Legal

Privacy Policy

This policy describes how mietzins-senkung.ch processes personal data when you upload lease documents, calculate possible rent reductions, and send rent-reduction requests.

Data Controller

Digivasion GmbH
Wattstrasse 13c
CH-8307 Effretikon
Privacy contact: hallo@mietzins-senkung.ch

Data Processed

We process in particular the following data, to the extent you upload or enter it:

Lease, rent adjustments, and other uploaded documents
Name, email address, home address, rental property, and details of the landlord or property management
Net rent, ancillary costs, reference interest rate, CPI/LIK values, and contract deadlines
Signatures, when you digitally sign a rent-reduction request
Payment, dispatch, and technical log data

Uploaded lease documents may also contain data of other persons, such as co-tenants, landlords, property managers, building superintendents, or former contracting parties. Please upload only documents necessary for the review.

Purposes

The data is used for:

automatic extraction of tenancy-law-relevant contract data
calculation of a possible rent-reduction potential
creation, payment, dispatch, and delivery tracking of a rent-reduction request
login via magic link, customer service, abuse prevention, and operational security
optional: monitoring future reference interest rate changes, if you consent

AI-Assisted Extraction

Uploaded documents are transmitted to external AI/OCR service providers for automatic extraction. These providers may operate servers in various countries — in particular in the EU/EEA and in the USA — meaning processing outside Switzerland is possible. The extraction is used solely to pre-populate the contract details shown in the form. You must review and confirm all details before the calculation is run.

The automated analysis does not constitute a legally binding decision about your tenancy. The result is a technical estimate based on the data you have confirmed.

Service Providers

Depending on the configuration, the following categories of service providers may be used:

AI/OCR providers for document extraction (servers possibly in the EU/EEA or the USA)
Payment service providers for payment processing
Dispatch service providers for printing and posting registered mail
Email/SMTP providers for login links, confirmations, and notifications
Hosting, backup, security, and monitoring providers for technical operations

These providers process personal data either as independent controllers or as data processors. Where they act as data processors, they are contractually required to process personal data only on our instructions and with appropriate security measures.

Processing Abroad

Our application servers are located in the European Union (Finland). Depending on the service provider used, personal data may also be processed in the EEA, the United Kingdom, or other countries, in particular the USA. This applies in particular to AI/OCR, payment, email, and dispatch providers.

From a Swiss perspective, the EU is recognised as providing an adequate level of data protection (recognised by the Federal Council). Where data is disclosed to a country without an adequate level of data protection, we rely — where required — on recognised standard contractual clauses, contractual guarantees, technical safeguards, or other bases permitted under Swiss data protection law (revDSG — revised Swiss Federal Act on Data Protection).

Retention and Deletion

Cases are scheduled for deletion by default after 30 days. You can delete your case data yourself at any time in the case area. Where rent monitoring is active, we retain the data necessary for that purpose until you discontinue the monitoring or request deletion.

Your Rights

For questions about your data or to exercise your data protection rights, you can reach us at hallo@mietzins-senkung.ch. Under applicable data protection law you may in particular request access, rectification, erasure, restriction of processing, data portability, or object to certain types of processing.

If you believe your personal data is not being processed lawfully, you may also contact the Federal Data Protection and Information Commissioner (FDPIC).

Cookies and Local Storage

We use only technically necessary cookies and no third-party trackers (no Google Analytics, no Facebook Pixel, no Tag Manager). Specifically:

Name	Type	Duration	Purpose
`ms_session`	Cookie (first-party, HttpOnly, SameSite=Lax)	up to 90 days	Technically necessary: enables access to your own case and login via the magic link. The service cannot be used without this cookie.
`ms_ref` (sessionStorage)	Browser-internal `sessionStorage` (not a cookie)	current browser session only	Optional referral tracking: if you arrive via a link containing `?ref=…`, your browser stores the referral identifier for the duration of the session. We use it only for anonymous statistics on how many visits come via referrals. No advertising is served.

Stripe (payment processing) and Swiss Post (delivery tracking) operate on their own domains and are subject to their own privacy policies. We do not set any third-party cookies for these providers within our application.

Because our application does not use consent-requiring cookies (e.g. marketing trackers), no cookie banner is required under Swiss data protection law (DSG/revDSG). If you are accessing from the EU/EEA: even under ePrivacy, a purely technical session cookie does not require consent.

Data Security

We implement technical and organisational measures to protect data against unauthorised access. However, no internet service can guarantee absolute security.

Last updated: 5 May 2026