Privacy Policy
1. Data Controller
The controller responsible for data processing on this website is:
NOVAC-SOLUTIONS GmbH (operating under the brand coflat)
Kuttelgasse 7, 8001 Zürich - Schweiz
Email: info@coflat.ch
Website: www.coflat.ch
2. Principles of Data Processing
NOVAC-SOLUTIONS GmbH processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP, revised version).
Personal data is collected only where necessary for the provision of our services or where a valid legal basis exists.
3. Website Hosting
This website is hosted by Wix (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel).
When you visit our website, technical connection data such as your IP address, browser type, operating system, and the date and time of access are automatically transmitted to Wix servers. This processing is technically necessary for the operation of the website.
Wix uses the content delivery network (CDN) of Akamai Technologies to deliver website content. As a result, connection data may be transferred to Akamai servers worldwide, including in the United States.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating the website); Article 31 FADP.
4. Cookies and Consent (Usercentrics)
This website uses cookies and similar technologies.
Strictly necessary cookies are set without prior consent. For all other cookies, we obtain your explicit consent through our cookie consent tool.
We use Usercentrics (Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany) for this purpose. Usercentrics records your consent in order to demonstrate compliance to supervisory authorities. The following information may be processed:
-
Time of consent
-
Selected preferences
-
Anonymized IP address
You may withdraw or modify your consent at any time via the cookie settings icon on our website.
Legal basis: Article 6(1)(a) GDPR (consent) for non-essential cookies; Article 6(1)(f) GDPR (legitimate interest) for technically necessary cookies.
5. Error Monitoring (Sentry)
To monitor the technical performance of our website, we use Sentry (Functional Software Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA).
Sentry automatically collects technical errors and transmits technical information such as IP address, browser type, and error reports to servers in the United States.
Transfers are carried out based on the EU Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring the technical stability of the website).
6. Property Listings (Flatfox)
Our room and apartment listings are published and managed through Flatfox (Flatfox AG, Zurich, Switzerland).
If you submit an application or contact us via Flatfox, your personal data will be processed directly by Flatfox. The Flatfox Privacy Policy applies and can be found at:
We recommend reviewing their privacy policy before using the platform.
Legal basis for the transfer: Article 6(1)(b) GDPR (pre-contractual measures).
7. Applications via VideoAsk
We use VideoAsk (Typeform S.L., Carrer de Bac de Roda 163, 08018 Barcelona, Spain) for housing applications.
VideoAsk allows applicants to submit their application via video, audio, or written responses.
The following categories of data may be processed:
-
Name and contact details
-
Video and/or audio recordings
-
Written application information
-
IP address
-
Device and technical information
Data is processed on Typeform servers located in the EU and, where applicable, in the United States. Transfers to the United States are based on the EU Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.
We use this data exclusively for the assessment and processing of your housing application.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures related to a tenancy agreement).
8. Contacting Us
If you contact us by email, your data (name, email address, and message content) will be used exclusively to process your inquiry and will not be shared with third parties.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interest).
9. Data Retention
Personal data is retained only for as long as necessary for the relevant purpose or as required by applicable legal retention obligations.
Afterwards, the data will be deleted or anonymized.
10. Your Rights
You have the following rights with respect to your personal data:
-
Right of access (Article 15 GDPR / Article 25 FADP)
-
Right to rectification (Article 16 GDPR)
-
Right to erasure (Article 17 GDPR)
-
Right to restriction of processing (Article 18 GDPR)
-
Right to data portability (Article 20 GDPR)
-
Right to object (Article 21 GDPR)
-
Right to withdraw consent at any time with future effect
Requests may be directed to:
11. Right to Lodge a Complaint
Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
www.edoeb.admin.ch
European Union:
The competent data protection supervisory authority in your Member State.
12. Data Security
We implement appropriate technical and organizational security measures to protect your personal data and regularly adapt these measures to reflect current technological standards.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time as necessary.
The version published on this website at the time of your visit shall apply.
NOVAC-SOLUTIONS GmbH
Kuttelgasse 7
8001 Zürich
Schweiz