Privacy Policy | Oazo Homes

Version 1.0 – July 2025

About us

This privacy policy ("Privacy Policy") explains how we process and protect your personal data when you use this website or our services offered via https://www.oazohomes.com/ (together "our services").

The Website is operated by Oazo Homes Services AG, Goethestrasse 12, 8001 Zurich, Switzerland (the "Company", "we", "our" or "us"). The Company is the controller for the data processing described below.

Unless otherwise defined in this Privacy Policy, the definitions used in this Privacy Policy have the same meaning as in the Swiss Federal Act on Data Protection ("FADP") or in the EU General Data Protection Regulation ("GDPR").

If you have any questions about data protection, you can also contact our data protection officer at any time. You can contact him at:

by e-mail to: info@oazohomes.com

by post to: Oazo Homes Services AG, Goethestrasse 12, 8001 Zurich, Switzerland

We expressly point out that when using this e-mail address, the content is not exclusively taken note of by our data protection officer. If you wish to exchange confidential information, please first contact us directly via: info@oazohomes.com and mark the correspondence with: "For the attention of the Data Protection Officer".

1. Personal data we collect

When you use our services, we may collect or receive personal data for a number of purposes in connection with our business operations. This includes the following:

Contact details (e.g.: name, email)
Enquiry details (e.g.: details and content of your enquiries to us)
Usage and analytics data (e.g.: identifiers, number of clicks, tracking data)
Login details (e.g.: password, username, session)
Payment data (e.g.. e.g.: billing information, account information)
Behavioural data (e.g.: browsing history, search history, activity logs)
Website visitor data (e.g.: IP address, log files, device ID)

There is no obligation to provide your personal data. However, please note that our services cannot be provided if you do not provide the required data that is absolutely necessary for the fulfilment of the contract between you and us.

2. How we collect personal data

We collect information about our users when they use our services, including certain actions on our website.

Directly

Via our website and electronic communication
When you use our services
When you provide us with services
When you correspond with us electronically
When you browse, fill in a form or make an enquiry when using our services

Indirekt

From public sources
From public registers (e.g. commercial registers), news articles and internet searches
If our business customers commission us to provide professional services and in doing so pass on personal data that they control as part of this commission
From external service providers (see Chapter 5)

5. Legal basis and purposes of data processing

Our legal basis for collecting and using the personal information described in this Privacy Policy depends on the personal information we collect and the specific purposes for which we collect it.

Contract: To fulfil our (pre-)contractual obligations or to take measures in connection with a contract with you. In particular:

To provide and manage your access to our services and their features
To assist you with enquiries
To set up, manage and update your account on the website, as well as to authenticate you and provide secure access to verify your credentials
To provide our services and send you service-related information, updates and alerts
To process payments and transactions and manage invoices and billing
To process orders and purchases, including refunds and rebooking
To customise our services to your specifications and needs.

Consent: We may rely on your consent voluntarily given at the time of providing your personal data. In particular:

To analyse, improve and personalise the use of our Services and communications with us
To set optional cookies and similar technologies on your device
To provide users with news, special offers, newsletters and general information about our Services

Legitimate interests: We may rely on legitimate interests based on our judgement that the processing is fair and proportionate and where your interests or fundamental rights and freedoms do not override those interests. Specifically:

To place technically necessary cookies and similar technologies on your device
To develop new services based on your usage and feedback
To maintain and improve our services and to prevent, detect and address security vulnerabilities
To enforce the website's terms and conditions and to protect against fraudulent activity

Necessity to fulfil legal obligations: To fulfil legal and public interest obligations. Specifically:

To notify you about changes to our services and privacy policy
To comply with applicable regulations and laws
For the legal enforcement of claims and rights

4. Storage periods

We retain personal data for as long as it is needed for the purposes for which it was collected and in accordance with legal and regulatory requirements or contractual agreements. After this period has expired, we delete your personal data or anonymise it completely.

5. Recipients of personal data

We engage third party companies ("service providers") to facilitate the operation of our services, to help analyse the use of our services or to provide necessary services such as payment and the provision of IT services. These third parties only have access to your personal data to the extent necessary to fulfil these tasks.

Type(s) of service providers that may access your personal data:

Third parties who assist us with IT and software solutions
Third parties who assist us with customer insight and marketing activities
Third parties who provide us with cloud hosting and infrastructure services
Third parties who are involved in your matter, such as lawyers, banks and other payment providers, manufacturers, KYC/AML service providers and postal or courier service providers

6. Data transfers to third countries

We and/or our service providers may transfer your personal data to the following locations and process it there:

EU and EEA
USA

We may use service providers that are partly located in so-called third countries (outside the European Union or the European Economic Area or Switzerland) or process personal data there, i.e. in countries whose level of data protection does not correspond to that of the EU or Switzerland.

We protect your personal data in accordance with our contractual obligations and the applicable data protection laws when we transfer data abroad.

Such protective measures may include

Transfers to countries that offer an adequate level of protection according to the Federal Council, as well as countries for which an adequacy decision has been issued by the European Commission
Application of standard contractual clauses, binding corporate rules or other standard contractual obligations that ensure adequate data protection

If a transfer to a third country takes place and there is no adequacy decision or suitable guarantees, it is possible and there is a risk that authorities in the third country (e.g. intelligence services) may gain access to the transferred data and that the enforceability of the data subject's rights cannot be guaranteed.

7. Data forwarding

We may disclose your personal data if we believe in good faith that such action is necessary:

To comply with a legal obligation (i.e. where required to do so by law or in response to valid requests by public authorities such as a court or government agency)
To protect the security of the Website and defend our rights or property
To prevent or investigate possible wrongdoing in connection with us

8. Data security

We use appropriate technical and organisational security measures to protect your stored data from manipulation, loss or unauthorised access by third parties. Our security measures are continuously adapted in line with technological developments.

We also take internal data protection very seriously. Our employees and the service providers commissioned by us are obliged to maintain confidentiality and to comply with the applicable data protection laws. In addition, they are only given access to personal data to the extent that this is necessary for the fulfilment of their respective tasks or assignments.

The security of your personal data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we endeavour to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. We recommend the use of anti-virus software, a firewall and other similar software to protect your system.

9. Your rights

You have the following data protection rights. To exercise these rights, you can contact us at the above address or send an email to: info@oazohomes.com. Please note that we may ask you to verify your identity before responding to the content of such requests.

Right of access: You have the right to request a copy of your personal data, which we will provide to you in electronic form.
Right to rectification: You have the right to ask us to correct our records if you believe they contain incorrect or incomplete information about you.
Right to withdraw consent: If you have consented to the processing of your personal data, you have the right to withdraw this consent with effect for the future. This also applies in the event that you wish to unsubscribe from marketing communications. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose(s) to which you originally consented, unless there is another legal basis for the processing. To stop receiving emails from us, please click on the ‘unsubscribe’ link in the email you received or contact us at info@oazohomes.com.
Right to erasure: You have the right to request that we erase your personal data if it is no longer necessary for the purposes for which it was collected or if it has been processed unlawfully.
Right to restriction of processing: You have the right to request the restriction of the processing of your personal data if you believe that the data is incorrect, the processing is unlawful or we no longer need to process the data for the original purpose, but we cannot delete it due to a legal obligation or because you do not wish us to do so.
Right to data portability: You have the right to request that we transfer your personal data to another controller in a standard format such as Excel, provided that it is data that you have provided to us and we process it on the legal basis of your consent or to fulfil our contractual obligations.
Right to object to processing: If the legal basis for the processing of your personal data is our legitimate interest, you have the right to object to this processing on grounds relating to your particular situation. We will comply with your request unless we have a compelling legal basis for the processing that overrides your interests or we need to continue processing the personal data for the exercise or defence of a legal claim.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law. In the EU and EEA, for example, you can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. You can find a list of the relevant authorities at: https://edpb.europa.eu/about-edpb/about-edpb/members_de. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner, Feldeggweg 1, CH - 3003 Bern, info@edoeb.admin.ch.

10. Cookies

Our services use cookies and similar technologies (collectively ‘tools’) that are provided either by us or by third parties.

A cookie is a small text file that is stored on your device. Comparable technologies are web storage (local / session storage), fingerprints, tags or pixels. Most browsers are set by default to accept cookies and similar technologies. However, you can usually set your browser so that cookies or similar technologies are rejected or only stored with your prior consent. If you reject cookies or similar technologies, you may not be able to use all of our services without problems.

The tools used by us are listed below by category, whereby we inform you in particular about the providers of the tools, the storage period and their purpose. If personal data is transferred to third countries, we refer you to section 6 of our privacy policy, also with regard to the risks that may be associated with this.

We use tools that are necessary for the operation of the website on the basis of our legitimate interest in enabling you to use our services more conveniently and individually and to make them as time-saving as possible. In certain cases, these tools may also be necessary for the fulfilment of a contract or for the implementation of pre-contractual measures. In these cases, access to and storage of information in the end device is mandatory and is carried out on the basis of the implementation laws of the ePrivacy Directive of the EU member states.

We use all other tools, in particular those for marketing purposes, on the basis of your consent. In these cases, access to and storage of information in the end device is subject to consent and takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states. If you have given your consent to the use of certain tools, we will (also) transfer the data processed when using the tools to third countries on the basis of this consent.

You can revoke your consent for certain tools at any time in the settings of our cookie banner solution. Alternatively, you can also revoke your consent for certain tools directly with the provider.

10.1. Technically necessary tools

payload-token (during session): Storing the login status

10.2. Optional Tools

Our website uses Stripe, a service provided by Stripe Inc, 510 Townsend Street, San Francisco, CA 94103, USA. It enables our company to process payments and send payouts worldwide and helps us to minimise the risk of fraud.

__stripe_mid, __stripe_sid (when using the payment function)

To learn more about Stripe's use of cookies, consult the privacy policy here.

Our website uses Google Analytics, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to analyse the usage of the website.

_ga (to distinguish between individual users)

To learn more about Google's use of cookies, please consult the privacy policy here.

11. Social media and links to third-party apps and websites

Our services contain links to websites or apps that are not operated by us. If you click on a third-party link, you will be directed to that third-party website or app. We have no control over the content, privacy policies or practices of third party websites or services.

We maintain online presences in social networks in order to communicate with customers and interested parties and to provide information about our products and services. If you have an account with the same network, it is possible that the information and media you make available there can be seen by us when we call up your profile, for example. In addition, the social network may allow us to contact you. As soon as we transfer personal data to our own system, we are independently responsible for this. This is then done to carry out pre-contractual measures and to fulfil a contract. The legal basis for the data processing carried out by the social networks under their own responsibility can be found in their data protection declarations. Below is a list of social networks on which we have an online presence:

Instagram: Privacy policy
LinkedIn: Privacy policy

12. Newsletter

We send newsletters and other notifications by e-mail and via other communication channels and may also deliver them with the help of third parties.

In principle, you must expressly consent to receiving newsletters and other notifications from us, unless this is permitted for other legal reasons. For e-mails, we use the ‘double opt-in’ procedure for consent, i.e. you will receive an e-mail with a web link that you must confirm by clicking on it, so that no misuse by unauthorised third parties can occur. We may log such consents, including the Internet Protocol (IP) address, date and time.

Newsletters and other notifications may contain web links or tracking pixels that record whether an individual newsletter or notification has been opened and which web links have been clicked on (performance measurement). Such web links and tracking pixels record the use of newsletters and other notifications. We use this statistical recording of usage, including the measurement of success and reach, in order to be able to offer newsletters and other notifications in an effective, user-friendly, permanent, secure and reliable manner based on the reading habits of the recipients.

You can unsubscribe from newsletters and other notifications at any time and thus, in particular, object to the aforementioned collection of data. You can do this by contacting us directly or by following the link in the footer of every newsletter we send you.

13. Changes to this privacy policy

We may update our privacy policy from time to time. We therefore recommend that you check this privacy policy regularly for changes.

Changes to this Privacy Policy will become effective when they are posted on this page.

14. Get in touch with us

If you have any questions about this privacy policy, please do not hesitate to contact us:

Cédric Tribolet, Managing Director, Oazo Homes Services AG, Goethestrasse 12, 8001 Zurich, cedric.tribolet@oazohomes.com