Privacy Policy

immoGo ag, Sonnefeld 30, 6017 Ruswil, Switzerland · UID CHE-190.010.467 · Email: datenschutz@immogo.ch

This privacy policy applies to the website immogo.ch and all related services (together the «Platform»). It explains which personal data we process, for what purposes, to whom we disclose it and what rights you have.

Account data: last name, first name, date of birth, nationality, residential address, email address, phone number, password (stored only as a hash), language.

Identity and residence data: photos of your passport or identity card (front and back), a short face video or selfie for comparison with the ID photo, proof of residence (e.g. residence certificate from your municipality, tax bill or utility bill), for foreign nationals a copy of the foreign national permit including the permit category, the result of the screening against sanctions and PEP lists, and the result and date of the check (section 4).

Investment and transaction data: shares subscribed per property company, subscription amounts, subscription status, share register entries, bookings on the income account, payouts, payout account (IBAN), referral code and any resulting credits.

Payment data: the Platform transmits card details directly to our payment service provider. We do not store full card numbers ourselves, only the card brand, the last four digits, the reservation status and the payment service provider's reference.

Contract and legal documents: the versions of the terms and conditions, articles of association, subscription form and this privacy policy that you accepted, with the time of acceptance.

Communication data: emails we send you (confirmations, security notices, sign-in codes), delivery status and your enquiries to us.

Technical and security data: IP address, date and time of access, browser type and operating system, sign-in and security events (successful and failed sign-ins, password changes, locks) and website error reports.

Opening and managing your account, sign-in and protecting the account against unauthorised access.

Checking your identity and residence before your first subscription (section 4), in particular to comply with the Federal Act on the Acquisition of Real Estate by Persons Abroad (Lex Koller) and to prevent fraud and money laundering.

Processing subscriptions, maintaining the share register of the property companies, crediting income to the income account and making payouts.

Processing and securing payments, preventing misuse.

Preparing confirmations, statements and legally required documents.

Communicating with you about your account and your holdings. We only send marketing messages, such as notices of new properties, if you have consented; you can withdraw your consent at any time in your profile or via the unsubscribe link.

Operating, securing and developing the Platform, error analysis.

Complying with legal obligations (in particular retention under the Swiss Code of Obligations) and protecting our rights.

We process your data because this is necessary for the contract with you or to comply with legal obligations, or because we have an overriding legitimate interest (security, fraud prevention, operations). For the face comparison during the identity check we obtain your explicit consent.

Before your first subscription we check your identity and residence once.

Identity document: you take photos of your passport or identity card. Our service provider Sumsub (section 5) checks the authenticity of the document (security features, machine-readable zone) and compares name, date of birth and nationality with your account details.

Face comparison: you record a short video or selfie. Sumsub compares it with the photo in the ID document and checks that a live person is in front of the camera. This involves processing biometric data; we obtain your explicit consent beforehand. The face data is deleted by the service provider once the check is complete, at the latest after 30 days. We only keep the result (match / no match).

Residence in Switzerland or Liechtenstein: with a Swiss or Liechtenstein passport or identity card, residence is considered proven if the address given is plausible. Everyone else uploads their foreign national permit (category B, C or L; a cross-border commuter permit G does not count as residence in Switzerland) or, if there is no permit, a proof of address (residence certificate from the municipality, tax bill, utility bill, not older than three months). The permit category is checked manually by immoGo ag staff.

Sanctions and PEP lists: Sumsub screens your name against international sanctions lists and lists of politically exposed persons. A match leads to a manual review by us, not to an automatic rejection.

Decision: you are informed of the result on the Platform and by email. If anything is unclear, we may request further documents. If there is reasonable suspicion of forgery, we additionally review the document manually and may reject the check; a rejection means that you cannot subscribe to shares on the Platform.

No automated individual decision: every rejection is reviewed and confirmed by a person at immoGo ag.

ID and residence documents are stored encrypted in Switzerland and are only used for the check and to comply with legal obligations.

We only disclose personal data to the following recipients to the extent necessary for the purposes stated:

Exoscale (Akenes SA, Lausanne): hosting of the Platform, database and file storage including ID copies and documents. Location: Switzerland (Zurich data centre).

Sumsub (Sum and Substance Ltd., London): identity check (authenticity of ID documents, face comparison, comparison with account details, review of proof of address, sanctions and PEP lists). Location: EU (Germany); face data is deleted once the check is complete.

Stripe (Stripe Payments Europe Ltd., Dublin, and Stripe Inc., USA): card payments, reservations, Apple Pay and Google Pay, fraud prevention. Location: Ireland / USA.

Resend (Resend Inc., USA): sending our emails (confirmations, sign-in codes, security notices); transmitted are email address, name and email content, without amounts or passwords, and for security notices also the country of the requesting IP address. Location: EU (Ireland), sent via the provider's EU region.

Sentry (Functional Software Inc., USA): website error reports, without user identifier. Location: EU (Germany), data stored in the provider's EU region.

Property companies in which you subscribe to shares: maintaining the share register (legal obligation of the company), general meeting. Location: Switzerland.

Financial institutions and payment service providers: payouts to your payout account. Location: Switzerland / EU.

Authorities, courts, auditors, legal advisers: where required by law or necessary to protect our rights. Location: Switzerland.

GLOBE-Software Solutions GmbH, Baar: development and operation of the Platform on our behalf; access only as far as needed for operations and support, contractually bound to confidentiality. Location: Switzerland.

Contracts ensuring the protection of your data are in place with all processors. We do not sell personal data.

Your data is generally stored in Switzerland. Exceptions are the identity check via Sumsub (EU region Germany), the payment service provider Stripe (Ireland/USA), email delivery via Resend (EU region Ireland) and error analysis via Sentry (EU region Germany). Under the FADP, the EU member states and the United Kingdom are considered to have adequate data protection. For Stripe and for any access by the US companies of Resend and Sentry from the USA, we rely on the standard contractual clauses recognised by the FDPIC, which form part of our data processing agreements with these providers. Only the data each service needs for its task is transmitted.

Account and contract data: for the duration of the customer relationship and thereafter as long as statutory retention duties apply, generally ten years after the relationship ends (Art. 958f CO).

Share register and related entries: as long as the company exists or ten years after your removal from the share register.

ID copies, proof of residence and check results: ten years after the customer relationship ends. Face comparison data: deleted by the service provider once the check is complete, at the latest after 30 days.

Payment references: ten years (accounting).

Technical logs (server logs, access): six months. Security events relating to your account (sign-ins, locks, password changes): until the account is deleted. Error reports at Sentry: 90 days.

Once these periods expire, the data is deleted or anonymised.

You have the right to access the data processed about you, to have incorrect data rectified, to receive or transfer the data you provided to us in a common electronic format (Art. 28 FADP), and to deletion unless statutory retention duties apply. You may object to processing and withdraw any consent at any time; consent to the face comparison can be withdrawn as long as the check has not been completed.

Send requests to datenschutz@immogo.ch; we may ask for proof of identity. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

You can delete your account once all your investments have been settled, i.e. no subscription is open, you no longer hold any shares and the income account balance has been paid out. You trigger the deletion in your profile after signing in. After deletion you can no longer sign in. Data we are legally required to keep (in particular the share register, contracts, payment records, identity documents) remains stored in blocked form until the periods in section 7 expire and is only used to fulfil these obligations.

The website only uses technically necessary cookies for sign-in and security (session cookies). We do not use marketing or tracking cookies. See the cookie policy for details.

We protect your data with technical and organisational measures, including encrypted transmission (TLS), encrypted storage of documents, password hashing, need-to-know access restrictions, logging of security-relevant events and regular security reviews.

We may amend this privacy policy at any time. The current version is available at immogo.ch/legal/privacy; we will inform you by email of material changes. The binding, versioned document is available as a PDF.