Disclaimer

Below you will find the privacy policy for the website hrs.ch.

HRS expressly guarantees compliance with the provisions of Swiss data protection law. HRS undertakes to ensure the security of systems, programs, etc., that it owns and controls, in accordance with the current state of technology. HRS protects the website and associated systems through appropriate technical and organizational measures against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons.

HRS commits not to pass on data about users to third parties who are not involved in fulfilling contractual obligations. HRS may, however, pass on personal data to authorities in Switzerland or abroad in the context of civil, administrative, or criminal proceedings, provided that a legally binding and enforceable judgment, order, or statutory obligation exists. Activities on the system and connection data are logged by HRS or third-party providers and stored to the extent and for the duration required by law.

The data controller for processing data via this website is:

Controller and Data Protection Officer

The person responsible for all data processing activities related to this website (both as data controller and as data protection officer) is:

HRS Real Estate AG
Reto Hörler
Member of the Executive Management, Eastern Region / Branch Manager
St. Leonhardstrasse 76
9000 St. Gallen, Switzerland

For asserting your rights under data protection law or for questions about the use, collection, or processing of your personal data, please contact: datenschutz@hrs.ch

We consider it our primary responsibility to protect the confidentiality of the personal data you provide and to protect it from unauthorized access.

As a private company, we are subject to the provisions of the Swiss Federal Act on Data Protection (FADP).
We have implemented technical and organizational measures to ensure that both we and our external service providers comply with data protection regulations.

The legislator requires that personal data be processed lawfully, in good faith, and proportionately.
To ensure this, we inform you below about the specific legal definitions, which are also used throughout this privacy notice:

(1) Personal data must be processed lawfully.

(2) Processing must be carried out in good faith and must be proportionate.

(3) Personal data may only be collected for a specific purpose that is apparent to the data subject and may only be processed in a manner compatible with that purpose.

(4) Personal data must be destroyed or anonymized once they are no longer necessary for the intended purpose.

(5) Anyone processing personal data must ensure their accuracy. They must take reasonable measures to rectify, delete, or destroy any data that is incorrect or incomplete with regard to its purpose. The appropriateness of such measures depends particularly on the nature and scope of the processing and the risks it may pose to the privacy or fundamental rights of the individuals concerned.

(6) If consent is required, it is only valid if given voluntarily and based on adequate information for one or more specific processing operations.

(7) Consent must be explicit for:
a. the processing of particularly sensitive personal data;
b. high-risk profiling by a private individual; or
c. profiling by a federal authority.

Below, we inform you about the collection of personal data when using our website. Personal data includes, for example, your name, address, email address, and user behavior.

When you use our website for informational purposes only — meaning without registering or transmitting any information to us — we only collect the personal data that your browser transmits to our server.

If you simply want to view our website, we collect the following data, which is technically necessary for us to display the website correctly and ensure its stability and security:

• IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transmitted

• Referring website

• Browser used

• Operating system and its interface

• Language and version of the browser software

After a technical evaluation, this data is deleted immediately.
The purpose of this data collection is to ensure a proper display of our website offering, and to protect security and confidentiality.

We use a cookie consent tool (Cookiebot by Usercentrics from Denmark) to obtain valid user consent for cookies and cookie-based applications that require consent.

When you visit our website, a banner is displayed via this consent tool. Within the banner, users can give consent for specific cookies and/or cookie-based applications by ticking a checkbox.
The tool blocks all cookies that require consent until the user has given such consent by actively checking the relevant boxes. This ensures that cookies are only placed on your device if you explicitly agree to them.

To uniquely assign page visits to individual users and record and store their consent settings for the duration of a session, the cookie consent tool collects specific user information (including IP address) when you visit our site. This information is transmitted to the consent tool provider’s server and stored there.

This disclosure of data occurs in accordance with Art. 45c(b) of the Swiss Telecommunications Act (FMG). As data controllers, we are legally required to ensure that non-essential cookies are used only with the user’s explicit consent.

When using our website, information may be accessed (e.g. IP address) or stored (e.g. cookies) on your device. This access or storage may involve further processing of personal data under the meaning of the Swiss FADP.

In addition to the aforementioned data, cookies or similar technologies such as pixels (hereafter generally referred to as “cookies”) are used on your device when you visit and use our website.
Cookies are either small databases stored by your browser on your device to save certain information or image files such as pixels.

When you revisit our website using the same device, the information stored in the cookies is either returned to our website ("first-party cookie") or to another website that owns the cookie ("third-party cookie").

The website that recognizes the cookie can then determine that you have previously visited it with your browser.
We use this information to tailor our website to your preferences and display it optimally.
Only the cookie itself is identified on your device. Any storage of personal data beyond this occurs only with your explicit consent or if it is strictly necessary to use the service you have requested.

• Strictly necessary cookies (Type a)

• Functional and performance cookies (Type b)

• Consent-based cookies (Type c)

These cookies are essential for the proper functioning of the website.
They are used exclusively by us and are therefore first-party cookies.
This means all information stored in these cookies is sent back only to our website.

For example, these cookies ensure that you stay logged in across different pages once you have signed in, so you don’t need to re-enter your login credentials on each page.

Strictly necessary cookies can be used without your consent.
For this reason, they cannot be individually deactivated.
However, you can deactivate cookies entirely in your browser settings at any time (see below).

Functional cookies allow our website to remember information you have already entered (such as your registered name or selected language) and provide you with enhanced, personalized features.
These cookies collect and store only anonymized information and do not track your activity on other websites.

Performance cookies gather information about how our website is used, to help us improve its attractiveness, content, and functionality.
For example, they help us determine which pages are visited, how much time is spent on them, what search terms led you to us, and what devices or regions you’re browsing from.
Mouse movements, clicks, and scrolling behavior may also be tracked to determine areas of high user interest.
This helps us optimize our website to better serve our users.

IP addresses transmitted for technical reasons are anonymized automatically and do not allow for user identification.

You may opt out of functional and performance cookies at any time by adjusting your cookie settings.

Cookies that are not strictly necessary (Type a) or functional/performance cookies (Type b) are used only after you have given your explicit consent.

We may use information derived from an anonymized analysis of visitors’ browsing behavior, obtained via cookies, to show you targeted advertisements for certain products on our website.
We believe this is beneficial to you as a user, since it means we can display ads or content we assume will match your interests, rather than random or irrelevant advertising.

Marketing cookies come from external advertising companies (third-party cookies) and are used to collect information about the websites visited by users.
This data helps build interest-based user profiles and enables targeted advertising.

The processing of cookies is based on Art. 45c lit. b of the Swiss Telecommunications Act (FMG).

You can also manage cookies used for online advertising via self-regulation tools available in many countries, such as:

• https://www.aboutads.info/choices (USA)

• http://www.youronlinechoices.com (EU)

You can also configure your internet browser to generally prevent cookies from being stored on your device, or to prompt you each time before a cookie is set.
Cookies already saved can be deleted at any time.

Detailed instructions on how to do this can be found in the help section of your browser.

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

When using Google Analytics 4, “cookies” are deployed. These are databases stored on your device that allow us to analyze your use of our website.
The data collected through cookies about your use of the website (including your IP address, shortened before transmission – more on this below) is typically sent to and stored on a server operated by Google. This may also include the transfer of information to servers belonging to Google LLC in the United States, where further processing may occur.

Google Analytics 4 also allows for server-side tracking, which lets us pseudonymize user data on our own server before it is sent to Google.

With Google Analytics 4, the IP address transmitted by your device is automatically collected and processed in a pseudonymized manner, meaning it cannot be directly linked to you as a person.
If we do not perform server-side pseudonymization, Google will still automatically truncate your IP address before it is processed – either in Switzerland, an EU Member State, or another country that is part of the European Economic Area (EEA).

Google uses this data on our behalf to evaluate website usage, compile activity reports, and provide us with additional services related to website and internet usage.
The IP address sent by your device and processed by Google Analytics 4 is not combined with any other data held by Google.
Data collected through Google Analytics 4 is retained for two months and then deleted.

Google Analytics 4 enables us to analyze demographic characteristics such as age, gender, and interests of users.
This is done by evaluating interest-based advertising and third-party information.
It helps us identify and differentiate between user groups for the purpose of optimized marketing.
However, the demographic data collected is not linked to any specific person.

These data are also stored for two months and then deleted.

All processing operations described above – especially the setting of Google Analytics cookies to store and read data from your device – occur only if your browser is set to accept cookies.
Otherwise, Google Analytics 4 will not be used during your session.

We have signed a data processing agreement with Google, requiring them to protect our website users’ data and not share it with third parties.

Google has signed the EU Standard Contractual Clauses, as recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC):
https://ec.europa.eu/info/law

Further legal information on GA4:

• Google Privacy Policy

• Google’s Partner Sites

Note: You can disable cookies at any time via your web browser.

Our website uses Google Ads, an online advertising platform operated in collaboration with Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
The purpose is to guide visitors to our site through targeted advertising based on specific user groups.

As part of this online advertising program, we also use Google Conversion Tracking.
When you click on an ad provided by Google, a cookie is placed on your device for the purpose of tracking conversions. These cookies — small databases — are stored by your web browser.

Using the cookie, both Google and we can recognize that you clicked on an ad and were redirected to our website.

Each Google Ads customer receives a unique cookie, which cannot be tracked by other Google Ads customers.
Conversion cookies are only used to compile conversion statistics for Ads clients who have enabled conversion tracking.
These statistics tell us how many users clicked on an ad and were redirected to a conversion-tagged page.
However, no information is provided that personally identifies users.

If you do not wish to participate in tracking, you can opt out by disabling the conversion cookie in your browser settings.
In that case, your data will not be included in the conversion tracking statistics.

Google has signed the EU Standard Contractual Clauses, which are recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC):
https://ec.europa.eu/info/law

Further information on Google Ads and conversion tracking can be found in Google’s privacy policy:
https://www.google.de/policies

Please note: You can reject cookies at any time by disabling them in your web browser.

We use Google Tag Manager, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Tag Manager is a tag management system that allows us to manage website tags through an intuitive user interface, especially for marketing purposes.
The Tag Manager itself does not collect any personal data. It solely facilitates the deployment of other tags, which in turn may collect data.

Specific information about third-party providers whose tags may be triggered via Google Tag Manager is included in their respective privacy policies.
However, such information is not accessed or processed by the Tag Manager.

If you have chosen to deactivate cookies or made other adjustments (e.g., opt-outs), these settings are respected for all tracking tags that are implemented via Google Tag Manager.
This ensures that the Tag Manager does not modify your cookie settings or preferences in any way.

We remind you again: You can reject cookies at any time by disabling them in your web browser.

We maintain a presence on the Instagram platform, which is accessible via a link on our website.
The provider of the platform is Meta Platforms Ireland Limited, Hanover Reach, 5–7 Hanover Quay, Dublin 2, Ireland.

Please note that you use this Instagram page and its functions under your own responsibility.
This applies particularly to the use of interactive features (such as commenting or liking posts).

When you visit our Instagram page, Instagram collects various data, including your IP address and other information stored in cookies on your device.
This information is used to provide us, as the operator of the Instagram page, with statistical insights into the use of our content.

The data collected about you in this context is processed by Instagram Inc. and may be transferred to countries outside Switzerland and the European Union.
Meta Platforms outlines what data Instagram collects and how it is used in its Privacy Policy.
You will also find contact information and options for managing your ad preferences there.

The extent to which Instagram uses data from visits to pages like ours for its own purposes, assigns this data to individual users, stores the data, or shares it with third parties is not clearly specified by Instagram and is unknown to us.

When you access an Instagram page, your device’s assigned IP address is transmitted to Instagram.
According to Instagram, this IP address is anonymized after 90 days.
In addition, Instagram stores information about users’ devices (e.g., via the “login notifications” function). This may allow Instagram to link IP addresses to individual users.

If you are currently logged in to Instagram, a cookie with your Instagram ID is stored on your device.
This allows Instagram to track that you visited this page and how you interacted with it.
This also applies to all other Instagram pages you visit.

We have integrated a link to LinkedIn, the professional networking platform operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

We also maintain an official company page on LinkedIn. This page is used to actively and professionally engage with potential employees.
Through it, we also share updates about our company and represent ourselves to the public.

We are jointly responsible with LinkedIn for the operation of this page.
This means we maintain what is known as "joint responsibility" in relation to user data.
We have concluded a corresponding agreement with LinkedIn in accordance with the Swiss Data Protection Act (DSG).

It is possible that user data may be processed on servers located outside of Switzerland.
Any international data transfers are based on Article 17 of the Swiss Data Protection Act.

For detailed information about how we and LinkedIn process and use personal data, as well as how you can contact LinkedIn and exercise your rights or privacy preferences, please refer to LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy

Please note that our website includes an integration with the platform X (formerly Twitter), a multilingual, publicly accessible microblogging service where users can publish and share so-called “tweets.”
These short messages are visible to everyone, including people who are not registered on X.
Tweets are also shown to a user’s followers — other X users who subscribe to their activity.
Additionally, X allows for broader reach via hashtags, mentions, and retweets.

The platform is operated by X, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

The data you provide while using this service is processed by X Inc. and may be transferred to countries outside of Switzerland and the European Union.
This data may include your IP address, the application used, information about your device (including device ID and application ID), pages visited, your location, and your mobile provider.

This information is linked to your X account/profile.
We have no influence over the type or extent of data processed by X, how it is processed or used, or whether it is shared with third parties.
More details are available in X’s privacy policy:
https://twitter.com/en/privacy

You can restrict how your data is processed via your X account settings, especially under “Privacy and Security.”
On mobile devices, you can also restrict X’s access to other apps in your device settings.
Further details can be found in X’s support articles:
https://support.twitter.com/articles/105576

Please note: You use X and its features at your own responsibility.

We have embedded YouTube videos in several places on our website.
The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereafter “YouTube”).

When you visit a page with an embedded YouTube plugin, a connection to YouTube’s servers is established.
In doing so, YouTube is informed of which pages you are visiting.

If you are logged into your YouTube account, YouTube can associate your browsing behavior directly with your personal profile.
You can prevent this by logging out of your YouTube account before visiting our site.

When a YouTube video is started, the provider places cookies that collect data about user behavior.

This website uses the Selligent Marketing Cloud software (provided by Selligent SA, Belgium) to send newsletters.

The newsletter contains updates and additional information about our company.
By registering for the newsletter, and based on the consent you provide, you will receive personalized content related to our services.

We evaluate your click behavior on our website and within the newsletter in order to compile content relevant to you.

By subscribing, the user consents exclusively to the use of their email address and the stated interests for the purpose of newsletter distribution.
We log the registration process to be able to demonstrate compliance with legal requirements. This logging includes the IP address of the device used to register, as well as the date and time of registration.

Your data is stored as long as your newsletter subscription is active.

The newsletter is sent sporadically. In individual cases (e.g., special promotions), it may be sent weekly.

The data may be forwarded to a customer management platform, which may also be accessed by service providers involved in sending the newsletter.

If you do not interact with the newsletter (e.g., do not open it), the data will be automatically deleted after 24 months.

If you no longer wish to receive the newsletter, you may unsubscribe at any time by clicking the link provided in every newsletter or by sending us your withdrawal of consent via email.

The legal basis for this data processing is your consent.

If you contact us via email or through our contact form, the data you provide (e.g., your email address, possibly your name and phone number) will be stored by us in order to respond to your inquiry.

We delete the data collected in this context once it is no longer necessary for storage — for example, when your inquiry has been resolved.
If legal retention obligations apply, we restrict the processing instead of deleting the data.

If the contact leads to the initiation of a contract, we process your data in accordance with the applicable provisions as described above.

The legal basis for this data processing is your consent.

We process your data only as long as is necessary to fulfill our contractual obligations or comply with legal requirements, and to maintain our relationship with you.

We provide information about the specific retention period for your data in the relevant sections of this privacy policy.
If no specific retention period is mentioned, it is because the duration depends on individual factors (e.g., the term of a contract, enforcement of claims, etc.).
In such cases, we base our storage duration on the principles of data minimization and proportionality.

As long as you do not object or withdraw your consent, we will continue to use your data to maintain and strengthen our trustworthy business relationship to the mutual benefit of both parties.

If you request deletion of your data, we will promptly delete it unless legal retention requirements prevent us from doing so.

(1) If personal data is being processed, you may at any time request information about it and about the following:

(2) You will receive the information needed to exercise your rights and to ensure transparent data processing. In all cases, we will provide the following details:

a. Information about us as the data controller
b. The categories of personal data we are processing
c. The purpose of the processing
d. The retention period for the personal data, or the criteria used to determine this period
e. The available information about the origin of your personal data, if it was not collected directly from you
f. Where applicable, whether automated individual decisions are made and the logic involved in such decisions
g. If applicable, the recipients or categories of recipients to whom personal data is disclosed, and the information required under Article 19(4) of the Swiss Data Protection Act (DSG)

(3) Personal data related to health may be disclosed to you with your consent through a healthcare professional designated by you.

(4) If we as the data controller have your personal data processed by a data processor, we are required to inform you accordingly.

(5) We as the data controller must provide you with this information free of charge. The Swiss Federal Council may specify exceptions, particularly if providing the information would require disproportionate effort.

(6) Information will generally be provided within 30 days.

(1) As a data subject, you may request that we, as the data controller, provide you with the personal data that you have shared with us in a commonly used electronic format, if:

a. The processing is carried out using automated procedures, and
b. The data is processed based on your consent or in direct connection with the conclusion or execution of a contract between you and us.

(2) You may also request that we, as the data controller, transfer your personal data to another data controller, provided that the conditions in point 1 are met, the transfer is technically feasible, and it does not require disproportionate effort.

(3) We, as the data controller, must transfer or disclose your personal data free of charge. The Swiss Federal Council may provide exceptions, particularly if the effort involved would be disproportionate.

(1) We, as the data controller, may refuse, restrict, or delay the disclosure or transfer of personal data based on the grounds specified in Article 26, paragraphs 1 and 2 of the Swiss Data Protection Act (DSG).

These grounds may include, for example, overriding private or public interests, legal confidentiality obligations, or when disclosure would impair the realization of a legal or official task.

We are pleased that you are interested in working with us and that you have either applied or are considering applying for a position within our company.
We would like to provide you with the following information about how we process your personal data during the application process.

We process the data you submit in connection with your application to assess your qualifications for the position (or for other open positions within our company) and to carry out the recruitment process.

The processing of your data is lawful if it is necessary in connection with the decision on establishing an employment relationship.

In the event of a rejection, applicant data is deleted after 6 months.
If you have consented to the further storage of your personal data, we will add your information to our applicant pool, where it will be retained for up to two years.

If your application is successful and leads to an offer of employment, the data will be transferred from the applicant system into our personnel information system.

Your application data is initially reviewed by our HR department.
Suitable applications are then internally forwarded to the responsible department heads for the respective position.
Only individuals involved in the recruitment process will have access to your data.

The data is processed exclusively in data centers located in Switzerland.

Our services are generally intended for adults.
Individuals under the age of 18 should not send us personal data without the consent of a parent or legal guardian.

If parts or individual phrases of this text do not, no longer, or do not fully comply with the applicable legal situation, the content and validity of the remaining parts of this document remain unaffected.