Privacy policy
Last updated: September 2026
Controller
Velora Real Estate GmbH, Pajazit Xhemaili, 9475 Sevelen SG, info@velorarealestate.ch.
Basis
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, its provisions apply in addition.
What data we process
Details you give us via forms, by email or by phone (name, contact details, information about your property and your request). When you visit the website, technical data (IP address, browser, time) is stored in server logs by the hosting provider.
Purpose and legal basis
Answering your enquiry, preparing and executing a mandate, fulfilling legal obligations. We do not use your data for advertising without your consent and we do not sell it. Where the GDPR applies, we rely on entering into and performing a contract (Art. 6(1)(b)), our legitimate interest in a secure, working website and in answering enquiries (Art. 6(1)(f)), legal obligations (Art. 6(1)(c)) and, for maps and ad measurement, your consent (Art. 6(1)(a)).
Hosting and disclosure
Website, database and mail server are run for us by Infomaniak Network SA, Geneva, on servers in Switzerland, which processes the data on our behalf. We only pass data to other third parties where necessary to fulfil a mandate (for example notary, bank, tradespeople) or where required by law.
Contact forms
What you enter in a form is sent by email to our mailbox and stored there as well as in our website’s database, so that no enquiry gets lost and we can handle your request. You receive an automatic confirmation at the email address you gave. To protect against automated requests we limit the number of submissions per internet connection; for this your IP address is stored in encrypted form (hash) for at most 24 hours. After you submit a form, your browser remembers until it is closed (sessionStorage) which form you used and from which page, so that the thank-you page can offer the way back and count the enquiry once.
Google reCAPTCHA
Our forms are protected by Google reCAPTCHA (“I’m not a robot”). The service is only loaded once you use a form. Your IP address, browser and device details and your behaviour in the form are then transmitted to Google Ireland Limited and, where applicable, Google LLC in the USA; when our server checks the result, your IP address is also sent to Google. Google sets cookies in the process. Details: Google privacy policy.
Google Maps
On our property pages you can display a map from Google Maps. The map is only loaded once you click “Load map” or have allowed “External media” in the cookie banner; maps then appear automatically. Your IP address and browser and device details are then transmitted to Google Ireland Limited and, where applicable, Google LLC in the USA; Google may set cookies in the process. The link “Open in Google Maps” takes you directly to Google. Details: Google privacy policy.
Cookies and consent
On your first visit the cookie banner asks for your consent. “Necessary” is always on: a cookie (velora_consent, 12 months) stores your choice; reCAPTCHA is only loaded once you use a form. “External media” (Google Maps) and, if we measure advertising, “Marketing” (Google Ads) are only active if you agree. You can change or withdraw your choice at any time under “Cookie settings” at the bottom of every page; a withdrawal takes effect immediately. Other cookies are only set for our staff (login to the administration area).
Transfers abroad
With Google reCAPTCHA, Google Maps and, where used, Google Ads, data reaches Google Ireland Limited (Ireland, EU) and may be transferred to Google LLC in the USA. Under the FADP the EU provides adequate data protection; Google LLC is certified under the Swiss-U.S. and EU-U.S. Data Privacy Frameworks. We process all other data in Switzerland.
Statistics
We do not use analytics services such as Google Analytics. On our property pages we only count how often a page is viewed per day, without IP address and without cookies. For property links we send to individual people, we also see whether and when the link was last opened. Fonts are hosted on our own server; nothing is loaded from Google Fonts.
Retention
We keep enquiries in our mailbox and database without a fixed period, until you ask us to delete them or we no longer need them; we review them regularly. Data from mandates is retained according to statutory retention periods (usually ten years). Our hosting provider deletes server logs automatically after a short time.
Your rights
You have the right to information, rectification, deletion and data portability, and the right to object to processing. You can withdraw any consent (form, cookie banner) at any time with effect for the future. Please contact the address above. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC); people in the EU may also complain to the data protection authority of their country of residence.