Privacy Policy

This Privacy Policy explains which personal data are processed when you visit this website, use the Healthy Building Project Check, submit a project enquiry or register for webinars and specialist insights.

1. Data controller and contact

The controller responsible for processing is:

WohnBauBiologie GmbH

WohnBauBiologie GmbH c/o Suter Treuhand Con. GmbH Seeburgstrasse 39 CH-6006 Luzern Schweiz / Switzerland

Mobile: +41 (0) 77 410 42 42
Landline: +41 (0) 41 511 42 72
Email: tino.gomolka@healthy-building.ch
Public website: https://www.healthy-building.ch/

2. Website visits and technical data

The application is currently operated via Replit for technical delivery. Technical connection and security data may be processed when the website is accessed and the API is used. In particular, the application logs the request ID, HTTP method, requested path and response status on the server for troubleshooting and secure operation. The current application does not specify a particular retention period for these infrastructure and server logs.

IP addresses are processed to prevent misuse and limit automated requests. In project enquiry and newsletter registration records, the IP address is stored only as a salted hash, not in plain text. The browser's user-agent may also be stored with these records. The current documentation of the relevant technical providers applies to technical delivery and the associated processing.

3. Project enquiries

When you submit the multi-step form, the contact details you enter (name, email address, telephone number and, optionally, company and contact preferences), together with information about your role, project, property, location, floor area, year of construction, requirements, initial situation, timeframe and budget, are sent to the API. The data are stored in the application database so that your enquiry can be reviewed, answered and processed internally.

For internal processing, the server calculates a suitability category and score from selected project information. This calculation supports the handling of your enquiry; it does not replace a personal review. The enquiry also records your consent to data processing. The current project enquiry form does not request separate marketing consent.

If you use the Project Check before opening the project enquiry form, your answers may be held in your browser's session storage. If you subsequently submit a project enquiry, these answers are stored with it for guidance. When you use only the Project Check, the answers are sent to the API to calculate the result; this evaluation endpoint does not create a project enquiry record.

If email delivery is enabled in the server configuration, the information needed for an internal notification and acknowledgement is sent via the authenticated SMTP service of the existing Infomaniak mailbox configured in the backend. If SMTP is not configured or delivery fails, the project enquiry and its data are still stored in the application database; the email is not marked as sent in that case.

4. Newsletter, webinars and specialist insights

Registration records include your email address, selected interests, registration source, timestamp and consent version. A salted IP hash and user-agent are also recorded to prevent misuse. Registrations are currently managed internally in the application database and are not automatically sent to an external newsletter delivery provider.

Registration takes place only with your express consent. You may withdraw that consent at any time with future effect by contacting tino.gomolka@healthy-building.ch. Please include the email address concerned. We will deactivate or delete the registration unless retention is required for legal or security reasons.

5. Cookies, browser storage and optional analytics

The cookie banner saves your choice of “Accept” or “Essential only” in your browser's local storage (localStorage). Choosing “Essential only” prevents the analytics and event calls implemented in the frontend. Your choice remains stored locally and can be reopened and changed using the “Privacy settings” link in the footer.

Optional event and usage analytics are triggered only when consent has been saved. Depending on the server and environment configuration, the application may use Google Analytics 4, Plausible or Meta Pixel, but only if the relevant service is configured and available in the browser. Events may include starting or submitting a project enquiry and using the Project Check or receiving its result. No particular configuration of these optional services is assumed here.

Campaign parameters (UTM parameters), the referrer and the initial landing page are stored in session storage for the browser session only after express consent. They may be submitted with a project enquiry for attribution. If you refuse or withdraw consent, these attribution data are removed from session storage. This does not retrospectively change any transmission that has already taken place.

6. Data retention

The current application does not automatically apply a fixed deletion period to project enquiries, Project Check information or newsletter registrations. We retain data only for as long as necessary for the relevant purpose, to process and document an enquiry, to demonstrate consent or to prevent misuse. Statutory retention obligations remain unaffected. You may contact us at any time to request specific deletion or correction.

7. Your rights

Depending on the applicable data protection law, you may request access to personal data processed about you, correction, deletion or restriction of processing, and the release of certain data. You may withdraw consent at any time with future effect and object to processing for specific purposes. Please send your request to the contact address in section 1. Withdrawal does not retrospectively make prior processing unlawful.

You also have the right to complain to the competent data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). Where there is a connection with the EU or EEA, you may also contact the relevant supervisory authority there.