1. Scope and controller
Protecting personal data is a central concern for RumyFi. RumyFi, Mattenstrasse 54, 4058 Basel, Switzerland, operates this website and is responsible for the processing described here. Contact: support@rumyfi.com or +41 77 287 26 25. Processing is transparent, purpose-specific and carried out in accordance with applicable Swiss data-protection law.
2. Data we collect
Data is generally collected directly from you through forms, website interactions and submitted documents. We do not systematically obtain information from external credit agencies or collect third-party data, such as emergency contacts, without explicit consent. We may process identity and contact details; account credentials; contract and financial information, including payment details, creditworthiness documents, deposits and billing data; listings, private property addresses and photographs; applications and correspondence; and technical data such as IP addresses, browser information, security logs and essential session identifiers.
3. Purposes
We use personal data to provide and secure accounts, operate the housing marketplace, review and publish listings, connect applicants and housing providers, process applications and rental arrangements, manage payments and deposits, answer requests, maintain properties managed by RumyFi, prevent misuse, improve the service and meet legal duties. Depending on the situation, processing is necessary to provide a requested service or perform a contract, based on consent, required by law, or carried out for our legitimate interests in a safe and reliable service.
4. Communications
During the pre-contractual phase, third-party communication services may be used for initial contact. This can involve metadata and communication content being processed by Meta Platforms, Inc. outside Switzerland, including in the United States. After a legally binding rental agreement is concluded, contract-related communications for RumyFi-managed homes take place by email.
5. Public listings and address privacy
Published listings may display information and photographs supplied for publication. Exact street addresses are not shown publicly; public pages display only the postal code and city or an approximate area. Users must not place sensitive or unnecessary personal information in public listing text or images.
6. Service providers and international transfers
Supabase provides authentication, database and storage services. Vercel provides website hosting and delivery. Google Forms may collect complete rental applications and document uploads under Google’s applicable terms and privacy information. Email providers may process account confirmations and search-alert delivery. Providers may process data in or outside Europe and Switzerland. Where required, recognised safeguards such as standard contractual clauses or adequacy decisions are used for international transfers.
7. Sharing
Personal data is shared only when necessary to provide the service or perform a contract, at your direction, with relevant applicants or housing providers, with banks for ordinary payment processing, with commissioned tradespeople, with service providers, or where authorities or law require it. Essential contact details may be shared with roommates in the same shared home where needed for household organisation. RumyFi does not sell personal data.
8. Search alerts
When you create a search alert, RumyFi stores the selected criteria and uses your account email address to notify you of newly approved matching listings. You can pause or delete alerts in your account or unsubscribe using the link in an alert email.
9. Retention
Contract and financial records are retained for ten years after the rental relationship ends where Swiss commercial or tax law requires it. Data from unsuccessful applicants is deleted promptly after the relevant allocation process, unless continued retention is legally required or separately authorised. Other data is kept only as long as needed for accounts, listings, applications, disputes, security and legal duties, then deleted or anonymised.
10. Your rights
Subject to applicable law, you may request information, access, correction, deletion, restriction, objection, withdrawal of consent and a copy or transfer of your personal data. You may complain to a competent authority, including the Swiss Federal Data Protection and Information Commissioner. Send requests to support@rumyfi.com; identity verification may be required.
11. Security, cookies and changes
RumyFi uses appropriate technical and organisational safeguards. Essential cookies and similar storage support sign-in, session protection and necessary preferences. Optional analytics or marketing technologies require an updated notice and any necessary consent controls. This policy may be updated when the service, providers or legal requirements change; the current version is published here.