Privacy Policy

This Privacy Policy explains how kantonland.com (the “Website”), operated by Sanchez Sierra - Datia, Hardstrasse 1A, 5600 Lenzburg, Switzerland, collects, uses, stores, discloses, and otherwise processes personal data. It applies to visitors, users, prospects, customers, and other persons who interact with the Website, our communications, or services offered directly or through collaborators. We process personal data in accordance with the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for the processing of personal data on this Website is: Sanchez Sierra - Datia, Hardstrasse 1A, 5600 Lenzburg, Switzerland.

For any privacy-related inquiries, you can reach us at: contact@kantonland.com.

2. Data We Collect

We collect personal data when you provide it to us, when you communicate with us or with collaborators through our services, when you request information or support, when you use the Website, and when third parties lawfully share data with us in connection with a requested or potential service. The categories of personal data we process depend on the context and may include:

Identity and contact data, such as name, email address, phone number, postal address, city, canton, language, nationality or relocation status, and other identifiers needed to communicate with you or manage a request.

Request, case, and preference data, such as the type of service you are looking for, details about your household, move, insurance, housing, finances, timeline, objectives, preferences, and any documents, notes, or other information you choose to provide.

Communication and relationship data, such as messages, call notes, feedback, follow-up history, referral status, collaborator communications, marketing preferences, and records of your interactions with us or our collaborators.

Technical, usage, and device data, such as IP address, browser and device information, timestamps, page interactions, referral data, security-related metadata, and similar information generated when you access the Website or submit a form.

Verification and compliance data, where relevant, such as information needed to prevent abuse, verify requests, document consents, handle complaints, establish or defend legal claims, or comply with legal or regulatory obligations.

We may combine data from different sources and may process additional categories of personal data where this is necessary or appropriate for the purposes described in this policy and permitted by applicable law.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Providing and operating the Website and related services, including accountless interactions, lead handling, referral management, communications, service coordination, editorial offerings, tools, and any other features we make available from time to time.

Responding to inquiries and requests, including contacting you, sending confirmations or updates, evaluating your needs, and arranging follow-up by us or by relevant collaborators.

Facilitating introductions, referrals, quotes, offers, consultations, appointments, and service delivery with collaborators, partners, subcontractors, and licensed professionals active in the relevant field, including insurance brokers, relocation specialists, moving companies or workers, housing or financing contacts, and similar providers.

Managing business relationships and internal operations, including administration, recordkeeping, analytics, service improvement, training, quality assurance, planning, audits, fraud prevention, and protecting our rights and assets.

Sending newsletters, informational messages, service-related communications, and, where permitted, marketing communications about our services or collaborator offers that may be relevant to your request or profile. You can opt out of marketing communications at any time.

Complying with legal, regulatory, contractual, and compliance obligations, enforcing our Terms of Use, and establishing, exercising, or defending legal claims.

We may also process personal data for related, secondary, or otherwise compatible purposes that are reasonably connected to the original purpose of collection or are permitted by applicable law.

Health insurance calculator requests

To see your results in the health insurance calculator, you need to accept this Privacy Policy and our Terms of Use; leaving your contact details is optional. The postcode, year of birth and cover options you enter to calculate premiums are only used to compute your results and are not stored. If you leave your contact details with your results, or request a quote, we process the details you enter: your name, email address, phone number (if provided), postcode and location, year of birth, the people you want to insure, your current insurer (if provided), the supplementary cover you are interested in and, for a quote request, the offer you selected (insurer, model, deductible, accident cover and monthly premium). We use these details to handle your request and, as described in Section 6, may forward them to a licensed insurance intermediary or advisor from our partner network, who prepares a personal offer and contacts you. The legal basis is your consent, which you give by ticking the consent box (see Section 4); you can withdraw it at any time. We only send you marketing emails if you also tick the separate, optional marketing box, which is never pre-ticked.

4. Legal Basis for Processing

Under the Swiss nDSG and, where applicable, the GDPR, we process your personal data based on the following legal grounds:

Consent (nDSG Art. 6 para. 6 / GDPR Art. 6(1)(a)): where you voluntarily submit information, subscribe to communications, accept optional processing, or expressly request to be contacted or referred.

Pre-contractual measures and contract performance (GDPR Art. 6(1)(b)): where processing is necessary to respond to your request, prepare an offer, coordinate a service, or perform obligations arising from a relationship with you.

Legitimate interest (nDSG Art. 6 para. 1 / GDPR Art. 6(1)(f)): where we have a legitimate interest in operating and improving the Website and our business, organizing referrals and collaborations, communicating with users and collaborators, preventing abuse, marketing our services, and protecting our legal and commercial interests, provided that no overriding interests or rights require otherwise.

Legal obligation (GDPR Art. 6(1)(c)): Where processing is necessary to comply with a legal obligation to which we are subject.

5. Third-Party Service Providers

We use third-party services to operate the Website and support our business. These providers may process data on our behalf or, where appropriate, as independent controllers for their own service delivery. Our current key service providers include:

Cloudflare, Inc. (USA): Hosting and delivery of the Website (Cloudflare Workers and content delivery network), spam and bot protection for our forms (Cloudflare Turnstile), and privacy-friendly web analytics (Cloudflare Web Analytics). Turnstile processes technical information such as your IP address and browser characteristics only to check that a form is submitted by a human. Cloudflare Web Analytics is active on the Website: it does not use cookies or similar identifiers, does not track you across websites, and only gives us aggregated statistics such as page views, referring websites and countries. Cloudflare processes data under its Data Processing Addendum and is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.cloudflare.com/privacypolicy/

Resend, Inc. (USA): Email delivery and contact management. Resend sends our emails (for example replies, confirmations and, if you have signed up, our newsletter) and stores our contact list. Depending on how you contacted us, this includes your name, email address, phone number (if provided), postcode and location, the details of a health insurance comparison or quote request, your language and your marketing preference. You only receive newsletters and waitlist updates if you sign up for them (opt-in), and you can unsubscribe at any time using the link in every email or by contacting us. Privacy policy: https://resend.com/legal/privacy-policy

Google LLC (USA): With your consent, we use Google Analytics, a web analytics service provided by Google, to understand how visitors use the Website. Google Analytics is only loaded after you have given your explicit consent in our cookie banner; until then, no Google Analytics cookies are set and no data is sent to Google. Once enabled, Google Analytics uses cookies and similar technologies to collect information such as the pages visited, time spent on pages, traffic sources, approximate location (at a regional level) and device and browser type. IP addresses are anonymised (Google Analytics 4 does not log or store IP addresses), and we use Google Consent Mode so that Google’s tags respect your choice. The data is processed in aggregated or pseudonymised form and used only to understand how the Website performs and to improve our content. Google may process this data on servers outside Switzerland and the EEA; Google is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time via the “Cookie Settings” link in the footer of every page, after which Google Analytics is no longer loaded. Privacy policy: https://policies.google.com/privacy

We may engage additional service providers from time to time to support our operations, including CRM systems, communication tools, analytics and advertising tools, automation platforms, scheduling systems, document and storage providers, payment or invoicing services, compliance providers, professional advisers, and similar infrastructure or business support vendors. Where required, we put in place appropriate contractual, technical, or organisational safeguards.

We may also receive or share information within our network of collaborators where this is relevant to handling a request, identifying a suitable provider, managing a case, measuring performance, preventing abuse, or otherwise operating our services in a lawful manner.

6. Sharing Data with Third Parties

We may share your personal data with third parties in the following circumstances:

Collaborators, Partners, and licensed service providers: When you contact us, request information, ask to be connected, request a quote, consultation, callback, service coordination, or otherwise engage with an offer presented through the Website, we may share relevant personal data with one or more collaborators, Partners, subcontractors, referrers, and licensed or otherwise qualified third parties that can evaluate, prepare, offer, arrange, or perform the requested or related activity. Depending on the case, this may include insurance brokers, relocation consultants, moving companies or workers, housing or mortgage contacts, telecom or utility providers, administrative support providers, and similar collaborators.

Operational and technology providers: We share data with service providers, software vendors, hosting providers, communication platforms, advisers, and other support providers to the extent reasonably necessary to operate the Website and our business.

Business transfers and organisational changes: We may disclose or transfer data in connection with a merger, acquisition, asset sale, financing, reorganisation, succession, or similar transaction involving all or part of our business.

Legal requirements: We may disclose your data if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of KantonLand, our users, or the public.

Once your data is shared with a third party acting as an independent controller, that party may process your data under its own privacy policy, legal terms, and professional or regulatory obligations. We encourage you to review the policies of relevant third parties.

7. International Data Transfers

Some of our service providers, collaborators, and Partners may be based outside of Switzerland or the EEA, or may access data from abroad. When personal data is transferred to a country that does not provide an adequate level of data protection as recognised by the FDPIC or the European Commission, we seek to ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission.

The EU-US Data Privacy Framework or Swiss-US Data Privacy Framework, where applicable.

Other contractual or organisational safeguards as required by applicable data protection law.

The Swiss Federal Data Protection and Information Commissioner (FDPIC) maintains a list of countries providing adequate data protection. You may request information about the safeguards in place for specific transfers by contacting us.

8. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including to manage relationships, coordinate services, document referrals, maintain business records, resolve disputes, comply with legal or regulatory obligations, and establish, exercise, or defend legal claims.

Retention periods vary depending on the type of data, the nature of the interaction, legal requirements, limitation periods, contractual needs, and whether an ongoing or renewed relationship exists with you, a collaborator, or a Partner.

Where data is no longer required, we will delete, anonymise, or archive it in accordance with our legal and operational requirements.

9. Cookies and Tracking Technologies

We only use cookies and similar technologies where they are needed, and non-essential ones only with your consent.

Strictly necessary technologies: Cloudflare processes technical data to deliver the Website securely, and Cloudflare Turnstile processes technical signals to protect our forms against spam and abuse. We also store your cookie choice in your browser’s local storage so that we do not ask you again on every page. These technologies are required to operate the Website and do not require consent.

Cookieless statistics: Cloudflare Web Analytics measures page views and similar aggregated statistics without cookies and without identifying individual visitors.

Analytics cookies (only with your consent): Google Analytics is only loaded if you click “Accept” in our cookie banner. If you decline or make no choice, Google Analytics is not loaded and no Google Analytics cookies are set. You can change or withdraw your choice at any time via the “Cookie Settings” link in the footer. For details on each provider, see Section 5 (Third-Party Service Providers) above.

10. Your Rights

Under the Swiss nDSG (and, where applicable, the GDPR), you have the following rights regarding your personal data:

Right of access: You may request information about what personal data we hold about you and how it is processed.

Right to rectification: You may request correction of inaccurate or incomplete data.

Right to deletion: You may request that we delete your personal data, subject to any legal retention obligations.

Right to restriction of processing: You may request that we restrict the processing of your data under certain circumstances.

Right to data portability: You may request a copy of your data in a structured, commonly used, machine-readable format.

Right to object: You may object to the processing of your data based on legitimate interests.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time (e.g., by unsubscribing from the newsletter, via “Cookie Settings” in the footer, or by contacting us). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at: contact@kantonland.com. We will respond within the time required by applicable law and may need to verify your identity before processing your request.

11. Right to Lodge a Complaint

If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with:

Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland — https://www.edoeb.admin.ch/

If you are located in the EU/EEA, you may also lodge a complaint with your local supervisory authority.

12. Children

This Website is not directed at children under the age of 16. We do not knowingly collect personal data from children in a way that would require parental consent under applicable law. If you believe that a child has provided us with personal data inappropriately, please contact us and we will review the matter promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, legal requirements, or applicable law. Changes take effect upon publication on this page. The date of the last update is indicated at the top of this policy.

We encourage you to review this page periodically to stay informed about how we protect your data.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by the substantive laws of Switzerland, excluding its conflict of laws provisions.

The exclusive place of jurisdiction for all disputes arising from or in connection with this Privacy Policy is Lenzburg, Canton of Aargau, Switzerland. Mandatory statutory provisions regarding jurisdiction for consumers remain reserved.