CasaDeal

Privacy policy

This policy explains which personal data CasaDeal processes, for what purposes and in what manner, in accordance with the revised Swiss Federal Act on Data Protection (revFADP), in force since September 2023.

Last updated: July 2026

Data controller

The data controller is Nostromos SA, which operates the CasaDeal brand, with its registered office in Geneva, Switzerland. For any question regarding data protection, you can write to contact@casadeal.ch.

Data we process

User account: your email address and your password, the latter being stored as a hash by the Supabase authentication service. CasaDeal never has access to your password in clear text.

Contact requests on a listing: your name, your email address, your telephone number (optional) and the message you write. This information is transmitted to the relevant agency or advertiser only with your explicit consent, given via the checkbox on the form.

Consent preferences: a record of your agreement, in order to demonstrate that your choices are respected.

Technical logs: technical data (for example IP address, browser type, timestamp) generated automatically for the security and proper functioning of the service.

Purposes of processing

We process your data to create and manage your account, to connect buyers and advertisers, to respond to your requests, to ensure the security of the platform, and to improve our services.

Legal bases

Depending on the case, processing is based on your consent (for example to transmit a contact request to an advertiser), on the performance of the user agreement, or on our legitimate interest in operating and securing the platform.

Retention periods

Account data is kept for as long as your account is active, then deleted or anonymised within a reasonable period after its closure.

Contact requests are kept for as long as necessary for the advertiser to handle your request, then for a limited period for evidentiary and follow-up purposes.

Technical logs are kept for a short period, proportionate to security needs.

Processors

To provide the service, we rely on carefully selected processors: Vercel (website hosting), Supabase (database and authentication) and Resend (sending transactional emails). These providers act only on our instructions and are bound by confidentiality and security obligations.

Audience measurement and cookies

We measure the website's audience with Vercel Analytics and Plausible, two privacy-friendly tools that do not use third-party advertising cookies and do not build any individual profile.

The only cookie we set is a functional cookie, NEXT_LOCALE, which remembers your language choice. It is not used for any advertising purpose.

Transfers outside Switzerland

Some of the processors mentioned above may process data outside Switzerland. These transfers are limited to the providers listed and are governed by appropriate safeguards, in particular standard contractual clauses ensuring an adequate level of protection.

Your rights

In accordance with the revFADP, you have the right of access, rectification, erasure, objection and data portability regarding your personal data. You can exercise these rights by writing to contact@casadeal.ch.

Supervisory authority

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), the competent Swiss data protection authority.

Changes

We may update this policy to reflect legal or technical developments. The version in force is the one published on this page.