Privacy
This text is a translation. Only the German version is binding.
As of 29 Oct 2026
Who is responsible
Faviens GmbH, Stäblistrasse 1, 8006 Zurich (info@cooperatives.ch) is responsible for processing your personal data on cooperatives.ch. This notice follows the Swiss Federal Act on Data Protection (FADP) and, for people in the EU, the General Data Protection Regulation (GDPR).
Without an account
Visiting the site without an account gives us no personal data. There is no analytics, no tracking, no advertising and no cookies. Your profile for «Suits me», your shortlist and your language stay in your browser's storage (localStorage) and are never sent. Google Cloud's hosting services (Firebase Hosting, Cloud Run) briefly record, for technical reasons, which page was requested, when and from which IP address.
With an account
For an account we process your e-mail address, your language, whether and until when your subscription is paid, your logins (as a fingerprint that cannot be reversed) and when you asked for login links, to prevent abuse. This data is kept in Google Cloud Firestore in Zurich (europe-west6). Logging in sets a single, technically necessary cookie (__session), valid for 30 days. If you switch on the alert for new free flats, we store the cantons, rooms and highest rent you chose, which flats we have mailed you (for a month) and when (for a day), so that none comes twice. Every alert mail has a link that switches the alert off without logging in.
Who processes data for us
Google Cloud (Google Cloud EMEA Ltd., Ireland) runs hosting and the database in Zurich. Scaleway SAS in Paris, France, sends the login and alert mails and receives your e-mail address and the mail's content for this. Stripe (Stripe Payments Europe Ltd., Ireland) handles payments; card data and TWINT go only to Stripe, we receive the payment status and the invoices. Mail to us is received by Microsoft 365 (Microsoft Ireland Operations Ltd.). Your data is not sold, not used for advertising and not given to an AI model.
Disclosure abroad
According to the Federal Council, France and Ireland ensure adequate data protection. Stripe and Microsoft may also process data in the USA; this happens under the Swiss-U.S. Data Privacy Framework or standard contractual clauses.
How long
Login links are valid for 15 minutes and are then deleted, logins after 30 days. You can delete your account yourself under «Account»; cancel a running subscription first. We also delete it if you ask by e-mail, and on our own when it has had neither a subscription nor a login for two years. With the account we delete your logins and your customer data at Stripe. We keep accounting records, including the invoices at Stripe, for ten years as the law requires.
Your rights
You can ask what data we hold about you, have it corrected or deleted and receive a copy: an e-mail to info@cooperatives.ch is enough. You can complain to the Federal Data Protection and Information Commissioner (FDPIC), in the EU to the supervisory authority of your country.