Privacy Policy

Point Group GmbH Birkenweg 9, 3125 Toffen, Switzerland UID: CHE-186.921.986 | CH-ID: CH-036-4099444-2 Email: info@point-group.ch | Website: https://immopoint.mk

We process personal data only:

• on the basis of consent
• to perform a contract or pre-contractual measures
• to fulfil legal obligations
• to safeguard legitimate interests

3.1 Registration data

When creating an account, we collect: first and last name, email address, password (encrypted, never in plain text), account type (private or business). For business accounts additionally: company name, contact person, telephone number, UID, company documents. Purpose: account management, authentication, communication.

3.2 Listing data

Property descriptions, price information, location data, photos, provider contact details. Purpose: publication and brokerage of real estate offers.

3.3 Payment data

Payments are processed via Stripe Inc. ImmoPoint does not store any full credit card data. We store: Stripe session ID, payment amount and currency, time of payment, booked package. Purpose: payment processing, accounting, invoicing.

3.4 Usage data

IP address (anonymised after 7 days), browser type and version, operating system, pages visited and time, referrer URL. Purpose: security, troubleshooting, platform optimisation.

3.5 Communication data

Sender name and email, message content, time, reference to the respective listing. Purpose: brokerage between providers and interested parties.

3.6 Search alerts

Search criteria and email address for notifications. Purpose: automatic notification of new matching listings.

4.1 Processors

• Stripe Inc. (payment processing, USA) — stripe.com/privacy
• Cloudinary Inc. (image storage, USA) — cloudinary.com/privacy
• Resend Inc. (email delivery, USA) — resend.com/privacy

For data transfers to the USA, we rely on Standard Contractual Clauses (SCC) as well as the Swiss-US Data Privacy Framework.

4.2 Legal obligations

We may disclose data to authorities where we are legally obliged to do so.

4.3 No disclosure for advertising purposes

We do not sell your data and do not disclose it to third parties for advertising purposes.

5.1 Necessary cookies

Technically necessary cookies for: authentication (login session), language settings, currency settings, security tokens. These cannot be disabled.

5.2 Optional cookies

With your consent, we use additional cookies for analytics and improving the user experience. Consent can be withdrawn at any time via the cookie settings.

• HTTPS encryption for all data transfers
• Password hashing (bcrypt) — no plain text storage
• JWT authentication for secure session management
• Access controls for user data
• Regular security updates

• Active accounts: until deletion by the user
• Deleted accounts: 30-day recovery period, then anonymised
• Listings (deleted): 30 days in the trash, then permanently deleted
• Payment data: 10 years (statutory retention obligation)
• Log files: 90 days
• IP addresses: 7 days (anonymised)
• Email communication: until deletion of the account

• Right of access to stored data
• Right to rectification of incorrect data
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Data portability in a machine-readable format
• Right to object to processing
• Withdrawal of consent possible at any time

Right to lodge a complaint

Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch EU: Competent data protection authority of your country of residence

To exercise your rights: info@point-group.ch We respond to requests within 30 days.

ImmoPoint is intended exclusively for persons aged 18 and over. We do not knowingly collect data from minors.

Material changes will be communicated to registered users by email.

• Swiss Data Protection Act (DSG) of 25 September 2020
• EU GDPR where applicable
• Swiss-US Data Privacy Framework for data transfers to the USA