Privacy policy.
What we do with your data — and what we don't.
This English version is provided for convenience; in case of doubt, the German version applies.
Controller
BauStern Kozlovskyi (sole proprietorship), Jakob-Fügli-Strasse 18 · 8048 Zürich. Questions about data protection: info@baustern.ch.
Enquiries and property photos
In the contact form, we process your contact details and any optional information you give about your company, client type, property, location, timeframe and project. You can add up to three photos of the property. These are reduced in size in your browser before they are sent. Please do not upload unnecessary information or images of other people.
Callback and reference portfolio
For a callback, we need your phone number. If you request the PDF, we use the email address you enter to process the request and send you the reference portfolio. No newsletter, and no disclosure to others for their advertising purposes.
Job applications
Through the application form, we receive your name, your phone number, the position you are interested in and, where applicable, information about your work experience. Your CV and references are optional attachments. We use this information to assess your application and to contact you.
Processing and recipients
Enquiries and applications are stored via our n8n automation environment at baucrm.net in our CRM, which runs on Supabase. The database region is Frankfurt, Germany. Access and notifications serve to let our team process your enquiry or application. Email confirmations are sent via our Google email service; internal notifications of new submissions are also sent via Telegram. In addition to what you enter, the forms transmit the page the form was sent from, any campaign parameters present and a technical request ID to prevent duplicate entries.
Retention period
We delete enquiries that do not lead to an order no later than 24 months after the last contact. We delete application documents six months after the application process has ended, unless you have agreed to a longer retention period. We keep client and order data for as long as statutory obligations require (accounting records and vouchers for ten years, Art. 958f OR). You can request earlier deletion at any time at info@baustern.ch.
Your rights
Access, rectification, erasure, restriction and objection — by email to info@baustern.ch. Supervisory authority: Federal Data Protection and Information Commissioner (FDPIC/EDÖB).
Online site visit booking
If you book a site visit online, we transmit the appointment you choose, your name, phone number, email (optional), the address of the property, the service you select and your note to our n8n automation environment, and store them in our CRM (Supabase, Frankfurt) in the same way as an enquiry. The list of available appointments is loaded directly from this database without any personal data. Retention period as for enquiries.
Browser storage and measurement
Google Analytics and Google Tag Manager are currently not activated. The website does not set any analytics or advertising cookies. To improve the website, we count page views and interaction events (e.g. rooms in the tour, clicks on “Quote”, submitted forms, loading times) anonymously in our database (Supabase, Frankfurt): without cookies, without IP addresses and without form content — we store only the event, the page, the device class (phone/tablet/desktop), the language, the source of the visit (campaign parameters or the domain of the referring page) and a random identifier that is valid only for the open browser tab. We delete this data after 13 months. If “Do Not Track” is enabled in your browser, no measurement takes place. If this privacy policy is opened from a form, this may be logged to our n8n environment without any form entries.
Forms that have not been submitted are kept in the working memory of the same browser tab when you move between pages of this website. These drafts are lost when you reload or close the tab. Session storage holds campaign parameters as well as the hash, identifier and time of a repeated submission attempt, but no contact details in plain text. Technical display settings may be stored in your browser.
Disclosure abroad
Some service providers are based outside Switzerland: Netlify Inc. (hosting and, for forms sent without JavaScript, also receipt of the information) and Google LLC (email) in the USA — both are certified under the Swiss-U.S. Data Privacy Framework, and standard contractual clauses also apply. Supabase stores our data in the Frankfurt region (EU). Notifications of new submissions via Telegram (Telegram FZ-LLC, United Arab Emirates) contain only your name, the subject of your enquiry and your callback number; this disclosure is based on Art. 17 para. 1 let. b FADP (DSG) (pre-contractual steps taken at your request).
Automatic summary of your enquiry
After you submit the enquiry form, we show you a short summary, a matching guide price and the next steps. For the summary, we send only the project description and your details on trade, property, location, timeframe and client type via our automation server to Anthropic PBC (USA), which uses the Claude language model to generate a text from them. Your name, phone number, email address and photos are not transmitted for this purpose. Under its commercial terms, Anthropic does not use data from API usage to train its models; the disclosure to the USA is based on contractual safeguards (standard contractual clauses). The summary is for display only; we do not use it to make any automated decisions. If you choose a time slot for the callback on the confirmation page, this request is passed to our team together with your enquiry reference.
If you write to us via WhatsApp, WhatsApp Ireland Ltd. (Meta) processes your message and phone number under its own terms; Meta may transfer data to the USA. For confidential documents, please use the form or email.
Hosting and external services
The website is delivered via Netlify (Netlify Inc., USA, global content delivery network). In the process, technically necessary connection data such as the IP address, time and requested files are processed. Font files are hosted on our own web space. On pages with client testimonials, publicly available Google reviews are retrieved from our Supabase cache. In the process, Supabase receives technically necessary connection data, in particular the IP address; no form entries are transmitted with this request. External services such as Calendly, WhatsApp, Google or Renovero are only accessed when you open their links; their own privacy policies apply there.
As of 24 September 2026.