Translation for information only. Only the German version is authoritative.
We photograph flats and houses. In doing so, we generate data about people we often never meet — the owner who unlocks the door, the tenant family whose living room is in the picture. This policy explains what we do with it. It is written so that you can understand it without a lawyer. Questions: info@immotion.media.
On the German website we address you informally. This policy uses the formal form because it is legally binding.
The controller within the meaning of the Swiss Federal Act on Data Protection (FADP) is Immotion Group AG, 3600 Thun. You can reach us at info@immotion.media and on +41 79 577 97 75.
As a company of our size, we are not required to appoint a data protection adviser and have not done so. We answer enquiries ourselves.
This is unusual at the start of a policy like this, but it makes everything that follows easier to understand. We process data from five groups:
The third group is the most sensitive: these people have never contacted us. They usually only learn about us when someone is standing at the door.
Our hosting provider keeps server logs: IP address, time, page requested, browser and operating system. We need these to detect attacks and faults. The logs are deleted after a short time and are not combined with other data.
We use no advertising services and no recognition services. No Google Analytics, no Meta Pixel, no cross-site tracking, no sharing with advertising networks.
We do count visits, though — we want to know how many people visit our pages and how they find us. This is done by Cloudflare Web Analytics, without cookies and without an identifier: nothing is created that could link your visits across several days or several websites. Only the public pages are counted, not the client area. Section 11 describes this in detail.
What gets clicked, we count ourselves: how often the price calculator is used, how often someone taps WhatsApp, phone or email, and how far orders get through the steps. Only three pieces of information go to our database (Supabase, section 11): what happened, on which page and in which language. This becomes one number per day. No IP address, no identifier, no link to your account.
That is also why there is no consent banner on this site: counting without recognition does not require consent, and nothing else runs here.
We load fonts from our own server. Many websites fetch them from Google; the IP address of every visitor then goes to the USA before they have clicked on anything. We did not want that.
We do not use cookies for advertising or analytics. The following is technically necessary and stays on your device:
If you write to us using the form, we receive your name, contact details and the text of your message. We use them to reply to you and keep the correspondence for as long as any matter may arise from it.
The form writes directly to our own database in Zürich (see section 11). So that we notice the enquiry promptly, a notification is sent to our inbox; it contains the same information. Until 17 August 2026, delivery ran via the Formspree service in the USA — for the contact form until the 16th, for the application form until 17 August. Both now go through our own database; the service has been removed completely and no longer appears in any form on this website.
If you call or write via WhatsApp, Meta’s terms apply. We do not embed WhatsApp in the page — the button is an ordinary link, and Meta only learns of it when you tap it. The same applies to the links to Instagram and LinkedIn in the footer: links, no embedded content, no tracking pixels.
For the client area, we create an account with name, email address, phone number, company and role. Added to this is anything you provide voluntarily — a profile picture, for example.
A profile picture is stored in Zürich. Other people in your company can see it in the client area and, if you switch it on, so can visitors to your property web pages (section 8). If you delete it in your profile, it is gone.
You can invite employees. We then receive their name and email address — from you, not from the person concerned. We assume that you are entitled to do so.
We do not know your password. The sign-in service stores it only as a non-reversible check value; no one at our company can read it, not even management. If you forget it, you reset it via a link sent to your email address.
An order generates: the address and type of property, living space, selected services, preferred date, access details, your comments and, later, the processing status, messages about the job and the delivery.
You can upload documents — floor plans, drawings, building specifications, sketches. If these contain the names of third parties, section 7 applies.
In the client area you can mark shots with a star — the four that are going into the listing, for example. This marking applies to your whole company: anyone with access on your side can see it and change it. We see it too and use it solely to improve our work — to learn which kinds of shots are really needed. We do not pass it on and do not analyse it on a personal basis.
Your account also remembers which files you yourself have already downloaded, so that in a delivery of sixty shots you can see what is still outstanding. This information is stored per person, not per company, and is a bookmark — not proof. You can have it deleted at any time (section 12).
So that the invoice becomes due, we also record whether and when the property was sold, as well as the sale price if you report it. We use this information solely for invoicing and, in anonymised form, for our own statistics. We do not pass it on to third parties.
The legal basis is the performance of our contract with you. Without this information we cannot carry out the job.
So that our photographer can get into the property, we need a contact person on site: name, phone number, often an email address, sometimes a note such as “key with the neighbour”. This information almost never comes from the person concerned but from our client.
This is why: anyone who gives us such data assures us that they are entitled to do so and have informed the person concerned. Our T&Cs say the same.
We use this data solely to carry out the shoot — arranging the appointment, ringing the bell, calling if nobody answers. No newsletter, no advertising, no passing on. Once the job is complete, it is kept only as part of the job records.
If you are an owner or tenant and would like to know what we have stored about you, or would like it deleted: write to us. Section 14 explains how.
Pictures of a home say a lot about the people who live there. We treat them accordingly.
People should not be in them. We photograph rooms, not people. If someone accidentally ends up in the frame, we remove the shot or make the person unrecognisable. If people are part of the images at your request, the client obtains their consent.
Personal items. Photos on the wall, post on the table, medication on the bedside table — whatever we notice, we move out of the frame or retouch. We do, however, ask you to do this yourself before the appointment; we do not see everything.
Drone photography is only carried out within the limits permitted by law. Neighbours and other people’s land inevitably come into view; we point the shot at the commissioned property and use nothing that shows neighbours recognisably in their private lives.
Editing is done in-house — with tools based abroad. Selection, retouching, cropping and video editing are carried out by our own team in Switzerland. We do not pass your shots on to an outside image-editing agency or to any outsourcing service, as is common in this industry. For part of the work, however, we use programs that do not run on our devices but on their providers’ servers — the image in question is transmitted there.
This concerns the following steps: virtual staging, digital decluttering and object removal, sky replacement, enlarging a section of an image and upscaling the resolution. Ordinary editing — brightness, colour, perspective, cropping, video editing — runs on our own devices without such services.
What is transmitted is the image itself — without your name, without the address and without the job details; these remain in our database in Zürich. The providers involved are named in section 11; they are based in the United States, which is why the “Disclosure abroad” subsection there also applies in this case.
With digital decluttering, this inevitably means the image is sent as it was taken — including everything still visible in it. That is the second reason why we ask you above to put personal items away yourself before the appointment: what is never in the picture does not have to be retouched out.
You can opt out of this. The ordering process includes the tick box “No virtual extras”: with it, we edit nothing you have not expressly ordered — and your images then go nowhere for such additions. If, beyond that, you do not want such tools used on your shots at all, an informal note is enough; this also applies after the fact. If you have ordered virtual staging or one of the other services mentioned above, we will then discuss it with you, as they cannot be provided without these tools.
In our own portfolio, we only show shots as long as no one has objected, and without the address or the owners’ names. An informal objection is enough and takes effect immediately.
If you have ordered a 3D tour, it is hosted by Matterport (see section 11) — there is no other way to deliver a walk-through tour.
The property web page. After delivery, the client can set up a web page of its own for the property and send it to interested parties. It shows the delivered images with short captions, a text, key facts the client enters, the address or only the town, a map of the surroundings and the contact person, with a profile picture if desired; and, if the client enters them, renovations, journey times by public transport and documents (PDF) that anyone with the link can open. The sales brochure as a PDF is created by the visitor’s browser itself, from the same information. It can only be reached through its link; it does not appear in any search engine, can be switched off at any time and ends after 24 months. We only count how often it was opened and how often someone clicks from there to the client’s website, to the contact person’s email or phone, on a document or on the PDF — per day, without IP addresses and without any feature that would recognise a visitor. The title, text and captions are suggested by Claude (Anthropic, see section 11): for this, the delivered photos are sent there as small previews together with the type of property, without address, town or names — and only when the client sets up the page or requests a new suggestion. For the map, the address goes to geo.admin.ch, the federal geodata service, and the location found in this way to OpenStreetMap, which supplies nearby schools, shops and stops. If OpenStreetMap does not respond to our server, the client’s browser makes this request itself during setup; its IP address is transmitted in the process. Anyone opening the page loads the aerial image directly from swisstopo; their IP address is transmitted in the process. For the journey times, the client’s browser queries the Swiss timetable (transport.opendata.ch) during setup; the coordinates and the names of the destinations are sent there, together with its IP address. The path of the sun is calculated by the browser itself; nothing is sent anywhere for this.
For the invoice, we need the company name, billing address and the job details. We do not see payment data — you pay by bank transfer, and our bank only notifies us of the credit.
Under the Swiss Code of Obligations, we must keep invoices and the related records for ten years. A request for deletion does not override this obligation; in that case we block such data from further use instead of deleting it.
The application form writes your details to the same database of our own in Zürich as the contact form; a notification is sent to our inbox. You send us your CV and work samples by email — we deliberately do not accept files via the website. If you apply to us — including speculatively — we process your documents solely for the selection process. Only the people involved in the decision have access to them.
If you are not hired, we delete the documents six months after the process ends. If you would like us to keep them longer because something suitable might come up later, let us know — we will then keep them with your consent, which you can withdraw at any time.
Not everyone at our company sees everything. A photographer sees only the jobs assigned to them — with the address, contact person and special details, because they need them to do the work. They do not see invoices, sale prices or other clients. This boundary is not merely drawn in the user interface but in the database itself: even someone who bypassed the website could not get the data out.
A client account sees only its own jobs, never those of another company.
We work with a small number of providers who process data on our behalf and in accordance with our instructions. There are no others:
The United States does not have a level of data protection that Switzerland recognises as equivalent. Where we use providers based there, we base the transfer on the standard contractual clauses recognised by the Federal Council.
Your job data — name, address, contact, invoice, messages — is not affected: it stays in Zürich and is not transferred to any third country. Images leave Switzerland only for the editing steps listed in section 8 — and only as long as you have not objected — and for the text suggestion for the property web page, which the client triggers themselves. In both cases without the information about which property and which person they belong to.
We do not sell data, we do not rent out addresses, and we give nothing to advertising networks. We only disclose data to authorities if we are legally required to do so.
The periods for media and the archive are not merely an intention but are built into the system: when a delivery is released, the day on which it will disappear from the client area is calculated.
Data is transmitted in encrypted form. Files are kept in non-public storage; a download link is generated for a short time on each occasion and then expires.
The core is access control: the database decides who may see what, not the website. That sounds technical, but it has a simple consequence — there is no way around the rule, not even by a detour around the user interface. Every change to a job is logged: who, when, what.
There is no such thing as absolute security. Should a data security breach nevertheless occur that poses a high risk to the people affected, we will report it to the Federal Data Protection and Information Commissioner and inform those affected.
You can exercise the following rights at any time:
An email to info@immotion.media is enough. We reply within 30 days. So that we do not accidentally give information to the wrong person, we may ask for proof of identity.
These rights expressly also apply to people who have never dealt with us directly — the owners and tenants of a photographed property.
If you are not satisfied with our reply, you can contact the Federal Data Protection and Information Commissioner (FDPIC) in Bern.
We would like to inform you from time to time about news from Immotion — new services, offers and insights into our work. For this we need your express consent. You give it with a separate checkbox when registering, via the field in the footer, after an order or in your profile. Without consent you will not receive a newsletter; emails about your orders and your account are independent of this.
Confirmation. If you sign up in the footer, we send you an email with a confirmation link. You are only subscribed once you click it; without a click we delete the address after 30 days. When you register, the confirmation of your account also counts as confirmation of the address.
What we store: your email address, the link to your account if there is one, the language, where you gave consent, the exact wording you agreed to, and the times of consent, confirmation and unsubscription. This allows us to prove your consent. We do not store an IP address for this.
Withdraw at any time. You can unsubscribe at any time — via the link in every newsletter email, with the switch in your profile or with a short email to info@immotion.media. The unsubscription takes effect immediately.
How long: until you unsubscribe. After that we only keep proof of consent and unsubscription (address and times) for three years, so that we do not write to you again by mistake; then we delete that too.
Sending. For now we do not send a newsletter yet, only the confirmation email — via Resend like our other notifications (section 11). For the newsletter itself we may use a separate sending service; we will name it here before the first issue is sent.
If the way we work changes, we will update this policy. The version published here is authoritative.
Version: October 2026 · This version supersedes all previous versions.
