Privacy Policy
Stand: 07. Mai 2026
I. Scope and Purpose
This Privacy Policy applies to the Foundation Gebäudepass Switzerland, c/o IMUB AG, Untere Paulistrasse 20, 8834 Schindellegi, Feusisberg SZ (the "Foundation"), when it processes personal data of customers, contractors, employees and other third parties. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).
II. Personal Data Processed and Purposes
The Foundation collects, processes and stores personal data insofar as this is necessary for the operation of the Building Passport, for the security of operations and infrastructure, for invoicing, for managing and maintaining customer relationships, in particular to ensure a high quality of service and improved service delivery, as well as to respond to any enquiries or concerns.
In particular, the following categories of data are processed: personal master data (including data contained in a corresponding copy of an identity document), contact and communication data, user and access data, contractual data, as well as payment data in connection with the invoicing of the usage fee.
Data subjects include, in particular, the owners of the properties concerned and other designated users and administrators of the Building Passport, employees of the competent authorities, as well as employees of contractors carrying out work on the properties concerned.
III. Disclosure to Third Parties
Personal data may, on a case-by-case basis, be disclosed to selected third parties (in particular IT service providers). These third parties are contractually obliged to comply with applicable data protection requirements. Anonymised data may be made available by the Administrative Office for research and teaching purposes.
The technical operation of the Building Passport is provided by Renuo AG, Wallisellen, acting as a data processor. The software and the associated data (including backups) are hosted on the Deploio hosting platform (with servers located in Switzerland).
IV. Data Security
The Foundation protects the information stored in the Building Passport by means of appropriate technical and organisational measures and handles such information with due care and in accordance with Swiss and, where applicable, European data protection law. These measures include, in particular, the pseudonymisation and encryption of personal data as well as ensuring the ongoing confidentiality, integrity, availability and resilience of the processing systems.
V. Place of Processing / Disclosure Abroad
Data is generally processed and stored within Switzerland (and, exceptionally, within the European Economic Area [EEA]). Beyond these territories, no personal data is disclosed to third countries.
VI. Retention Period
Personal data is processed and stored for as long as necessary to fulfil our contractual and legal obligations or otherwise to achieve the purposes pursued by the processing. As soon as the personal data is no longer required for the purposes stated above, it will generally, and insofar as possible, be deleted or anonymised.
Log files showing who made which changes to the data in the Building Passport are irreversibly deleted after 6 months.
VII. Rights of Data Subjects
In accordance with the FADP, data subjects have, in particular, the right to:
- access the personal data processed;
- rectification of inaccurate data;
- deletion of data (to the extent permitted by law);
- restriction of processing;
- release and transfer of data.
Requests may be addressed to the Foundation using the contact details provided below.
VIII. Contact
For questions regarding this Privacy Policy or the personal data processed, the Foundation may be contacted by email at info@gebaeudepass.ch.
IX. Amendments
The Foundation reserves the right to amend this Privacy Policy at any time. The current version is available on the Building Passport website.
Feusisberg SZ, 07. Mai 2026, Stiftung Gebäudepass Schweiz