Legal Information

Legal information


Wincasa AG
Grüzefeldstrasse 41
8404 Winterthur, Switzerland

+41 58 455 77 77

Intellectual property rights and other rights

The content of the website of Wincasa AG (text, data, images, graphics, videos, press releases, etc.) is protected by copyright. Third-party copyrights remain reserved. You may download or print out individual pages and sections of this website subject to the condition that you do not remove the copyright symbol or other legally-protected names or symbols. Modifying this website is prohibited in any case. Reproducing, linking or using it for public or commercial purposes is prohibited without the prior written authorisation of Wincasa AG. Accessing, downloading or copying sites does not grant any rights (usage, intellectual property rights, etc.).

The name ‘Wincasa’ and the components of its logo are registered trademarks of Wincasa AG, Grüzefeldstrasse 41, 8404 Winterthur, Switzerland.


Neither Wincasa AG nor its employees accept any liability for the correctness, completeness and currentness of the services and information contained in the website. Wincasa AG reserves the right to modify or add to the content of its website at any time. Liability for direct or indirect damage as well as consequential damage to users or third parties resulting from the use of the Internet, the website of Wincasa AG or the information thereby made available, as well as from the use of links to other websites, is in particular excluded. This exclusion of liability also includes the loss of data, its misuse by third parties and viruses.

Links to other websites

It is possible to use links on this website to access other Internet sites that are not maintained by Wincasa AG. Such external Internet addresses include information created, published, maintained or otherwise provided by natural or legal persons that are legally independent from Wincasa AG. Wincasa AG is not responsible for the content of these sites.

Privacy policy

This privacy policy details the nature, scope and purpose of the processing of personal data (‘data’) through this website and external online presences such as social media (collectively referred to as ‘online services’).

The data protection officer of the company can be contacted at the following address:

rechtsdienst [SECURE E-MAIL - REWRITE MANUALLY] *at*

Legal grounds

Data is processed according to Swiss law and with consideration for the European General Data Protection Regulation (GDPR).


‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be directly or indirectly identified, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

‘Processing’ means any operation or set of operations that is performed on personal data, whether or not by automated means. The term is broad and encompasses practically any handling of data, including the storage of data.

Types of processed data

– Usage data (e.g. visited websites, interest in content, dates and times of visits).
– Metadata and communication data (e.g. device information and IP addresses).

Categories of data subject

Visitors to the website.

Purpose of processing

– To provide the website, its features and its content.
– To respond to customer enquiries and communicate with users.
– Security measures.
– Marketing and coverage measurement.

Collaboration with processors and third parties

We only disclose or transmit data to other persons and companies (processors or third parties) as part of our processing or provide access to the data in any other way if legally admissible (e.g. if it is necessary to transfer the data to third parties such as payment service providers in order to perform a contract), if you have provided consent, if we are legally obliged to do so or if we have a legitimate interest in doing so (e.g. if we are using contractors or hosting service providers).

Transfers to third countries

If we process data in a country outside of Switzerland or if this happens through our use of third-party services or the disclosure/transfer of the data to third parties, it only takes place in order to fulfil our (pre-)contractual duties or on the basis of your consent, a legal obligation or our legitimate interests. Unless we are permitted to do so by law or a contract, we only process data or have data processed in a third country if the specific requirements of Article 44 ff. GDPR have been met. This means, for example, that data are processed on the basis of special guarantees such as the officially recognised identification of a level of data protection befitting the European Union (e.g. the Privacy Shield for the USA) or with consideration for special contractual obligations (known as standard contractual clauses).

Rights of the data subject

You are entitled to request confirmation of whether data is being processed and information about the data, as well as other information and a copy of the data, in accordance with Article 8 of the Data Protection Act (FADP) and Article 15 GDPR.

Under the legal specifications, you are entitled to demand the completion of the data concerning you or the rectification of inaccurate data concerning you.

You are entitled to demand the immediate erasure of data under the legal specifications and you are entitled to demand the restriction of the processing of the data under the legal specifications.

Under the legal specifications, you are entitled to receive data concerning you that you have provided to us and to demand their transmission to another controller.

Furthermore, under the legal specifications, you are entitled to lodge a complaint with a supervisory authority.

Right to withdraw consent

Pursuant to the legal specifications you are entitled to withdraw consent with future effect.

Right to object

Pursuant to the legal specifications, you can object to the future processing of data concerning you at any time. In particular, you can object to your data being processed for direct marketing purposes.

Cookies and right to object to direct marketing

Cookies are small files that are stored on your computer. Cookies can contain various types of information. The primary purpose of a cookie is to store information about you (and the device on which the cookie is stored) during or after your visit to a website. Cookies that are deleted when you leave the website and close your browser window are known as temporary cookies, session cookies or transient cookies. Such cookies might contain the contents of a basket in an online store or a log-in status. Cookies that are not deleted even after you close your browser window are known as permanent cookies or persistent cookies. These cookies make it possible to store a log-in status when you visit the website again after a few days. Likewise, these cookies might contain data on your interests that can be used to measure coverage or for marketing purposes. Third-party cookies are cookies that are provided by other providers than the controller operating the website (compared to first-party cookies provided by the controller).

We may use session and persistent cookies and provide details about them in our privacy policy.

If you do not want cookies to be stored on your computer, please change the settings in your browser to deactivate the corresponding option. You can delete cookies from your browser through your browser settings. Blocking cookies can limit the features of this website.

You can raise a general objection to the use of cookies for the purposes of online marketing with a number of services, especially in the case of tracking, on the American website and the European website Additionally, you can block cookies by deactivating them in the settings of your browser. If you do so, please note that you might not be able to use all of the features of this website.

Changes and updates to the Privacy Policy

We kindly ask you to inform yourself regularly about the contents of our Privacy Policy. We will adapt the Privacy Policy as soon as this is necessary because of changes in the data processing. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Erasure of data

The data that we process will be erased or the processing restricted in accordance with the legal specifications. Unless expressly indicated otherwise in this privacy policy, the data that we store will be erased as soon as it is no longer required for the intended purpose and the erasure does not conflict with any statutory duties of storage. If the data is not erased because it is necessary for other legally admissible purposes, processing will be restricted. This means that the data will be blocked and not processed for any other purpose. This applies, for instance, to data that have to be stored in accordance with tax or commercial law.


The hosting services that we utilise provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use to operate this website.

In this context, we or our hosting provider process the usage data, metadata and communication data of potential customers and visitors to this website in line with our legitimate interest in the secure, efficient provision of this website pursuant to point (f) of Article 6 (1) GDPR in conjunction with Article 28 GDPR (conclusion of a processing contract).

Collection of access data and log files

We or our hosting provider collect data concerning every visit to the server hosting this service (these are known as server log files) on the basis of our legitimate interests in the sense of point (f) of Article 6 (1) GDPR. The access data includes the name of the accessed website or file, the date and time of the visit, the quantity of data served, notification of successful retrieval, browser type and version, the operating system of the user, referring URL (the previously visited page), IP address and the querying provider.

For security reasons (e.g. in order to investigate misuse or fraud), log file information is stored for up to seven days and then erased. Data that have to be stored for longer in order to serve as evidence will not be erased until the incident in question has been resolved conclusively.

Business analyses and market research

In order to run our business economically and identify market trends and the wishes of customers and users, we analyse the data we have concerning transactions, queries, etc. In doing so, we process inventory data, communication data, usage data and metadata on the basis of point (f) of Article 6 (1) GDPR, in which regard the data subjects include customers, potential customers, business partners and visitors to and users of the website.

The analyses are carried out for the purposes of business assessments, marketing and market research. We can take the profiles of registered users with information on their purchases, for example, into account. The analyses help us improve user-friendliness and optimise our website and the cost-effectiveness of our business. The analyses are solely for our own purposes and are not disclosed to third parties, with the exception of anonymous analyses with aggregated values.


When you contact us (e.g. using the contact form, by email, by phone or via social media), your information will be processed in order to process and comply with your query pursuant to point (b) of Article 6 (1) GDPR. Your data can be stored in a customer relationship management system or in a similar query organisation system.

We delete queries as soon as they are no longer necessary. Furthermore, the statutory archiving obligations apply.

Online presences on social media

We maintain a presence on social networks and platforms in order to communicate with customers, potential customers and users who are active on them and provide them with information about our services. When you visit each network and platform, the terms of use and data processing guidelines of each operator apply.

Unless indicated otherwise in our privacy policy, we process the data of users if they communicate with us on social networks and platforms, e.g. by posting comments on our online profiles or sending us messages.

Integration of services and third-party content

In line with our legitimate interests (i.e. our interest in the analysis, optimisation and economical operation of our website in the sense of point (f) of Article 6 (1) GDPR), we use content and services from third-party providers on our website in order to integrate their content and services such as videos or fonts (‘content’).

This always requires the third-party providers of this content to see the IP addresses of users as they cannot send the content to a user’s browser without an IP address. The IP address is therefore necessary in order to display this content. We endeavour only to use content whose providers just use IP addresses to deliver the content. Furthermore, third-party providers might use tracking pixels (invisible graphics also known as web beacons) for statistical or marketing purposes. Tracking pixels make it possible to analyse information such as user traffic on the pages of this website. The pseudonymised information might also be stored in cookies on your device and contain technical information about your browser and operating system, referring URLs, dates and times of visits and other information on your use of our website, and can be combined with similar information from other sources.

Google Analytics

On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and economical operation of our website in the sense of point (f) of Article 6 (1) GDPR), we use Google Analytics, a web analytics service provided by Google LLC (‘Google’). Google uses cookies. The information generated by the cookie about your use of the website is normally sent to a Google server in the USA and stored there.

Google is certified under the EU–US Privacy Shield and therefore guarantees that it will comply with European data protection legislation (

Google will use this information on our behalf for the purposes of evaluating your use of our website, compiling reports on website activity and providing us with other services relating to the use of this website and Internet usage. During this process, pseudonymised usage profiles can be generated on the basis of the processed data.

We only use Google Analytics with active IP anonymisation. This means that your IP address is shortened by Google in a member state of the European Union or other signatories to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.

The IP address sent by your browser will not be associated with any other data held by Google. You can configure your browser to prevent the storage of cookies; additionally, you can prevent Google from collecting and processing the cookie data relating to your use of the website by clicking on the following link to download and install the browser add-on:

For more information on how Google uses data and on how you can change your settings and object, see the privacy policy of Google ( as well as the Google ad settings (

Your personal data will be erased or anonymised after 14 months.

Google Fonts

We use the fonts (‘Google Fonts’) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy:, opt-out:

Google Maps

We use the maps of the service ‘Google Maps’ provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data can include your IP address and location data, although such data cannot be collected without your consent (this is normally provided through the settings of your mobile device). The data can be processed in the USA. Privacy policy:, opt-out:

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via one interface (and so integrate e.g. Google Analytics and other Google marketing services in our online offering). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, reference is made to the following information on Google services. Terms of service:


We use the videos of the platform YouTube that is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy:, opt-out:

AddThis sharing tools

Our website features the service ‘AddThis’ (1595 Spring Hill Rd, Suite 300, Vienna, VA 22182, USA) for sharing content from this website on social networks.

We have a legitimate interest in using the service, i.e. our interest in disseminating our website pursuant to point (f) of Article 6 (1) GDPR.

AddThis uses your personal information to provide the sharing features. Additionally, AddThis can use pseudonymised information about users for marketing purposes. This data is stored on your computer in cookies. Privacy policy:, opt-out:

Generated using from RA Dr Thomas Schwenke