Privacy notice

Provider / legal entity

Sumexia GmbH

Correspondence address

Bahnhofweg 17, 5610 Wohlen

국가

Schweiz / Switzerland

이메일

info@cone24.com

Version: 14 October 2026. This notice describes the current CONE24 preparation and pilot environment.

Data we process

When you visit, the hosting server processes your IP address, time, requested page and technical status for delivery and security. Account functions process the name, email, password hash, language, country and contact details you enter. If you use listings, uploads or messages, we also process that content, delivery details and abuse reports. Submit identity documents only when a verification step asks for them; they require restricted handling. Administrators with user-management access can see whether a signed-in CONE24 page has reported activity within 90 seconds and its last activity time. We store a one-way session identifier and activity timestamps for up to 30 days; this feature does not record page contents, IP addresses or devices.

Why we process data

We use data to provide pages, accounts, listings and communication, verify access, handle support and reports, prevent abuse and maintain the service. Platform analytics collection, data sales and AI training collection are disabled in this pilot. Registration does not authorize those activities. Swiss data protection law applies; applicable rights under other laws remain available.

Recipients and services abroad

Public profiles, published listings and their media are visible to visitors. Messages are available to their participants and authorized personnel where needed for support or moderation. Contabo provides the hosting in its EU region; infrastructure and technical data are processed outside Switzerland. Email correspondence is handled through the configured business mailbox. Verification, recovery and welcome messages are sent by Amazon Web Services SES in the Zurich region (Switzerland). AWS receives the recipient address, message and delivery data; the recipient’s email provider processes the message under its own policies. Apple login, Agora live video and online payments are not active in this pilot. If you choose Google login, Google receives your sign-in request and technical connection data. CONE24 receives the account identifier, name, email and email verification status from Google to create or link your account. We do not request offline access or retain Google access tokens. Google processes data under its own privacy policy, including abroad in the USA. We will update this notice with the providers, countries and safeguards before activating them. Opening maps or external video embeds can transmit your IP address and requested content to OpenStreetMap, YouTube or Vimeo, including processing abroad under their own policies.

Cookies and browser storage

CONE24SESSID keeps your session and expires when the browser session ends. It is protected with HTTPS, HttpOnly and SameSite. The cone_theme preference cookie lasts up to one year. Local and session storage can keep theme, comparison selections and in-progress tools on your device. You can clear them in your browser; blocking session cookies prevents login. External providers may set their own cookies when you use their content.

Storage and deletion

We retain account data while the account is active and content for the functions you use. Technical logs and security records are retained only for operating and protecting the service and are periodically rotated or cleaned. Messages, transaction history and records needed to resolve disputes or meet statutory duties can require longer retention. Account closure deactivates the account and removes or anonymizes selected profile data; it does not immediately erase every message, upload, transaction or backup. Contact us for a complete review of a deletion request.

Your choices and rights

Contact the operator at the email above to request access, correction, deletion, restriction or objection and data portability where applicable. Describe your request without sending an identity document by ordinary email. We may need a proportionate identity check and must consider statutory retention duties and other people’s rights. You can also contact the Swiss Federal Data Protection and Information Commissioner. We publish material processing changes here before introducing them.