Data protection declaration

Last updated: July 31, 2026

1. Responsible

The person responsible for data processing on this site, within the meaning of the Swiss Data Protection Act (FADP) as well as the EU General Data Protection Regulation (GDPR), is:

Yilmaz Platform Solutions
Kreuzstrasse 16
8953 Dietikon
Switzerland
UID: CHE-234.206.612
Email: info@online-offerten.ch

The Online-Offerten.ch platform is operated in connection with this business. Online-Offerten.ch is a connecting platform for quotes in the areas of moving, cleaning, painting as well as clearance/evacuation. We do not carry out these services ourselves, but forward requests to verified partner companies.

For any questions relating to data protection or the exercise of your rights, you can contact us at any time at info@online-offerten.ch.

2. Principles and legal bases

We process personal data only to the extent necessary to provide our services or where another legal basis exists. Processing is carried out according to the principles of good faith, finality, proportionality, transparency and data security.

Depending on the processing, we rely in particular on the following legal bases:

• Execution of the contract or pre-contractual measures (art. 31 al. 2 let. a FADP / art. 6 al. 1 let. b GDPR) – p. ex. processing your request for quotes or partner registration
• Consent (art. 31 al. 1 FADP / art. 6 al. 1 let. a GDPR) – p. ex. for analysis cookies
• Legitimate interests (art. 31 al. 2 let. c FADP / art. 6 al. 1 let. f GDPR) – p. ex. to guarantee IT security and prevent abuse
• Legal obligations (art. 6 al. 1 let. c GDPR) – p. ex. tax and commercial retention obligations

3. Visit our site

When accessing our site, our hosting provider automatically processes, for technical reasons, information, including the IP address, date and time of access, the page viewed, the browser used as well as the operating system (server logs).

These data are processed to provide the site, guarantee IT security and prevent abuse (legitimate interest).

For approximate geolocation (e.g. displaying regional content such as “moving to Zurich”), we additionally call the service ipapi.co (Kaffeine Inc., USA). Your IP address is transmitted in real time to ipapi.co, evaluated (only country and city for Switzerland) and then no longer stored by us. The result (city) is cached exclusively in your browser (LocalStorage) for 24 hours.

4. Request for quotes (customers)

If you request a free quote via our form, we process the data you provide in the steps. Depending on the service chosen (moving, cleaning, painting, clearance/evacuation), this may include:

Contact and identity data: title, first and last name, where applicable company name, email address, telephone number, desired contact time.

Project and address data: departure and arrival address (street, postal code, town, country), object type, number of rooms, floor, elevator, parking, desired date, flexibility, distance (if calculated).

Specific information on the service: type of removal or cleaning, information on painting work (interior/exterior, surfaces), extent of clearance/evacuation, surface area in m², types of floors, special goods (e.g. piano, chest, machines), additional services, storage, comments, desired number of quotes and how you found out about us.

Consent and protocol data: confirmation of data protection information, time of request, technical connection data.

The communication of this data is in principle voluntary. However, without fields marked as necessary, we cannot forward your request to suitable partners.

Purpose: receipt, qualification and transmission of your request to suitable partner companies in your region, as well as sending a confirmation email with a status link.

Legal basis: pre-contractual measures at your request, respectively your explicit consent when sending the form.

5. Transmission of your request to partners

Online-Offerten.ch is a networking platform. To prepare quotes, we forward your request to selected and verified partner companies in your region. This is done in two steps:

a) Anonymized overview: Before a partner unlocks your mandate, they only see an anonymized overview (e.g. type of service, approximate location/postal code, floor, elevator, approximate extent). Your contact details (title, first/last name, email, telephone, exact street, contact time) are not disclosed at this stage.

b) After unlocking by the partner: only when a partner unlocks your mandate by means of credits or a subscription, this company receives your full contact details to send you an individual quote. The partner then becomes independently responsible for the further processing of your data and is subject to its own data protection declaration.

By sending the form, you expressly consent to this transmission for the purposes of establishing quotes and making direct contact.

Online-Offerten.ch is not a party to the contract between you and the partner. The service contract is concluded exclusively between you and the partner company concerned.

6. Registration and use by partners

If you register as a partner company and use the partner dashboard, we additionally process the following data:

Company and contact data: company name, contact person, e-mail, telephone, address, website, year of foundation, number of employees, commercial register number, information on civil liability insurance, categories of services and regions of intervention, description, consent to the T&Cs.

Access data: encrypted password (hash) for the connection, managed by our authentication provider Supabase.

Usage and transaction data: credit balance, purchased requests, subscriptions, reviews received, communication with customers within the platform.

Payment data: to top up credits or purchase subscriptions, you are redirected to our payment provider Stripe. Payment data (e.g. card data) is processed directly by Stripe and is not accessible to us. We only receive confirmation information (transaction ID, amount, status).

Purpose: execution of the contract, provision of the partner dashboard, invoicing and quality assurance (verification of company data, e.g. RC registration). Optionally submitted insurance documents are reviewed for assignment of an “Insured” badge in the public profile.

Legal basis: execution of the contract, legal retention obligations as well as legitimate interest in a quality connection platform.

7. Clarification: What does “verified” mean?

In the context of this statement as well as our site, emails and other communications, the expression “verified” or “verified partner companies” or comparable formulations means exclusively the minimum criteria described below. This is not a comprehensive quality, solvency, personnel or individual mandate audit.

“Verified” in the sense of Online-Offerten.ch means concretely:

• Registration in the Swiss commercial register: the partner company is registered in the central Swiss business index (ZEFIX); we check the existence and activity of the number indicated before activation.
• Headquarters and activity in Switzerland: the indicated headquarters is located in Switzerland; services are offered via the platform for customers in Switzerland.
• Active profile after manual activation: the partner profile is only activated after examination of the master data by our team – not automatically only by sending the online form.
• Contractual self-declaration: the partner confirms during registration and the CG for partners in particular that it has valid civil operating liability insurance as well as the necessary authorizations and qualifications.

Optional – additional signal “Insured”: partners can voluntarily submit insurance documents. They are examined manually; if accepted, an “Insured” badge appears in the public profile. The badge is voluntary and is not a condition for a business to be considered “verified” in the above sense or to receive applications.

What we do not check: we do not carry out operational visits, no examination of individual work on site and no continuous monitoring of activity. The price, execution and quality of the service are solely the responsibility of the partner and the agreement between client and partner.

8. Making contact

If you contact us by e-mail or via the contact form, we process the information you voluntarily provide (in particular name, e-mail, telephone and message content) exclusively to respond to your request.

The legal basis is the execution of pre-contractual measures, respectively our legitimate interest in effective communication.

9. Service providers used (subcontractors)

For the provision and operation of our platform, we use carefully selected service providers, with whom – where data protection law requires it – subcontracting contracts have been concluded:

• Hosting and frontend: Vercel Inc. (USA) – delivery of our application takes place via servers in the EU (Frankfurt, Germany). We additionally use Vercel Speed Insights to measure page performance.
• Database, authentication and server functions: Supabase Inc. (USA) – our database and server-side functions are operated in the EU (Frankfurt, Germany). Your form and account data are stored there.
• Sending emails: Resend, Inc. (USA) – EU server location (Ireland). Resend is used for confirmation, notification and system emails to customers, partners and administrators.
• Payments: Stripe Payments Europe, Ltd. (Ireland) or Stripe, Inc. (USA). Stripe processes payment data under its own responsibility in accordance with the Stripe data protection declaration.
• Web analysis: Google Tag Manager (GTM-PNCCCGC5) as well as Google Analytics 4 from Google Ireland Ltd. / Google LLC (USA). These services measure site usage and the success of our campaigns.
• Product Analytics (PostHog): PostHog Inc. (USA) – we use PostHog to analyze the use of the site and improve the quote (in particular page views, paths and replay session). Processing takes place via the UE PostHog cloud (eu.i.posthog.com). PostHog is only activated after your consent via the cookie banner. Information: PostHog statement.
• Maps and fonts: Google Maps and Google Fonts from Google Ireland Ltd. / Google LLC (USA). Google Maps is only loaded on pages with maps. Fonts are delivered via next/font; a connection to Google servers can take place.
• Geolocation (IP): Kaffeine Inc. / ipapi.co (USA) – for an approximate location (city) of visitors in Switzerland.

Further information on the data protection of each provider can be found in their respective declarations.

10. Cookies, LocalStorage and similar technologies

We use cookies and similar technologies (including LocalStorage) on our site. They are partly technically necessary, partly intended to measure and improve our quote.

a) Technically necessary cookies and storage values:

• Session cookies for partner dashboard login (Supabase Auth)
• Temporary storage to prevent duplicate form submissions
• Local cache of your approximate city for 24 hours (userLocation)

b) Analysis, marketing and performance measurement:

• Google Tag Manager and Google Analytics 4 (usage statistics)
• PostHog (product analytics and session replay – understanding of the journey and targeted improvement of the site; storage in particular by cookie and LocalStorage)
• Google Ads tags conversion and remarketing (measurement of the success of our campaigns)
• Vercel Speed Insights (measurement of loading times)

The analysis services (Google Analytics and PostHog) are only activated if you accept the “Analysis” category in the cookie banner. You can withdraw your consent at any time by reopening the cookie settings or deleting the preferences saved in your browser.

You can limit or prevent the storage of cookies and similar technologies through your browser settings. In this case, not all functions of the site may be fully usable.

11. Data transfer abroad

The processing and storage of your primary data (form data, partner account information) generally takes place on servers in the EU (Germany/Ireland).

Within the framework of the service providers mentioned above, a transfer of personal data to third countries – in particular the USA – may however take place, in particular for:

• Stripe (payments)
• Google (Tag Manager, Analytics, Maps, Fonts)
• PostHog Inc. (product analytics; storage via the EU cloud, possibly support/administration access from the USA)
• ipapi.co (geolocation via IP)
• Parent companies of our EU providers (Vercel, Supabase, Resend), if support or administration access from the USA takes place

For these transfers, we use – if necessary – appropriate safeguards, in particular the standard contractual clauses of the European Commission, or we rely on adequacy decisions (e.g. EU-US Data Privacy Framework), to the extent that they exist. On request, we will provide you with further information on the protective measures taken.

12. Shelf life

We retain personal data only as long as necessary for the purposes concerned or as required by legal retention obligations (including commercial and tax obligations, up to 10 years).

• Requests for quotes: retention for the duration of the connection as well as for the follow-up of any questions, then deletion or anonymization.
• Partner accounts: retention during the commercial relationship plus the legal retention periods.
• Payment data or transaction proof: retention according to legal requirements (generally 10 years).
• Communication by e-mail: retention for as long as necessary to process your requests.
• Server logs: short-term retention for security purposes by the host.

13. Data security

We take appropriate technical and organizational measures to protect your data against loss, manipulation and unauthorized access. These include:

• encrypted transmission via SSL/TLS
• role-based access controls in the partner and administration area
• regular updating of the software used
• secure processing of passwords by our authentication provider (hashing)
• selection of trusted providers with a corresponding level of data protection

Despite these measures, no IT system can guarantee absolute protection.

14. Your rights

Within the framework of the law applicable to data protection, you have in particular the following rights:

• Access to processed data concerning you
• Rectification of inaccurate or incomplete data
• Erasing of your data, insofar as there is no legal retention obligation objects to it
• Limitation of processing
• Opposition to certain processing, in particular for reasons relating to your particular situation
• Portability of data, to the extent provided by law
• Withdrawal of given consent, with effect for the future

To exercise your rights, informal communication to info@online-offerten.ch is sufficient. To prevent abuse, we may require appropriate proof of identity.

If you consider that the processing of your data violates applicable law, you can also file a complaint with the competent supervisory authority:

• In Switzerland: Federal Data Protection and Transparency Officer (PFPDT), www.edoeb.admin.ch
• In the EU: with the competent data protection authority of your place of residence or work

15. Automated individual decisions

No exclusively automated decision-making within the meaning of art. 21 FADP resp. of art. 22 GDPR (including profiling with legal effect) takes place on our platform. The allocation of requests to partners is carried out on the basis of the service and the region; the decision to establish a quote always rests with the partner concerned.

16. Changes to this statement

We adapt this data protection declaration if necessary, e.g. ex. when we use new services or legal requirements change. The version published on this page is authentic. We recommend consulting this page regularly.

Status: July 31, 2026