form.

Consent preferences: a record of your agreement, in order to demonstrate that your choices are respected.

Technical logs: technical data (for example IP address, browser type, timestamp) generated automatically for the security and proper functioning of the service.

We process your data to create and manage your account, to connect buyers and advertisers, to respond to your requests, to ensure the security of the platform, and to improve our services.

Depending on the case, processing is based on your consent (for example to transmit a contact request to an advertiser), on the performance of the user agreement, or on our legitimate interest in operating and securing the platform.

Account data is kept for as long as your account is active, then deleted or anonymised within a reasonable period after its closure.

Contact requests are kept for as long as necessary for the advertiser to handle your request, then for a limited period for evidentiary and follow-up purposes.

Technical logs are kept for a short period, proportionate to security needs.

To provide the service, we rely on carefully selected processors: Vercel (website hosting), Supabase (database and authentication) and Resend (sending transactional emails). These providers act only on our instructions and are bound by confidentiality and security obligations.

When you submit an application for a rental property, the details of your request (identity, contact details, message) are transmitted to the relevant agency or advertiser, as with any contact request.

If you tick the optional box provided for this purpose, your contact details (name, e-mail address, telephone) are also transmitted to our rent guarantee partner so that they can contact you about a deposit-free rent guarantee. This transmission is based exclusively on your consent, is optional and can be revoked at any time with effect for the future by writing to contact@casadeal.ch.

CasaDeal only transmits your data to the partner, who is clearly identified as such on the form. CasaDeal does not provide insurance advice, does not compare or rank offers, and may receive a flat-rate fee from the partner for this introduction. The partner then processes your data under its own responsibility, in accordance with its own privacy policy.

The online estimate is calculated locally, in your browser, and requires no personal data. The detailed report is sent on the basis of your email address alone and is never conditional on an introduction. The introduction, which is always optional, consists in forwarding your request solely to the named providers you have chosen (1 to 3), together with the creation of a proof of your consent.

The recipients of your request are exclusively the providers you have chosen, named at the time of collection. These providers remunerate the platform at a fixed price per forwarded request; the provider listing criteria are published on the dedicated page of the website. They are contractually prohibited from reselling your data or from using it for any purpose other than handling your request.

The data processed comprises the contact details you declare, the details of your project, your IP address and a session identifier (creation of the proof of consent), as well as the results of the technical validation of your email address and telephone number.

Requests that have not been forwarded are purged after 90 days. The contact details of forwarded requests are kept for 3 years after the last contact. Consent receipts are pseudonymised at the end of these periods, then kept for 5 years, or 10 years for the contractual part, exclusively for evidentiary purposes.

You have the rights of access, rectification, erasure and objection described below, as well as the right to withdraw your consent at any time, with immediate effect, via the link in each email: from the moment of withdrawal, no further transmission to any provider takes place. The status of your consent can be checked by the provider before each contact.

When a request is submitted, a technical session cookie with a lifetime of 24 hours is set in order to correlate the proof of consent. No audience measurement tool is active on the consent and delivery pages.

This processing is based on your explicit consent, in accordance with the Swiss Federal Act on Data Protection (FADP).

We measure the website's audience with Vercel Analytics and Plausible, two privacy-friendly tools that do not use third-party advertising cookies and do not build any individual profile.

The only cookies we set are technical cookies: NEXT_LOCALE, which remembers your language choice, and, when you submit a request, an anonymous 24-hour session cookie used solely as proof of consent. Neither is used for any advertising purpose.

Vercel Inc. and Resend process data in the United States; these transfers are governed by the standard contractual clauses incorporated in their data processing agreements, in accordance with Articles 16 and 17 of the Swiss FADP. Supabase hosts the data in the European Union, whose level of protection is recognised as adequate by the Federal Council.

In accordance with the revFADP, you have the right of access, rectification, erasure, objection and data portability regarding your personal data. You can exercise these rights by writing to contact@casadeal.ch.

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), the competent Swiss data protection authority.

We may update this policy to reflect legal or technical developments. The version in force is the one published on this page.