Privacy Policy
This privacy policy explains which personal data we process when you visit our website swiss-umzuege.ch, contact us or commission us with a move, cleaning, disposal or storage – and what rights you have.
1. Controller and contact
The controller responsible for the data processing described in this privacy policy is:
Swiss Umzüge & Entsorgung GmbH
Hertistrasse 29
8304 Wallisellen, Switzerland
Phone: +41 44 589 67 77
Email: info@swiss-umzuege.ch
UID: CHE-305.819.635
We have not appointed a data protection advisor within the meaning of Art. 10 nFADP. Please send any data protection enquiries to the address above.
2. Scope
This policy applies to the processing of personal data
- when you visit our website swiss-umzuege.ch, including its subpages,
- when you contact us via form, phone, email or messenger,
- when we prepare quotes and carry out and invoice our orders (moving, cleaning, disposal, storage),
- in the context of our business relationships with suppliers and partners.
Third-party websites to which we link are subject to their own privacy policies.
3. Applicable law
This policy is governed primarily by the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023) and the Data Protection Ordinance (DPO). Where applicable in individual cases – for example, when we offer services to persons in the EU/EEA – we also comply with the EU General Data Protection Regulation (GDPR). Further obligations arise in particular from the Swiss Code of Obligations (retention) and the Telecommunications Act (cookies).
4. Definitions
- Personal data: any information relating to an identified or identifiable natural person.
- Sensitive personal data: e.g. data on health, religious views or criminal prosecutions (Art. 5 let. c nFADP).
- Processing: any handling of personal data, e.g. collecting, storing, using, disclosing, deleting.
- Processor: third parties that process personal data on our behalf (Art. 9 nFADP).
5. Principles of data processing
In accordance with Art. 6 nFADP, we process personal data lawfully, in good faith and proportionately, only for recognisable purposes, accurately and up to date, and with appropriate data security. We only collect the data we need for the respective purpose.
6. Categories of personal data processed
| Category | Examples |
|---|---|
| Technical access data | IP address, date/time, page accessed, referrer, browser, operating system, device type |
| Consent data | Your cookie selection, time of consent or withdrawal |
| Usage and tracking data | Page views, clicks, form submissions, campaign source (only with consent) |
| Communication data | Name, phone number, email address, content of your message |
| Order and moving data | Moving-out and moving-in address, floor, lift, living space/number of rooms, items to be moved, preferred date, additional services |
| Contract and billing data | Quotes, order confirmations, billing address, payment method, payments received |
| Service data | Job scheduling, work reports, handover and acceptance reports, photos documenting damage |
| Review data | publicly posted Google reviews (name, text, stars) |
As a rule, we do not process sensitive personal data. Please only share such data with us if it is necessary for the order (e.g. information about limited mobility).
7. Purposes and legal grounds
| Purpose | nFADP | GDPR (if applicable) |
|---|---|---|
| Provision and security of the website | overriding interest | Art. 6(1)(f) |
| Responding to enquiries, preparing quotes | Pre-contractual steps / interest | Art. 6(1)(b) |
| Carrying out orders | Performance of contract | Art. 6(1)(b) |
| Invoicing and accounting | legal obligation / contract | Art. 6(1)(b), (c) |
| Web analytics | Consent | Art. 6(1)(a) |
| Advertising and conversion measurement | Consent | Art. 6(1)(a) |
| Display of reviews and maps | overriding interest | Art. 6(1)(f) |
| Enforcement and defence of claims, prevention of misuse | overriding interest | Art. 6(1)(f) |
8. Website operation and server log files
When you visit our website, technical access data is automatically recorded in server log files. This is necessary to deliver the website, ensure its stability and security, and detect misuse. The log files are deleted after 30 days at the latest, unless they are needed to investigate an incident.
Our website is hosted by Infomaniak Network SA, Geneva, on servers in Switzerland; the domain and DNS are also managed there. The website is based on WordPress; to optimise performance we use a caching plugin that does not transmit any personal data to third parties. The connection is encrypted via TLS/HTTPS.
9. Cookies and local storage
Cookies are small text files that are stored in your browser. We set technically necessary cookies without consent; all others only if you agree in the cookie banner.
| Category | Purpose | Provider | Storage period |
|---|---|---|---|
| Necessary | Storing your cookie selection, security, form functionality | Swiss Umzüge | Session to 12 months |
| Statistics | Web analytics (Google Analytics 4) | up to 24 months | |
| Marketing | Conversion measurement and remarketing (Google Ads) | up to 13 months | |
| Marketing | Conversion measurement and audiences (Meta Pixel) | Meta | up to 3 months |
You can also delete or block cookies in your browser settings. This may restrict certain functions.
10. Consent management (cookie banner)
On your first visit, we use a cookie banner to ask which categories you allow. Your selection is saved in a necessary cookie in your browser; no profiling takes place. Non-essential services are only loaded after you have given your consent. You can change or withdraw your consent at any time via the «Cookie settings» link in the footer.
11. Web analytics
With your consent, we use Google Analytics 4, integrated via Google Tag Manager, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA). Google Analytics records how visitors use our website (e.g. pages viewed, time spent, source, device). IP addresses are not stored in GA4. We use Google Consent Mode v2: without consent, no analytics cookies are set.
Google Tag Manager itself does not set any cookies; it only controls the loading of other services. Further information: policies.google.com/privacy.
12. Online advertising and conversion tracking
12.1 Google Ads
We place advertisements via Google Ads (Google Ireland Limited). With your consent, we measure whether an ad has led to an enquiry (conversion tracking) and can show ads again to people who have visited our website (remarketing). We only receive statistical evaluations, no information that directly identifies you.
12.2 Meta Pixel
With your consent, we use the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (parent company Meta Platforms Inc., USA). It is used to measure the effectiveness of our ads on Facebook and Instagram and to build audiences. If you are logged in to Meta, Meta can assign the visit to your account. Meta is partly jointly responsible with us for this. Information: facebook.com/privacy/policy.
13. Fonts, maps and external content
- Google Maps (Google Ireland Limited): We embed a map to show our location. When it loads, your IP address and technical data are transmitted to Google.
- Google reviews: Using the plugins Trustindex and «Rich Showcase for Google Reviews», we display public Google reviews from our customers. The reviews are retrieved from Google and cached on our server; no data about you is transmitted to Google, except when profile pictures of the reviewers are loaded.
- follow.it: A follow.it icon is embedded for a subscription function; when it loads, your IP address is transmitted to follow.it.
- Fonts: Where fonts are not hosted locally on our server, they are loaded from Google Fonts, in which case your IP address is transmitted to Google.
We do not use any social media plugins that send data to social networks as soon as a page is accessed.
14. Contact, quote requests and forms
If you contact us via a form (e.g. «Request a move»), by email, phone or WhatsApp, we process your details in order to answer your enquiry and prepare a quote for you. Mandatory fields are marked. The forms are operated with Contact Form 7; the data is sent to us by email. We use technical filters to protect against spam.
We delete enquiries that do not result in an order after 12 months at the latest. Please note that unencrypted emails can be viewed by third parties in transit. When using WhatsApp, Meta's privacy policy also applies.
15. Contract processing, payment and invoicing
15.1 Invoice and bank transfer
For payment by invoice (QR-bill), we process your name, billing address, amount and receipt of payment. Payment is processed via our bank in Switzerland.
15.2 Cash payment
For cash payment on site, you will receive a receipt; we record the amount, date and order in our accounts.
15.3 TWINT
For payments with TWINT, the payment data is processed by TWINT AG, Zurich (Switzerland), and your bank. We only receive confirmation of the payment.
15.4 Card payment
We process card payments via an external payment service provider. Your card details are processed directly by the payment service provider; we do not store complete card numbers. This may involve disclosure to the EU/USA.
15.5 Credit check
We do not carry out automated credit checks. For larger orders, we may request advance payment.
16. Provision of our services
16.1 Job scheduling
To carry out an order, our team leaders and staff receive the necessary information (name, phone number, addresses, date, scope).
16.2 Partner companies
If we use partner companies for individual services (e.g. furniture lift, disposal, cleaning), we only pass on the data required for their service and bind them to confidentiality.
16.3 Documentation and confidentiality
To secure evidence, we prepare handover reports and photos of the items being moved or of the premises where necessary. All staff are bound to confidentiality regarding customer data and impressions from your premises – even after their employment ends.
17. Processors and recipients
| Recipient | Purpose | Location |
|---|---|---|
| Infomaniak Network SA | Web hosting, domain, DNS, backups, email where applicable | Switzerland |
| Google Ireland Limited / Google LLC | Analytics, Tag Manager, Ads, Maps, reviews | EU / USA |
| Meta Platforms Ireland Ltd. / Meta Platforms Inc. | Meta Pixel, WhatsApp | EU / USA |
| Trustindex / RichPlugins | Display of Google reviews | EU / worldwide |
| TWINT AG, payment service providers, banks | Payment processing | Switzerland / EU |
| Partner companies | Parts of the order | Switzerland |
| Fiduciary, legal representatives, authorities | Accounting, enforcement of rights, legal obligations | Switzerland |
We do not sell personal data or pass it on to third parties for advertising purposes.
18. Disclosure abroad
Our website and our data are, as a rule, located in Switzerland. When using the services listed in section 17 (in particular Google and Meta), personal data may be disclosed to EU/EEA countries and to the USA. Disclosure to countries with adequate data protection pursuant to Annex 1 DPO (including the EU/EEA) takes place without further safeguards. For recipients in the USA, we rely on the Swiss-U.S. Data Privacy Framework (recognised since 15 September 2024) where they are certified, and otherwise on the EU Commission's standard contractual clauses recognised by the FDPIC. Access to data by foreign authorities cannot be completely ruled out.
19. Retention and deletion
| Data | Retention |
|---|---|
| Server log files | max. 30 days |
| Cookie consent | up to 12 months |
| Analytics and advertising data | max. 14 months (GA4) or as per provider |
| Enquiries without an order | max. 12 months |
| Quotes and correspondence relating to orders | up to 2 years after completion of the order |
| Photos and reports documenting damage | until the statutory limitation periods expire |
| Accounting records, invoices | 10 years (Art. 958f CO) |
Once these periods have expired, the data is deleted or anonymised.
20. Data security
We take appropriate technical and organisational measures, in particular:
- TLS/HTTPS encryption of the website,
- access restricted to authorised persons,
- two-factor authentication for admin access, where available,
- regular updates of WordPress, themes and plugins,
- regular backups,
- staff obligation to confidentiality,
- careful selection and contractual obligation of processors.
21. Your rights under the nFADP
In particular, you have the following rights:
- access to your personal data processed by us (Art. 25 nFADP),
- correction of inaccurate data,
- deletion or destruction of your data,
- release or transfer of your data in a common format (Art. 28 nFADP),
- objection to certain processing,
- withdrawal of consent given, with effect for the future.
21.1 Exercising your rights
Send your request to info@swiss-umzuege.ch or by post to the address in section 1. We may request proof of identity. We generally respond within 30 days and, as a rule, free of charge.
21.2 Restrictions
We may restrict, refuse or defer access in accordance with Art. 26 nFADP, for example if a law provides for this, overriding interests of third parties prevail, or the request is manifestly unfounded. We will state the reasons for any such restriction.
22. Additional rights under the GDPR
Where the GDPR applies, you also have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Withdrawing consent does not affect the lawfulness of processing carried out up to that point.
23. Automated individual decisions and profiling
We do not make any decisions based solely on automated processing. As part of advertising measurement (sections 11–12), usage behaviour may be evaluated only with your consent; no high-risk profiling within the meaning of the nFADP takes place.
24. Data security breaches
If a data security breach is likely to result in a high risk to the personality or fundamental rights of the data subjects, we will report it to the FDPIC (Art. 24 nFADP) and inform the data subjects if this is necessary for their protection. We document incidents internally.
25. Links to third-party websites
Our website contains links to third-party websites. We are not responsible for their content or data processing. Please refer to the privacy policies of the respective providers.
26. Supervisory authority
In Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. Where the GDPR applies, you may also contact the supervisory authority at your place of residence or work in the EU.
27. Changes to this policy
We may amend this privacy policy at any time. The current version published on our website applies.
Last updated: September 2026
