Privacy Policy
How we collect, use, and protect your personal data.
Contents
1. Controller and Contact Details
The data controller responsible for processing your personal data is:
BRD Fintech Group SA
Av. d'Ouchy 4
CH-1006 Lausanne
Switzerland
Email: privacy@streets.realestate
Phone: +41 21 311 88 18
Where STREETS processes personal data of individuals located in the European Economic Area (EEA), BRD Fintech Group SA acts as the data controller under the EU General Data Protection Regulation (GDPR). For individuals located in Switzerland, processing is governed by the Swiss Federal Act on Data Protection (nFADP / revDSG), which entered into force on 1 September 2023.
2. Scope of This Policy
This Privacy Policy applies to:
- Visitors to the STREETS website at www.streets.realestate
- Individuals who submit enquiries, book demonstrations, or contact us via any channel
- Subscribers to our newsletter or content updates
- Prospective and current clients who interact with us in a sales or onboarding context
This policy does not govern personal data processed within the STREETS platform itself (i.e., data uploaded by platform clients). That processing is governed by the Data Processing Agreement (DPA) entered into with each client and our platform Privacy Notice, available on request.
3. Data We Collect and Why
3.1 Website visitors (no account required)
| Data | Purpose | Collected via |
|---|---|---|
| IP address (anonymised after 24 hours) | Security, fraud prevention, aggregate analytics | Web server logs, analytics |
| Browser type, OS, screen resolution | Ensuring site compatibility | Analytics (anonymised) |
| Pages visited, time on site, referrer URL | Understanding content performance, improving UX | Analytics (anonymised) |
| Cookie consent preferences | Compliance with cookie law | Cookie banner (stored locally) |
3.2 Demo bookings and contact form submissions
| Data | Purpose | Collected via |
|---|---|---|
| First name, last name | Personalising communications | Contact / booking form |
| Work email address | Responding to your enquiry, sending meeting invites | Contact / booking form |
| Company name | Understanding your organisation | Contact / booking form |
| Role / job title | Tailoring the demo to your responsibilities | Contact / booking form |
| Portfolio size (AUM, approximate) | Scoping the platform demonstration | Contact / booking form |
| Free-text message | Understanding your specific requirements | Contact / booking form |
| Calendar booking data (name, email, chosen time slot) | Scheduling and confirming demo appointments | Google Calendar Appointment Scheduling |
3.3 Communications
When you correspond with us by email, phone, or LinkedIn, we retain the content of those communications and any personal data they contain for the purpose of managing our relationship with you and for legal compliance.
4. Legal Basis for Processing
For individuals in the EEA, we rely on the following legal bases under GDPR Article 6:
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to demo requests and enquiries | Art. 6(1)(b) — performance of a pre-contractual step at your request |
| Sending follow-up communications about the platform | Art. 6(1)(f) — legitimate interests (promoting our services to professional prospects) |
| Analytics and site improvement (anonymised) | Art. 6(1)(f) — legitimate interests in understanding site usage |
| Non-essential cookies (if accepted) | Art. 6(1)(a) — consent |
| Compliance with legal obligations | Art. 6(1)(c) — legal obligation |
For individuals in Switzerland, processing is based on the equivalent grounds under nFADP Art. 31 (processing necessary for legitimate interests) and Art. 6(6) (consent where required).
Where we rely on legitimate interests, we have assessed that those interests do not override your fundamental rights. You may object to this processing at any time (see Section 9).
Business contact details of professionals (such as name, role, company, and work email address) may be processed on the basis of legitimate interest for relevant business-to-business communication about our platform and services. You have the right to object to this at any time by emailing hello@streets.realestate.
5. Cookies and Tracking Technologies
We use a small number of cookies and similar technologies on this site.
5.1 Strictly necessary cookies
These are required for the site to function and cannot be disabled. They include cookies that remember your cookie consent preference (stored in your browser's local storage, not transmitted to our servers).
5.2 Analytics cookies (optional)
We use a single optional analytics cookie, set by Google Analytics 4, to understand how visitors use the site. This cookie is only set after you give explicit consent via the cookie banner shown on your first visit. Google Analytics is not loaded at all until you accept. IP anonymisation is enabled, so your full IP address is never stored. We do not use any advertising or marketing cookies.
5.3 Third-party embeds
Our website embeds a Google Calendar Appointment Scheduling iframe and a YouTube video player. When you interact with these features, Google's own privacy policy applies. We use the youtube-nocookie.com domain for the video player to minimise cookies set before you click play. We recommend reviewing Google's Privacy Policy for more information.
5.4 Managing cookies
You can withdraw consent at any time by clearing your browser's cookies and local storage (often labelled "site data"), or by using your browser's privacy settings. Once cleared, the cookie banner will reappear on your next visit and you can decline. You can also use the banner on your first visit to decline the analytics cookie.
6. Sharing and Disclosure of Data
We do not sell, rent, or trade your personal data. We share data only in the following circumstances:
- Service providers: We use Netlify (hosting, form processing), Google (Calendar scheduling, video hosting, and analytics where you have consented), Clay Labs Inc. (USA, lead enrichment and routing for enquiries submitted via our tools), and Attio Ltd (UK, customer relationship management for enquiries and business contacts). These providers act as data processors under appropriate agreements and are prohibited from using your data for their own purposes.
- Professional advisers: Lawyers, accountants, and insurers, where necessary and subject to confidentiality obligations.
- Legal requirements: We may disclose data where required by Swiss law, FINMA, EU law, or a valid court order. We will notify you where legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of BRD Fintech Group SA, personal data may be transferred to the acquirer, subject to equivalent data protection standards.
7. International Data Transfers
Our primary operations are in Switzerland. Certain service providers (including Netlify, based in the United States) may process data outside Switzerland and the EEA.
Where data is transferred to countries without an adequate level of data protection as recognised by Switzerland or the EU, we rely on:
- EU Standard Contractual Clauses (SCCs) as approved by the European Commission, supplemented where necessary by the Swiss Federal Council's equivalent mechanisms under nFADP
- Adequacy decisions where applicable
You may request a copy of the relevant transfer safeguards by contacting us at privacy@streets.realestate.
8. Data Retention
| Data category | Retention period |
|---|---|
| Website analytics (anonymised) | 13 months from collection |
| Demo booking and contact form data (no contract concluded) | 2 years from last contact |
| Demo booking and contact form data (contract concluded) | 10 years from end of contract (Swiss statutory obligation) |
| Email and call correspondence | 3 years from last contact, or 10 years if subject to a contract |
| Cookie consent records | Stored locally in your browser until cleared |
After the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.
9. Your Rights
Depending on your location, you have the following rights regarding your personal data. We will respond to all requests within 30 days (extendable to 60 days for complex requests).
Rights under GDPR (EEA residents) and nFADP (Swiss residents)
- Right of access: You may request a copy of all personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): You may request deletion of your data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing.
- Right to restriction: You may ask us to suspend processing of your data in certain circumstances (e.g., while a complaint is investigated).
- Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
- Right to object: You may object at any time to processing based on our legitimate interests, including direct marketing. We will cease unless we can demonstrate compelling legitimate grounds.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right not to be subject to automated decision-making: We do not make decisions about you based solely on automated processing that have a significant legal or similarly significant effect.
How to exercise your rights
Please contact us at privacy@streets.realestate or by post to the address in Section 1. We may need to verify your identity before processing your request.
Right to lodge a complaint
If you are located in Switzerland, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.
If you are located in the EEA, you have the right to lodge a complaint with the supervisory authority in your country of residence or the authority in the jurisdiction where the alleged infringement occurred.
10. Security Measures
We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:
- TLS encryption (HTTPS) for all data in transit
- Access controls and role-based permissions limiting who can access data
- Hosting with Netlify on infrastructure with SOC 2 Type II certification
- Regular review of third-party processor security practices
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours in accordance with GDPR Art. 33 and nFADP Art. 24, and will notify affected individuals without undue delay where the risk is high.
11. Children's Data
This website is directed at business professionals and is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at privacy@streets.realestate and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via a notice on our website. The "last updated" date at the top of this page indicates when the current version was published. We encourage you to review this policy periodically.
13. How to Contact Us
For any privacy-related questions, requests, or concerns, please contact us:
Data Protection contact
BRD Fintech Group SA
Av. d'Ouchy 4, CH-1006 Lausanne, Switzerland
Email: privacy@streets.realestate
Phone: +41 21 311 88 18
We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days.