Privacy policy

This privacy policy explains which personal data we process when you use housenet.ch, and why. It is based on the Swiss Federal Act on Data Protection (FADP) and, where it applies, on the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Cromatica S.a.s., Via S. Gregorio 55, 20124 Milano, Italia
Email for data protection: privacy@housenet.ch

2. When you visit the website

For technical and security reasons our server records your IP address, the date and time, the page requested and the browser used. We use this data only to run the website and protect it from abuse, and we delete it after 30 days.

We don’t use external browsing analytics tools or targeted advertising. When you sign in, we use essential technical cookies for your session and to protect the sign-in flow on the portal and panel.

The functional housenet_language cookie remembers the last used language for one year and contains no personal identifier. A language selected in your profile takes priority for emails and entry to the portal; otherwise we use the cookie, then your browser language.

We also count requests to reveal agency and listing phone numbers. Successful requests store only the agency, listing where applicable, contact type, date and a random request identifier to prevent duplicates; these events contain no phone number, IP address, cookie or visitor identity. Abuse protection uses temporary counters in memory, removed after 15 minutes.

3. Saved listings

Favourites require an account and are saved in our database, linked to your user, so they are available on your devices. We do not store anonymous favourites in your browser. You can remove them with the heart.

4. When you write to an agency

With the “Message agency” form we collect your name, email, phone number (if you provide it), your message, any viewing request and the listing it refers to. We store this data and forward it by email to the agency that publishes the listing, so they can reply to you. From then on, the agency processes your data under its own responsibility.

We keep the request for 12 months, so we can prove it was sent and deal with any abuse.

5. Job applications

If you send us an application, we use your data only to assess it and delete it at the end of the selection process, unless you allow us to keep it longer.

6. Accounts and agencies

For Housenet accounts, we process your name, username, email, role and data needed for sign-in security. Passwords are stored only as hashes. The essential session cookie lasts at most seven days and is shared between the portal and panel. Agencies can view and manage only the listings they are authorized to access.

If you choose Google or Apple sign-in, we receive the account identifier and necessary profile details such as your name and email. Apple may provide a private relay email address. These methods are optional and send data to the selected provider when you use them. We do not receive your Google or Apple password. You can continue using your Housenet username or email and password.

We store the favourites and searches you choose in your account so you can access them on your devices. Enquiries sent while signed in are associated with your account and available in your personal area. Guest enquiries are not linked using an email match alone. New password accounts confirm their email using a link valid for one hour.

If you leave your agency’s email address on the agency page, we store the address, page language and request date to contact you about activation. Only Housenet administrators can view the request; notifications are sent to mattia@housenet.ch and ceo@futurelabs.it through the email service. This form does not subscribe you to a newsletter.

For the newsletter, we separately store the email address, language, consent version and request, confirmation and unsubscribe dates. The subscription remains pending until confirmed using a link valid for one hour, sent through Resend. Each request includes a link to cancel it or unsubscribe without an account. We store only token hashes and technical delivery status; business requests and accounts do not automatically subscribe you to the newsletter. Cloudflare Turnstile also protects this form.

After confirmation, we synchronize the email address and language to the Resend newsletter segment for campaign management. Unsubscribing through the portal removes the address from that segment; global opt-outs and contact deletions in Resend are reflected in Housenet through signed notifications.

7. Service providers and external services

To run the website we work with these providers, who may receive some data:

• Amazon Web Services: hosts the website and data in a data centre in Stockholm (Sweden, EU). Public images and attachments may be delivered through Amazon CloudFront, which uses servers in different countries and receives your IP address when you load them.
• Cloudflare Turnstile: protects the agency callback form against automated submissions. Your browser communicates with Cloudflare, which receives technical data such as your IP address and browser information for the security check. Our server checks the verification token without storing it with the lead.
• Resend: sends emails, for example messages to agencies. Based in the United States.
• swisstopo (Federal Office of Topography): provides the maps on listings. Your browser loads them from its servers, which receive your IP address.
• Pexels and Unsplash: some decorative images on the website are loaded from their servers, which receive your IP address.

Share buttons (WhatsApp, Facebook, X) and links to other websites only send data to third parties when you use them.

8. Data abroad

Some providers process data outside Switzerland: in the European Union, which the Federal Council considers to offer adequate protection, and in the United States, with the safeguards required by law (for example standard contractual clauses). For Resend, our email provider, transfers from Switzerland to the United States rely on the standard contractual clauses in its data processing agreement.

9. Your rights

You can ask us at any time which data we process about you, have it corrected or deleted, and object to its processing. Write to privacy@housenet.ch.

If you believe we are processing your data incorrectly, you can contact the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

10. Changes

We may update this privacy policy. The version published on this page, with the date of the last update, applies.