Privacy policy — Sarimmo & Design

sarimmo & design GmbH (hereinafter "Sarimmo" or "we") places the highest importance on the protection of your personal data. This policy explains what data we collect, for what purpose, on what legal basis, with whom it is shared and what rights you have.

It complies with the Swiss Federal Act on Data Protection (revised FADP, in force since 1 September 2023) and with the European Union General Data Protection Regulation (GDPR) where applicable.

1. Data controller

Controller: sarimmo & design GmbH, Av. des Alpes 3, 3960 Sierre, Switzerland
Data contact: info@sarimmo.ch
UID: CHE-290.047.956

2. Data collected

Contact form

First and last name
Email address
Phone number (optional)
Message content

Online property valuation tool

Identity: first name, last name, email, phone
Property details: address, locality, surface, rooms, year, condition, amenities
Intention to sell and contact preference
IP address, also used to limit the number of requests per day

"Present your property" form

Contact details and information about the presented property

Browsing data

IP address (anonymized for statistics)
Browser type, operating system, resolution
Pages visited, time on page, traffic source

3. Purposes and legal bases

Respond to enquiries: Handle messages received through the contact form — basis: consent and pre-contractual performance.
Qualify and follow up on leads: Assess and support enquiries related to selling, buying or valuing a property — basis: consent and legitimate interest.
Provide an indicative valuation: Calculate a value range based on the data supplied — basis: consent.
Audience measurement and improvement: Understand site usage through Google Analytics 4 (with IP anonymization), basis: consent via the cookie banner ("Analytics" category); and through Umami, without cookies, basis: legitimate interest.
Advertising conversion measurement: Measure how many visitors arriving through one of our Google Ads ads send an estimation request, without remarketing or personalised advertising. Basis: consent via the cookie banner ("Marketing" category).
Legal obligations: Retention of accounting records and anti-money-laundering documentation (AMLA) — basis: legal obligation.

4. Recipients and processors

Your data is processed by authorized staff of sarimmo & design GmbH and by the following technical providers and services:

Hetzner Online GmbH (Germany): Hosting of the website and its database, on a server located in Nuremberg (Germany).
Metanet AG (Switzerland): Domain names (DNS), email (mail.sarimmo.ch) and the server that sends the forms' emails (sora.metanet.ch).
Google Ireland Limited (Ireland / United States): Google Analytics 4 with IP anonymization, active only with "Analytics" cookies. Google Ads (conversion measurement only), active only with "Marketing" cookies.
Mapbox, Inc. (United States): Display of the interactive maps (property prices page and valuation result). The map is loaded as soon as it appears on screen; Mapbox then receives your IP address and technical usage data.
Federal Office of Topography swisstopo (Switzerland): Address search service geo.admin.ch, used on the property prices page. The text you type and your IP address are sent to it while you type.
jsDelivr: Content delivery network that provides an animation library (GSAP) on the "Website development" page. It receives your IP address when that page loads.
Umami (analytics.tacelo.ch): Cookie-free audience measurement, on a server located in Germany (see section 8).
Tacelo (Switzerland): Design, technical maintenance and code interventions. Access limited to administration environments.

5. Retention periods

Valuation leads: 6 months after the last contact, unless a contractual relationship is established.
Contact messages: 24 months after the last exchange.
Contractual and accounting data: 10 years (Swiss legal requirement).
Server logs: 14 days (daily rotation), for security and diagnostics.
Cookies: See section 8 for detailed durations.

6. International transfers

The website, its database and the Umami tool are hosted in Germany, a country whose level of data protection is recognised as adequate by Switzerland.

Data may be transferred to the United States in two cases:

Google (Google Analytics 4 and Google Ads), only if you have accepted the corresponding cookie category. These transfers are governed by the European Commission's Standard Contractual Clauses (SCC 2021) and, for Switzerland, by the recognitions issued by the Federal Data Protection and Information Commissioner (FDPIC).
Mapbox, Inc., when an interactive map is displayed: your IP address and technical data are sent to its servers.

We will inform you of any substantive changes in these transfers.

7. Your rights

Under the revised FADP and, where applicable, the GDPR, you have the following rights:

Access — confirm whether data concerning you is being processed and obtain a copy.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your data, subject to overriding legal obligations.
Objection — object to processing on legitimate grounds.
Portability — receive your data in a structured, machine-readable format.
Withdrawal of consent — at any time, without retroactive effect.
Complaint — file a complaint with the competent data protection authority.

To exercise these rights, email info@sarimmo.ch with your request and proof of identity. We reply within 30 days.

8. Cookies

The website uses three cookie categories whose consent you can manage at any time via the button with a cookie icon shown at the bottom left of the screen (see "Withdrawing or changing your consent" below).

Essential cookies: The website sets no essential cookies. Your cookie choice is stored in your browser's local storage under the key sarimmo_cookies, with no expiry date: it is kept until you change it or clear the website's data. Cannot be disabled.
Analytics cookies: Google Analytics 4 with IP anonymization: _ga (distinguishes visitors) and _ga_V4DTQF6RZT (keeps the session state). Set only after explicit consent. Duration: 400 days.
Marketing cookies: Google Ads: cookie _gcl_au and local storage entry _gcl_ls, used to link an estimation request to a click on an ad. Set only after explicit consent. Duration: 90 days. After an estimation request, the key sarimmo_ads_conv is stored in the browser's session storage so that the same request is not counted twice; it is deleted when the tab is closed.

Measurement services used

Google Ads (conversion tracking): Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: to measure how many visitors who reach the website through one of our ads then send an estimation request. This service is activated only if you accept "Marketing" cookies. We use neither remarketing nor personalised advertising. Data may be transferred to the United States (see section 6). Basis: consent. More information: policies.google.com/privacy.
Google Analytics 4: Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: to compile statistics on how the website is used. This service is activated only if you accept "Analytics" cookies. Data may be transferred to the United States (see section 6). Basis: consent. More information: policies.google.com/privacy.
Umami (analytics.tacelo.ch): Cookie-free audience measurement, hosted on a server located in Germany. It records technical information such as pages viewed, referring page, browser and device type, language and screen size, without setting any cookie. Basis: legitimate interest in understanding how the website is used.

Withdrawing or changing your consent

Once your first choice has been saved, a small button with a cookie icon appears at the bottom left of the screen. It reopens the cookie window, where you can click "Decline" or, via "Customise", switch off the "Analytics" and "Marketing" categories and then click "Save my preferences". Withdrawal takes effect immediately for the Google services and has no retroactive effect. You can also delete this website's cookies and data in your browser settings.

9. Security

We implement appropriate technical and organizational measures to protect your data: HTTPS encryption, prepared SQL statements, password hashing (bcrypt), anti-bot verification on the valuation tool, restricted access to admin interfaces, encrypted backups.

10. Supervisory authority

You may file a complaint with the competent authority:

Switzerland — Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — edoeb.admin.ch
European Union — the national authority of your country of residence.

11. Changes to this policy

This policy may be updated at any time to reflect legal or technical developments. The last update date is shown at the top of the page. We recommend consulting it regularly.