--- title: "Privacy policy – Lavuno" description: "How Lavuno handles personal data on this website and in the platform." url: "https://lavuno.ch/en-GB/privacy/" language: "en-GB" --- # Privacy policy Version 2026-10-18 · Last updated: 18 October 2026 This translation is provided for information. Only the [German version](/de-CH/privacy/) is legally binding. This policy explains which personal data we process on this website, when a management company registers, in the demo, when you book a demo appointment, in winning customers and in the Lavuno platform, for what purpose and for how long. It follows the Swiss Federal Act on Data Protection (FADP). ## Controller Unless stated otherwise, the controller of the processing described in this policy is the provider of Lavuno: Roland Jung, JungMedien\ Forchstrasse 107\ 8132 Egg\ Switzerland Please send questions about data protection to [kontakt@lavuno.ch](mailto:kontakt@lavuno.ch). ## This website This website is static. Fonts, images and the scripts of the page come from the same origin as the page; the website itself sets no cookies and embeds no advertising services. The only third-party service is the usage analysis with Microsoft Clarity (next section). The web server keeps technical access logs (IP address, time, requested page, user agent) to run the service and to detect abuse. These logs are deleted after 90 days. ## Usage analysis with Microsoft Clarity To understand how this website is used and to improve it, we use the analytics service Microsoft Clarity on all its pages. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. The portal, the tenant app and the demo do not use Clarity. - When you open a page, your browser loads a script from Microsoft. It records how you use the page: pages viewed, clicks, mouse movements, scrolling and taps, as well as device type, screen size, browser and operating system, the page you came from, and the time and duration of the visit. Your IP address is transmitted to Microsoft in the process; Clarity derives the country from it. - This produces recordings of individual visits, which we can play back like a video, heatmaps showing where people click on a page and how far they scroll, and aggregated reports. The website asks for no names or contact details; it contains no forms. - Clarity may set cookies: `_clck` stores a random identifier of your browser (up to one year), `_clsk` groups the pages viewed in one visit (up to one day); in addition there are cookies on Microsoft domains such as `MUID` and `CLID`. For visits from Switzerland, the European Economic Area and the United Kingdom, according to Microsoft, Clarity sets no cookies as long as no consent is reported to it. We report no consent; each page view then receives its own identifier. - According to Microsoft, recordings are kept for 30 days, click and heatmap data and individual marked recordings for up to nine months. - Microsoft also processes the data in the United States and under its own terms; details are in the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement). Microsoft Corporation is certified under the Swiss-U.S. Data Privacy Framework (section “Recipients and disclosure abroad”). - The basis is our overriding interest in keeping the website clear and easy to use and in improving it (Art. 31 FADP). - You can object to the usage analysis: send the “Global Privacy Control” signal from your browser, which Clarity honours according to Microsoft, or block scripts and cookies from clarity.ms in your browser settings or with an extension. The website works fully without Clarity. ## When you write to us If you write to [kontakt@lavuno.ch](mailto:kontakt@lavuno.ch) or [security@lavuno.ch](mailto:security@lavuno.ch), we process your message solely to deal with your request. We delete the message and our reply once the request has been dealt with, at the latest twelve months after the last message about it. We only keep a message longer if it belongs to a contract or if the law requires us to; if your enquiry leads to a contact for winning customers, the section “Winning customers” applies. ## Registration of a management company Whoever registers a management company in the portal provides: the name and kind of the organisation, optionally the approximate number of flats, the name and e-mail address of the contact person, optionally their phone number, the country and the language. We also record which version of the terms of use and of this policy was accepted and when, whether you consented to product e-mails (with the time and the version of the consent text), which campaign brought you (UTM details) and from which page (the address without parameters only). We process these details to confirm your e-mail address, to create the account of the management company and to invite you as its first administrator, to prove your acceptance and to manage the customer relationship (section “Winning customers”). We send the confirmation e-mail through an e-mail delivery service. To prevent misuse, we limit the number of registrations per IP address and per e-mail address. - We delete a registration that is not confirmed within 24 hours. - We delete the name, e-mail address, phone number and referring page of a confirmed registration 30 days after the confirmation. - The accepted versions, the consent and the campaign details are kept as evidence until the account of the management company is deleted. - With the confirmation, you become a member of staff of the management company in Lavuno; from then on, your account belongs to the data of the management company (section “Platform for management companies and tenants”). Your consent to product e-mails is voluntary. You can withdraw it at any time, through the unsubscribe link in each such e-mail or with a message to [kontakt@lavuno.ch](mailto:kontakt@lavuno.ch). ## Demo The demo in the portal shows the platform with invented sample data; there you choose the view of a management company, a caretaker or a tenant. The provider is the controller of the processing in the demo. The use of the demo is governed by the [demo terms](/en-GB/demo-terms/). - You receive access through a link that we send to your e-mail address. With your request, we record: the e-mail address, the language, the view you start with, the time and version of the demo terms you accepted, whether you consented to e-mails about Lavuno (with the time and version of the consent text) and a check value of your IP address. We form the check value from the IP address with a secret key; we do not store the address itself for this purpose. In addition, we record the sending of the e-mail, when you opened the link and how many sessions you started. - We process these details to give you access and to limit it, to prove that you accepted the demo terms and to protect the demo against misuse, in particular against automated extraction. We use the check value of the IP address only to investigate misuse. The basis is the demo terms you accept with the request and our overriding interest in protecting the demo (Art. 31 FADP). We send you advertising only with your consent. - We send the e-mail with the link through an e-mail delivery service. The link is valid for 24 hours. We delete the request, including the e-mail address and the check value, 30 days after the request. - If you consented to e-mails about Lavuno, we pass on your e-mail address, the language, the consent with its time and version and the origin “demo” to our customer system after you first open the link; the section “Winning customers” applies there. Without consent, no entry is created there and you receive no advertising. You can withdraw your consent at any time, through the unsubscribe link in every such e-mail or with a message to [kontakt@lavuno.ch](mailto:kontakt@lavuno.ch). - Before you request a link, your browser solves a short computational task that makes automated requests harder. Our own server sets and checks the task, without third parties and without a cookie; it collects no further details about you. - When you open the link, the portal sets a strictly necessary access cookie. It is signed, identifies your browser as authorised and expires with the 24 hours of the link. - If you choose the view of a management company or a caretaker, the portal opens a technical session, which it recognises by a strictly necessary cookie. For the view of a tenant, the tenant app of the demo opens at demo.lavuno.ch; the app sets a session cookie of its own for it, strictly necessary as well. The portal creates the link or QR code for it; it is valid for 15 minutes. Each session ends after 60 minutes at the latest. One further strictly necessary cookie of the portal protects the start of the demo against forged requests. - During a session, the platform counts the retrievals in order to detect automated extraction; whoever retrieves a very large number of pages or data in a short time is slowed down temporarily. For this, it uses only the identifier of the session; it records a conspicuous session in the technical log with a shortened identifier. - Apart from the e-mail address for the link, you provide no personal data; you need no account and no password. Please do not enter real personal data into the sample data either: all visitors use the same demo and see what others enter. - The demo itself sends no messages, neither e-mails nor text messages. - Whatever you enter or change in the demo is deleted every night; the demo then starts again with the same sample data. - The nightly deletion does not cover the technical log of the operations in the demo (audit log entries: which operation took place when), as the platform only ever appends to this log and never alters it afterwards. It does not contain the texts you enter: the platform replaces them with the word “demo” as it writes the entry. ## Appointment booking On the demo page of the portal, you can book an appointment at which we show you Lavuno. The provider is the controller of this processing. You need no account and no password for it. - You provide the appointment you want, your name and your e-mail address, and optionally your company or management company, a phone number and a note. With the booking, we record: the language, the time of the booking and the version of the privacy notice you confirm in the form, and a check value of your IP address. We form the check value from the IP address with a secret key; we do not store the address itself for this purpose. In addition, we record whether and when the two e-mails about the booking were sent. - We process these details to arrange, prepare and hold the appointment with you and to reach you about questions, a postponement or a cancellation; the phone number only if we need to reach you at short notice. The basis is your request. We use the check value of the IP address only to investigate misuse; we base it and the limits below on our overriding interest in protecting the appointment booking (Art. 31 FADP). - After the booking, we receive a notification with your details at [kontakt@lavuno.ch](mailto:kontakt@lavuno.ch), and you receive a confirmation with the appointment as a calendar file at the address you gave. We send both e-mails through an e-mail delivery service. If you want to postpone or cancel the appointment, reply to the confirmation. - We hold the appointment as a phone call or as an online meeting. Before the appointment, we get in touch with the invitation to the meeting or the phone number for the call; you can tell us which option you prefer by replying to the confirmation. If an online meeting takes place, we use Microsoft Teams or Zoom for it. These providers process the data in the meeting under their own privacy policies and may also process it outside Switzerland (section “Recipients and disclosure abroad”). We only pass on to them what the meeting needs. - We store the booking in the platform, to which only we have access, and delete it with all details 30 days after the end of the appointment. We treat the notification in our mailbox and our correspondence with you about the appointment like a message to us (section “When you write to us”). - Lavuno does not pass your booking on to our customer system automatically, and the booking contains no consent to e-mails about Lavuno; you therefore receive no advertising because of it. If the conversation leads to a contact for winning customers, the section “Winning customers” applies. - Before the booking is sent, your browser solves a short computational task that makes automated bookings harder. Our own server sets and checks the task, without third parties and without a cookie; it collects no further details about you. To prevent misuse, we also limit the number of booking attempts per IP address and hour and the number of all bookings within 24 hours. - When it loads the available times, the portal sets a strictly necessary cookie that protects the booking against forged requests; it is the same one that protects the start of the demo. It contains a signed random value and no details about you, and it expires twelve hours after it is set. The appointment booking uses no other cookies and stores nothing else in your browser. - Your details do not appear in the technical logs and metrics of the platform. In the audit log, the platform records only that an appointment was booked, with its start and end, the language and the version of the notice, without name or contact details. The platform only ever appends to this log and never alters it; the entries therefore remain after the booking has been deleted. ## Winning customers To win and look after management companies, housing cooperatives and owners as customers, we keep a customer system. It consists of the CRM Twenty and the automation tool n8n, which we run ourselves on our servers in Switzerland. Only we have access to it, and neither program sends usage data to its maker. - In it, we process details of the organisation, the name, business e-mail address and phone number of the contact person, whether and how you consented to e-mails, any unsubscription and the history of our contacts. - The details come from a registration in the portal or from a request for the demo with consent to e-mails, which Lavuno passes on to the customer system automatically, from your messages and conversations with us, or from publicly accessible sources such as the websites of management companies. - We only send automated e-mails if you have consented or are already a customer and have not unsubscribed. Each such e-mail names us as the sender and contains an unsubscribe link. We contact others by letter or call them on their business number. - We have letters printed and posted by the letter service Pingen; we approve every letter beforehand. We send e-mails from the customer system through an e-mail delivery service. - We delete contacts that do not lead to a customer relationship once 24 months have passed since the last contact; we check this every six months. We keep an unsubscription for as long as we hold details about you, so that we do not write to you automatically again. Data of customers is handled under the section “Customers and contracts”. - We delete the logs of the automation after 14 days and the backups of the customer system after 30 days. ## Customers and contracts For the contracts with our customers, we process details of the organisation, its contact persons and billing contacts, the billing address, invoices and payments. We keep invoices and accounting records for ten years as the law requires; we delete the other contract data once it is no longer needed for the contract and any claims arising from it. ## Platform for management companies and tenants Anyone who uses Lavuno in the portal as a member of staff of a management company, or reaches the tenant app through a QR letter as a tenant, uses the platform on behalf of the management company. The management company is the controller of that processing; the provider is the processor and processes the data only according to the instructions of the management company. - The platform stores the data, including the backups, in data centres in Switzerland, also for management companies from the European Economic Area. The provider currently offers no storage in another country. - No analytics and no advertising services are embedded in the portal or the tenant app. The portal and the tenant app set only strictly necessary cookies for the session. Usage statistics are produced on the server and aggregated. - Other flats appear in the calendar only as a flat code, never with a name. - Retention and deletion follow fixed periods: mobile numbers and e-mail addresses of tenants are deleted by default 30 days after a tenancy ends (the management company can choose 0 to 90 days), message contents by default after 90 days (30 to 180 days). Accounts of staff of the management company are deleted 24 months after the last role assignment. - Access and deletion for a single tenancy are requested through your management company. ## Recipients and disclosure abroad We do not sell personal data and do not pass it on for advertising. We use service providers we need for the operation and bind them to data protection by contract; for the usage analysis of the website, Microsoft is added: - data centres in Switzerland for the servers of the website, the platform and the customer system; - e-mail delivery services for confirmations, links to the demo, booked demo appointments, invitations, notifications and e-mails from the customer system; - text message delivery services for confirmation codes and notifications of the platform; - online meeting services (Microsoft Teams or Zoom) for demo appointments held as an online meeting; - the letter service Pingen for letters for winning customers; - Microsoft Corporation for the usage analysis of the website with Microsoft Clarity (section “Usage analysis with Microsoft Clarity”). The delivery services and the online meeting services may also process data outside Switzerland; Microsoft also processes the data of the usage analysis in the United States. We only disclose personal data to countries whose data protection the Swiss Federal Council recognises as adequate, such as the countries of the European Economic Area, or on the basis of appropriate safeguards under Art. 16 FADP. This also applies to the United States: there only to recipients certified under the Swiss-U.S. Data Privacy Framework or with standard data protection clauses recognised by the Federal Data Protection and Information Commissioner. ## Your rights You have the right to information about your personal data, to its correction and deletion, to receive it in a common electronic format and to object to a processing. You can withdraw a consent at any time. For data from the platform contact your management company; for all other data write to [kontakt@lavuno.ch](mailto:kontakt@lavuno.ch); we usually reply within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner. ## Security Please report vulnerabilities to [security@lavuno.ch](mailto:security@lavuno.ch); the details required by RFC 9116 are at [/.well-known/security.txt](/.well-known/security.txt). ## Changes We adapt this privacy policy when our processing changes. Each version carries a version number and a date; the version published here applies. We record with a registration which version you took note of at that time.