Privacy Policy

PTK&Co Consultants (operating PassTheKeys, "PTK", "we"), CP 1213 Onex, Switzerland, is the controller of the personal data processed on this platform. We process it under the Swiss Federal Act on Data Protection (nFADP/FADP) and, for users in the EU/EEA, the GDPR. This policy explains what we collect, why, how long we keep it, and the rights you have.

Data we process

We collect only the minimum needed to run a lease transfer: your account details (name, email, language), the dossier documents you upload (identity, residence permit, proof of income, debt-collection extract), application and visit metadata, and the messages exchanged between the outgoing and incoming tenant. We run no analytics, advertising, or behavioural tracking of any kind.

Why we process it

We process your data to provide the service you ask for — publishing or answering a listing, verifying a dossier, coordinating visits, and supporting a placement — and to meet our legal and security obligations. The legal bases are the performance of our contract with you, your consent where you give it, and our legitimate interest in keeping the platform safe.

Document privacy

Your dossier documents stay private. They are visible only to you until you confirm an application after a visit, and are then released solely to the relevant régie or owner for that application. They are never shown to other seekers and never used for any other purpose.

How long we keep it

We keep your data only as long as your account is active or as needed to provide the service and meet legal retention duties (for example records tied to a placement or a dispute). When you delete your account we anonymise your personal data; audit and accounting records are kept for the legally required period and then removed.

Who it is shared with

We do not sell your data. We share it only with the processors that run the service on our behalf: our Swiss/EU hosting provider, our email provider (Mailgun, EU region) for transactional messages, and — only if and when paid validation is enabled — our payment provider (Stripe) at the checkout step. Each acts under contract and on our instructions.

How we protect it

Access is encrypted in transit, documents are stored privately, sessions are protected, and every administrative action on your account is recorded in an audit log. We enforce a strict content-security policy and collect no surveillance data.

Your rights

You can ask to access, correct, export, or delete your personal data, and you may object to or restrict certain processing. To exercise these rights, or to ask anything about this policy, contact [email protected]. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU/EEA, your local supervisory authority.

We may update this policy as the platform evolves; the current version always lives at this address.