Privacy Policy

1. Responsible Party

Responsible for processing your personal data pursuant to the Swiss Data Protection Act (DSG) is:

Fawana GmbH (Operator of the Adresio brand)
Breitfeldstrasse 31
3014 Bern
Switzerland
Email: support@adresio.ch

2. Principles of Data Processing

We process your personal data only to the extent necessary for the provision of our services. In this regard, we adhere to the following principles:

• Legitimacy: Processing only on one of the grounds mentioned below
• Purpose limitation: Data is used only for the specified purpose
• Data minimization: We only collect what we actually need
• Accuracy: We take reasonable steps to correct inaccurate data
• Data security: Technical and organizational protection measures according to current technology standards
• Transparency: You will always know what happens with your data

Grounds for processing (Art. 6 DSG):

• Contract fulfillment (primary basis for all reporting services)
• Consent (e.g., for optional services)
• Preservation of dominant legitimate interests (e.g., fraud prevention, IT security)

3. What Data We Process

3.1 Basic Data (collected for all reports)

After successful payment, we collect the following personal data:

Personal Data

• First name, last name
• Date of birth
• Civil status
• Place of origin (city of origin)
• AHV number (see special protection provisions under Paragraph 6)

Address Data

• Previous address (street, house number, ZIP code, city, canton, floor)
• New address (street, house number, ZIP code, city, canton, floor)
• Date of moving

Financial Data (only when the corresponding service selection)

• Information about accompanying persons (partner/partner, children, housemates/housemates)
• Pets (animal type, if applicable registration numbers such as AMICUS or ANIS number)

3.2 Service-specific data (only when selected service)

Depending on your service selection, we collect additional data:

3.3 Payment data

The payment processing is carried out exclusively by our payment service provider Worldline Switzerland AG. We do not store complete credit card or bank account numbers. We only receive a transaction confirmation and an anonymized reference number.

3.4 Contact information

• Email address (for Magic-Link access, transaction emails, status updates)

3.5 Technical usage data

• IP address (anonymized after 24 hours)
• Browser type and operating system
• Time of access
• Accessed pages (without tracking beyond sessions)

These data are solely used for system security and error diagnosis.

4. Special category: Documents and OCR processing

For certain services (particularly health and private insurance), you may upload photographs or scans of your insurance policies. These images are processed automatically using optical character recognition (OCR) to extract your policy numbers.

Important: Uploaded photographs and scanned documents are permanently and completely deleted immediately after OCR processing. They are neither archived nor disclosed to third parties.

4b. Processing by manual portal entry (Mode B)

For services without direct API integration (e.g., resident control via eUmzugCH), Adresio employees manually input your personal data on your behalf into the respective government or third-party portal. You will receive the confirmation of entry directly from the respective portal at your specified email address—not through Adresio. The entered data is processed independently by the respective portal; Adresio only stores an internal shipping note (date, service, portal) without a copy of the entered data.

4c. Processing by postal notifications (Mode C)

For positions that accept address changes only by mail, your personal data will be used to create a physical notification letter. This letter will be internally printed, sealed, and sent to the Swiss Post AG. Printing will be done on secure systems; the printed document will be immediately shredded after sealing in a privacy-compliant manner. Adresio will only store an internal shipping note (date, recipient institution, service) — without a copy of the full letter content.

5. Purposes of data processing

We use your data solely for the following purposes:

1. Providing the Address Change Services: Delivery of your new address to the authorities and private entities of your choice
2. Payment Processing: Processing and confirmation of your payment
3. Platform Access: Providing your personal status dashboard via Magic-Link
4. Communication: Sending order confirmation, status updates, and reminders
5. Operational and Security: Error resolution, abuse prevention, system stability
6. Legal Obligations: Retention of documents according to accounting law

6. Special Protection of the AHV Number

The AHV number is a particularly protected date under Art. 5 lit. c DSG. We take the following protection measures:

• Encryption: The AHV number is stored separately from the other personal data and additionally encrypted (Encryption at Rest with a separate key)
• Access Restriction: Only technically necessary system processes have access; no staff access in plain text
• Use Restriction: The AHV number will only be used for reporting to the resident registration and other legally authorized entities
• Deletion: After completing your order and the expiration of the statutory retention periods, the AHV number will be deleted irrevocably

7. Categories of Data Recipients: Important Distinction

The Data Protection Act distinguishes between two fundamentally different categories of recipients. This distinction is crucial to your rights:

Category A – Service Providers: Companies that process your data on our behalf and according to our instructions. We remain responsible for their actions under data protection law.

Category B – Independent data recipients (reporting bodies): Entities to which we forward your data on your explicit instructions. These entities subsequently process the data under their own responsibility. We have no influence over their data processing.

7a. Contracted Processors (Category A)

We employ the following carefully selected contracted processors, who handle your data exclusively on our behalf and according to our instructions:

All contracted processors are contractually bound to comply with Swiss data protection law. Data does not leave Switzerland.

Special Note on Postal Communications: For services that only accept correspondence via mail (e.g., certain banks, private insurers), Adresio creates a physical correspondence letter containing your personal data in your capacity as authorized representative. This is printed internally, sealed, and handed over to Swiss Post AG for delivery. The following safeguards apply:

• Printing occurs on secure, non-public systems
• Documents are shredded immediately after sealing (not archived)
• Adresio retains only a digital shipping note (Date, Recipient, Service) internally, without the full letter content

7b. Reporting Centers as Owned Data Recipients (Category B)

Legal basis

The forwarding of your personal data to notification authorities shall only take place on the basis of your explicit power of attorney and consent pursuant to Art. 6 Abs. 1 DSG («Consent») in conjunction with Art. 31 ff. OR (Representation). Adresio acts as your representative and forwards the data on your explicit instruction — not on its own initiative.

Recipients

Depending on your service selection, we forward your address change and the required personal data on your behalf to, for example:

• Your new municipality's registry office (via eUmzugCH interface or direct transmission)
• The traffic authority of the responsible canton
• Swiss Post AG
• Health insurance companies and private insurance companies
• Telecommunications providers, banks and other recipients you have chosen

Note

These authorities become self-responsible data controllers upon receipt of your data. Regarding their further data processing, storage and your rights as a data subject towards these authorities, their own data protection provisions apply. Adresio is not liable for the data processing of these authorities following successful transmission.

Traceability

Every forwarding of data to a notification authority will be recorded in the audit log with a timestamp and recipient and can be provided to you upon request.

9. Retention Periods

10. Data Security

We protect your data through the following technical and organizational measures:

• TLS encryption for all data transfers (HTTPS)
• Encryption of particularly sensitive data (AHV) at rest
• Access controls and two-factor authentication for system access
• Regular security updates to infrastructure
• Automatic saving (Autosave) in encrypted database
• Complete data storage on servers of Infomaniak Network AG in Switzerland
• Logging of access to particularly protected data

11. Your Rights

As a affected person, you have the following rights according to DSG:

Right to access information (Art. 25 DSG): You can request access to information at any time about the data we process about you.

Right to rectification: You have the right to have inaccurate data corrected.

Right to erasure: You can request the erasure of your data, provided there are no statutory retention obligations.

Right to data portability: You can request that we provide you with your data in a common, machine-readable format.

Right to Restrict Processing: You can request restriction of processing under certain conditions.

Right to Object: Where we process data on the basis of legitimate interests, you have the right to object.

Right to Complain: You have the right to lodge a complaint with the Federal Data Protection and Public Disclosure Commissioner (EDÖB).

To exercise your rights, contact: support@adresio.ch

We will address your request within 30 days.

12. Cookies and Tracking

Adresio uses only technically necessary cookies (session cookies for session management and the shopping cart). No tracking cookies, advertising cookies or third-party cookies are set.

No cross-site tracking occurs. No usage profiles are created.

13. Automated Individual Decisions

Adresio does not make automated decisions that would have significant effects on you, without human verification being possible.

14. Changes to This Privacy Policy

We reserve the right to amend this privacy policy. Registered users will be notified by email of any material changes. The latest version is available at adresio.ch/datenschutz.

15. Contact for Data Protection Concerns

Fawana GmbH (Brand Adresio)
Breitfeldstrasse 31, 3014 Bern
Email: support@adresio.ch

Federal Data Protection and Public Disclosure Commissioner (EDÖB):
https://www.edoeb.admin.ch

As of June 2026