Privacy Policy

Controller

Balio GmbH
Rennweg 63
8704 Herrliberg
Switzerland

Data protection enquiries: info@balio.ch

This policy is based on the Federal Act on Data Protection (FADP). For persons in the European Economic Area, the GDPR also applies to the extent that it is applicable. This policy applies to the website balio.ch, the application app.balio.ch, the purchase of single dossiers, the parcel analyses prepared by Balio and communication by email and telephone.

Visiting the website balio.ch

The website is hosted by Vercel (Vercel Inc., USA) and delivered via its global network. When you visit, Vercel processes technical access data in server logs: IP address, date and time, the address requested, browser information and the previously visited page. This data is used for the delivery, stability and security of the website.

The website serves fonts, images and the 3D model itself. Your browser loads some content directly from other services. These receive your IP address and browser information and, for maps, also the section displayed:

• the video on the home page and the municipal boundaries and map tiles of the building regulations pages, from Cloudflare's R2 storage (Cloudflare Inc., USA);
• the base map, aerial image, 3D buildings and building data of the building regulations pages, from services of the Federal Office of Topography swisstopo (vectortiles.geo.admin.ch, wmts.geo.admin.ch, 3d.geo.admin.ch, api3.geo.admin.ch);
• parcel boundaries and areas of the building regulations pages, from geodienste.ch, the cantons' service, and, in the Canton of Zurich, from maps.zh.ch;
• on the archived former home page at balio.ch/archiv, map data from vectortiles.geo.admin.ch.

The official bodies process this data under their own responsibility. The website sets no cookies and uses no analytics or tracking services. The enquiry window opens your own email program; the website itself transmits nothing.

Purchasing a single dossier

Order data. For an order, we process the parcel selected (address, municipality, parcel number, EGRID), your email address, the details you enter on the payment page (such as name and billing address), your confirmation of residence or registered office in Switzerland, your acceptance of the T&Cs with version and time, the amount, payment type and payment status, the order number, the times of order and delivery and your messages to us. We need this data to prepare and deliver the single dossier, answer questions and complaints, make refunds, prevent misuse and keep our books.

Payment. Payment is processed by Stripe: Stripe Payments Europe, Limited, Dublin, Ireland, together with Stripe, LLC, USA. You enter card details and TWINT details directly with Stripe. Balio does not see them and receives only the amount, payment type, payment status and the details required for the receipt and accounting. Stripe also processes some payment data for its own purposes, such as fraud prevention and compliance with legal obligations, and sets its own cookies on the payment page for this purpose. Stripe is itself responsible for this processing (see stripe.com/ch/privacy). For transfers to the USA, Stripe relies on the Swiss-U.S. Data Privacy Framework.

Preparation and delivery. The single dossier is prepared automatically on our server at netcup GmbH in Nuremberg and stored in our database at Supabase in Zurich. We send the email with the PDF and link via Resend. The single dossier contains information about the parcel, but neither your name nor your email address. Anyone who knows the link can open the single dossier without logging in; share it only with chosen recipients.

Retention. We deactivate the link twelve months after delivery. We keep order and payment data for ten years because the law requires this for business records and accounting vouchers (Art. 958f CO).

Advertising. We use your email address for delivery and for messages about your order. We send you advertising only if you have consented or, for similar offers of our own, if we informed you of this possibility when you ordered and you did not decline it (Art. 3 para. 1 let. o UCA). Every such email contains an unsubscribe link.

The application app.balio.ch

Access. Like the website, the application is hosted by Vercel; its server functions run in the Frankfurt region. When you access it, Vercel processes technical access data in server logs (IP address, time, address requested, browser type). Data preparation, monitoring of building regulations and preparation of single dossiers take place on a server of netcup GmbH in Nuremberg (Germany). This server does not accept requests from the browser. It processes the details of an order to the extent that it needs them for the single dossier, and no other account data.

Account and login. The application can only be used with an account. You log in without a password, using a link or code sent to your email address. Where offered, you can also log in via Google or Microsoft; we then receive your email address from that provider and, if you have released it, your name. We process email address, name, office and memberships, login times and account settings. You accept the T&Cs on first login; we store the version and time. The provider of the login and the database is Supabase (Supabase Inc., USA); the data is located in the Zurich region (Switzerland).

Subscription and payment. For a subscription, we process the company name, billing address, the email address for invoices, the number of seats, the status of the subscription and the customer number at Stripe. You manage payment methods, invoices and cancellation in Stripe's customer portal; what is stated in the section ‘Purchasing a single dossier’ applies to Stripe.

Protection against misuse. Cloudflare Turnstile (Cloudflare Inc., USA) protects the login against automated access. For this purpose, Cloudflare processes technical information such as the IP address and browser characteristics to distinguish people from programs.

Emails. We send emails with login link and code, invitations and single dossiers via Resend (USA). Resend receives the recipient address and the content of the message for this purpose. Emails to info@balio.ch are received and stored by our email provider IONOS (Germany).

Use. The parcels an account views, the parcel analyses it prepares, the notes and own details it records and the settings it saves remain assigned to the account so that the list of saved parcels, parcel analyses and comparisons work. The browser stores some settings locally; they do not leave the device.

Error reports. If a technical error occurs, the browser sends an error report to the Sentry service (Functional Software, Inc., USA; stored in the European Union region, Frankfurt): error text, browser type, time and the page concerned. For some page views, Sentry also measures loading times. Name and email address are not sent; the browser removes login data and dossier links before sending.

Map and geodata. Balio delivers map tiles, processed geodata, the parcel search and the monitor's alerts via Cloudflare (R2 storage and Workers); Cloudflare sees the IP address during loading. The browser calls official services of the Confederation and the cantons, such as geo.admin.ch, geodienste.ch and the cantonal map and PLR services, directly or via our server; services called directly receive the IP address and the coordinates queried. For the location in a parcel analysis, the browser queries timetables from transport.opendata.ch and OpenStreetMap data on the surroundings from overpass-api.de, using the coordinates of the parcel. Our server calculates driving times via Google Maps Platform (Google, USA); Google receives only the coordinates of the parcel and the destinations, no information about you.

What we do not do

No advertising cookies, no analytics or tracking services, no disclosure of contact details to partners or third parties for advertising purposes, no sale of data. The application uses only technically necessary storage (login session, settings).

Balio makes no automated individual decisions about people (Art. 21 FADP). The score and the market value assess plots, not people.

Contact

If you call or write to us, we process your details (name, contact details, content of the enquiry) in order to answer your enquiry and to prepare any contractual relationship.

Legal bases

Performance and preparation of a contract (account, subscription, purchase of single dossiers, parcel analyses, enquiries), overriding legitimate interests (operation, security, prevention of misuse, troubleshooting, improvement of the models), legal obligations (retention) and consent where we obtain it. Where the GDPR applies, these are Art. 6(1)(b), (f), (c) and (a) GDPR.

Disclosure and transfer abroad

These service providers process personal data on our behalf:

• Vercel Inc., USA: hosting of the website and the application; server functions in Frankfurt, delivery via a global network.
• Supabase Inc., USA: login, database and email functions; data in Zurich.
• netcup GmbH, Germany: server for data preparation, the monitor and single dossiers.
• Cloudflare Inc., USA: protection of the login, delivery of map, search and monitor data and of the home page video via a global network.
• Resend, USA: sending of emails.
• IONOS SE, Germany: receipt and storage of emails to info@balio.ch.
• Functional Software, Inc. (Sentry), USA: error reports; data in the EU.
• Stripe Payments Europe, Limited, Ireland, with Stripe, LLC, USA: payments, partly as independent controllers.
• Google, USA: driving times without personal data and, if you choose this route, login. Microsoft, USA: login, if you choose this route.

According to the decision of the Federal Council, Switzerland, Germany, Ireland and the other EU states provide adequate data protection. Data may reach the USA if a provider is based there or processes data there, even if the data itself is stored in Switzerland or the EU. For the USA, we rely on the Swiss-U.S. Data Privacy Framework where the provider is certified under it (Art. 16 para. 1 FADP), and otherwise on the standard contractual clauses recognised by the FDPIC (Art. 16 para. 2 let. d FADP). We disclose data to authorities only if we are obliged to do so.

Information on third-party plots and buildings

Balio shows information on parcels from public official sources (zones, building regulations, registers, survey) and model values calculated from it. This information relates to the plot, not to the person. Balio does not process land register data, names of owners or information about occupants, and does not establish such links.

Where information on a parcel can be related to an identifiable person, we rely on the overriding interest in the valuation and planning of building land from public sources. Model values are marked as such and supported by a reference. Owners who wish to request information, have incorrectly adopted official information corrected or object to the processing should write to info@balio.ch; we reply within 30 days. We report errors in official sources to the competent body.

Users who record their own information on third-party parcels in Balio (notes, living areas, parcel analyses) are themselves responsible for it and obtain any necessary consents.

Retention

Account data until the account is deleted, then up to 30 days in backups. Server logs and error reports for a short period, no more than 90 days. Links to single dossiers for twelve months from delivery. Enquiries for as long as answering them and any contractual relationship require. Order, contract and invoice data and acceptances of the T&Cs for ten years (Art. 958f CO).

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 25 to 32 FADP). You may withdraw consent at any time with effect for the future. To do so, write to info@balio.ch and prove your identity. Complaints may be lodged with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern; residents of the EEA may also contact the supervisory authority of their country.

Security

Encrypted transmission (TLS), login without a password, protection of the login against automated access, restricted access on the server, separate service users and regular backups. Absolute protection is not technically possible.

Changes

We amend this policy when the processing changes. The version published here applies; its date is shown at the top.