Nexstone

Data protection

Privacy policy

This policy explains which personal data Nexstone SA processes through its website, forms, listings, informational content and, where applicable, its digital spaces.

01

Controller

The controller responsible for personal data collected through this website is:

Nexstone SA

Swiss limited company

Registered with the Commercial Register of the Canton of Vaud

UID: CHE-247.136.613

VAT No.: CHE-247.136.613 TVA

Registered address: Avenue des Alpes 94, 1814 La Tour-de-Peilz, Switzerland

Postal address: Case postale 335, 1814 La Tour-de-Peilz, Switzerland

Phone: +41 21 944 41 08

Email: info@nexstone.ch

This policy is prepared in accordance with the Swiss Federal Act on Data Protection. Where the European General Data Protection Regulation applies to certain processing activities, the relevant provisions are also taken into account.

02

Personal data processed

We may process different categories of personal data, including:

  • identification data: name, first name, company, role;
  • contact data: postal address, email address, phone number;
  • data relating to a real estate request: property type, property address, municipality, rental information, valuation request, rental request, brokerage request or property presentation request;
  • contractual data linked to an offer, mandate or relationship with an owner, tenant, rental applicant, buyer, seller or partner;
  • communication data sent by form, email, phone or another channel;
  • technical data: IP address, browser type, device used, operating system, pages viewed, access date and time;
  • usage data: website interactions, browsing preferences, language used and consultation statistics;
  • data linked to a user account or portal, where applicable: identifiers, access rights, login history, documents viewed or transmitted.

We only collect the data required for the purposes described in this policy.

03

Purposes of processing

Personal data is mainly processed to:

  • respond to requests sent through the website, by email, phone or form;
  • process requests relating to property management, condominium ownership, brokerage, rental, valuation or real estate promotion;
  • establish, manage and follow up a pre-contractual or contractual relationship;
  • organise visits, provide property information and respond to enquiries;
  • manage communications with owners, tenants, applicants, buyers, sellers, companies, partners and service providers;
  • operate, secure, maintain and improve the website;
  • measure website traffic and improve the user experience;
  • prevent abuse, fraud, cyberattacks or unauthorised use;
  • comply with legal, accounting, tax or regulatory obligations;
  • defend our rights in the event of a dispute.

04

Data submitted voluntarily

When you contact us through a form, by email, phone, post or through a digital portal, you voluntarily provide us with certain personal data.

This data is used to process your request and provide the necessary follow-up. If you send us data about third parties, you must ensure that you are authorised to do so and that the data is accurate.

05

Contact forms and real estate requests

The website may contain different forms, in particular to:

  • request a property management offer;
  • request a valuation;
  • submit a property for rent or sale;
  • contact Nexstone SA;
  • request information about a property;
  • send a rental application or a request linked to a listing;
  • access a portal or digital space.

Information sent through these forms is used only to process the relevant request, provide commercial or contractual follow-up and document the necessary exchanges.

06

Owner portal or digital space

When the website provides access to an owner portal, client area or digital interface, additional data may be processed, including:

  • identification and login data;
  • data relating to managed properties;
  • documents transmitted or viewed;
  • technical or administrative requests;
  • communications with Nexstone SA;
  • activity history in the relevant space.

This data is processed to provide the relevant digital service, secure access, follow up files and facilitate communication between the parties.

07

Cookies and similar technologies

The website may use cookies and similar technologies. Cookies are small files stored in your browser when you visit a website.

We may use, in particular:

  • cookies required for the website to function;
  • security cookies;
  • audience measurement cookies;
  • cookies linked to third-party services integrated into the website.

Where required by law, your consent is requested before non-essential cookies are used. You can change your choices at any time using the cookie preferences link available in the footer.

When a cookie choice is saved, Nexstone keeps only a limited technical record: anonymous identifier, selected choice, accepted categories and date. No name or email address is stored in this consent history.

08

Audience measurement and statistics

We may use audience measurement tools to understand how the website is viewed, which pages are visited and how to improve our content and services.

These tools may process technical data such as IP address, device type, browser used, pages viewed, consultation duration and interactions with the website.

Nexstone may use Google Analytics to measure website traffic, understand which pages are viewed and improve the browsing experience. This tool is only activated with your consent through the cookie preferences banner.

You can withdraw or change your consent at any time using the “Cookie preferences” link available in the footer.

09

Third-party services used

To operate the website and provide our digital services, we may use technical providers.

Vercel

The website is hosted and deployed using Vercel Inc. infrastructure. Vercel may process technical data required for website operation, security and availability.

Supabase

Supabase may be used for certain technical features, including database, authentication or storage related to the website and its digital services.

Infomaniak

The domain name and certain DNS services are managed through Infomaniak Network SA, in Switzerland.

Messages sent through forms may also be processed by a technical email delivery service in order to properly forward requests to Nexstone SA.

10

Services integrated into the website

The website may integrate third-party services to display content, secure forms or facilitate navigation.

  • Integrated maps: some pages may display maps or coordinates through Google Maps, OpenStreetMap or an equivalent service. A connection may then be established with the servers of the relevant service.
  • YouTube: some videos are embedded from YouTube, including enhanced privacy mode when possible. Technical data may be transmitted to YouTube or Google when the video is viewed.
  • Cloudflare Turnstile: forms may be protected against bots and automated abuse using Cloudflare Turnstile or an equivalent anti-spam solution.

11

Email and phone communications

When you contact us by email or phone, we process the data required to respond to your request, document the exchange and provide follow-up.

Electronic communications are never entirely risk-free. We recommend that you do not send particularly sensitive or confidential information by unsecured email unless necessary.

12

Applications

If you send us an application, we process the data required to assess your profile, manage the recruitment process and, where applicable, prepare an employment relationship.

Application data may include:

  • identity and contact details;
  • CV, diplomas, certificates;
  • professional background;
  • correspondence;
  • information submitted voluntarily.

Unsuccessful application files are deleted after a reasonable period, unless you agree to longer retention or a legal obligation requires otherwise.

13

Disclosure of data to third parties

We may disclose personal data to third parties when this is necessary to provide our services, process a request, perform a contract or comply with a legal obligation.

These third parties may include:

  • IT service providers and hosting providers;
  • database and cloud service providers;
  • technical maintenance providers;
  • companies mandated for works or interventions;
  • owners, tenants, rental applicants, buyers or sellers where processing a file requires such disclosure;
  • notaries, lawyers, fiduciaries, banks, insurers or public authorities;
  • communication, analytics or security providers.

We do not sell your personal data.

14

International data transfers

Some technical providers may process data in Switzerland, the European Economic Area or other countries, including the United States.

Where personal data is transferred to a country that does not provide an adequate level of protection, we ensure that appropriate safeguards are in place, for example standard contractual clauses, data processing agreements or other mechanisms recognised by applicable law.

15

Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

These measures may include:

  • HTTPS encryption of communications;
  • access restrictions;
  • authentication;
  • backups;
  • technical logging;
  • limitation of access rights;
  • use of recognised technical providers.

No data transmission over the internet can be guaranteed as completely secure.

16

Retention periods

We keep personal data only for as long as necessary to achieve the purposes for which it was collected, comply with legal obligations, document our activity or defend our rights.

  • simple requests: for the time needed to process and follow up the request;
  • contractual data: for the duration of the contractual relationship and the legal retention period;
  • accounting or tax data: for the period required by applicable legal obligations;
  • application data: for a reasonable period after the recruitment process ends, unless otherwise agreed;
  • technical data and logs: for the period required for security, maintenance and analysis needs.

When data is no longer required, it is deleted or anonymised.

17

Your rights

In accordance with applicable law, you may request:

  • access to your personal data;
  • rectification of inaccurate or incomplete data;
  • deletion of your data, where legal conditions are met;
  • restriction of processing;
  • objection to certain processing activities;
  • delivery or transfer of certain data in a commonly used format, where applicable;
  • withdrawal of your consent for processing based on consent.

To exercise your rights, you can contact us at info@nexstone.ch. We may ask you to prove your identity before processing your request.

18

Competent authority

In Switzerland, the competent data protection authority is the Federal Data Protection and Information Commissioner, FDPIC.

19

Changes to this policy

We may amend this privacy policy at any time, in particular if our website, services, technical tools or legal requirements evolve.

The version published on the website is authoritative.

20

Last updated

Last updated: June 2026.