Privacy Policy

We are pleased about your visit to our website and your interest in data protection.

The protection of your personal data is a major and very important concern for us. In this Privacy Policy, we therefore inform you about how we process data on this website, as well as about your rights in relation to the data processing activities described here.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). In addition, where the EU General Data Protection Regulation (GDPR) is applicable, personal data is processed in compliance with the relevant provisions of the GDPR.

The controller is the person or entity that alone or jointly with others determines the purposes and means of the processing of personal data. For the data processing activities described in this Privacy Policy, we are the controller unless otherwise specified in the respective sections. We are therefore responsible for the collection, processing, and use (hereinafter referred to as “processing”) of your personal data in our data systems.

The controller and, at the same time, the contact point for the data processing activities described in this Privacy Policy is generally:

C. A. REAL ESTATE
4056 Mountainview Rd
Lincoln, Ontario, L3J 2C8
Canada

You can contact us at:
Phone: +1 905 515 8442
Email: info@thethirty.ca
Mail: at the above address

You are welcome to direct your data protection inquiries to the contact details provided above.

Personal data pursuant to Art. 5 lit. a FADP (often simply referred to as “data”) refers to all information relating to an identified or identifiable natural person (data subject). Under the General Data Protection Regulation (GDPR), such personal data is referred to as “personal data” (Art. 4(1) GDPR). In this Privacy Policy, we use the term “personal data” to describe this information consistently.

Processing or data processing pursuant to Art. 5 lit. d FADP includes any handling of personal data, regardless of the means and procedures used. This includes, in particular, collecting, storing, retaining, using, disclosing, archiving, deleting, or destroying data. Under the General Data Protection Regulation (GDPR), this process is referred to as “processing” (Art. 4(2) GDPR). In this Privacy Policy we use the terms “processing” or “data processing.”

We process personal data that we obtain either directly from you or from third parties.

Please note that if you provide us with personal data of third parties (e.g. members of your family), you are responsible for ensuring their data protection and for the accuracy of such data.

For interaction features and to provide certain content, various plugins, links to third parties, and third-party services are used on our website.

In the case of these plugins, links, and services, personal data is processed by the operators of the respective platforms. We have no influence over their data processing activities. For further details, please refer to the privacy policies of the respective providers, which are listed in the table below.

For inquiries and contact requests submitted by you via the forms on our website, we only process the data that you provide to us directly. Depending on the form, this may include the following personal data: your name, email address, contact person, request details, telephone number, address, and payment data. The data collected is used exclusively for the purpose of handling the respective inquiry or contact request.

In the case of participation in promotions, competitions, or similar offers, we process the personal data you provide (such as name, contact details, and participation data) for the purpose of carrying out and administering the respective offer.

In certain cases, we may share your personal data with cooperation partners if promotions, competitions, or similar offers are conducted jointly with such partners. In such cases, you will be informed prior to participation about the respective partner and the scope of the data transfer.

The processing of this data is based on your consent or on the necessity to fulfil the contractual relationship established by your participation. After completion of the promotion, the data will be deleted unless statutory retention obligations apply or you have consented to further use.

We only use the following essential cookies to ensure the technical functionality of the website:

In accordance with legal requirements and taking into account the state of the art, implementation costs, as well as the nature, scope, circumstances, and purposes of the processing, and the varying likelihood and severity of risks to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access, input, transfer, availability safeguards, and separation of the data. They also include confidentiality agreements, staff instructions, encryption, pseudonymization, and the obligation of commissioned data processors to implement appropriate security measures. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and responses to data security risks. In addition, we take data protection into account already during the development and selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default.

In the context of the data processing activities explained in this Privacy Policy, we may cooperate with third parties. If we disclose data to other persons and companies (data processors or third parties), transfer it to them, or otherwise grant them access to the data in the course of our processing activities, this is done only on the basis of a legal permission, your consent, a legal obligation, or our legitimate interests (e.g. when using service providers, web hosting providers, etc.).

In connection with our processing activities, we may disclose personal data to the following categories of recipients:

In accordance with the Swiss Federal Act on Data Protection (FADP) and the GDPR, we only disclose personal data abroad if an adequate level of protection for the data subjects is ensured (Art. 16 FADP, Art. 45 GDPR). If the Federal Council has not determined an adequate level of protection, we implement alternative safeguards. These may include international agreements, specific guarantees, contractual data protection clauses, standard contractual clauses approved by the competent supervisory authority, or binding corporate rules previously recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC) or by a competent data protection authority of another country.

Under Art. 17 FADP, exceptions for the disclosure of data abroad may apply if certain conditions are met, including the consent of the data subject, contract performance, public interest, protection of life or physical integrity, publicly available data, or data from a legally prescribed register. Such disclosures are always made in compliance with the applicable legal requirements.

We process your personal data on the basis of the following legal grounds under the GDPR, provided that the GDPR is applicable:

• Contract initiation and fulfilment (Art. 6(1)(b) GDPR): The processing is necessary for the initiation, conclusion, administration, and enforcement of contracts.
• Legitimate interests (Art. 6(1)(f) GDPR): The processing is carried out to safeguard our overriding legitimate interests or those of a third party. These interests include providing a sustainable, user-friendly, secure, and reliable service, marketing activities, information security, protection against misuse and unauthorized use, enforcement of our legal claims, and compliance with Swiss law.
• Legal obligations (Art. 6(1)(c) GDPR): The processing is required by law or is otherwise necessary to comply with legal obligations.
• Consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR): The processing is based on your explicitly given consent.
• Protection of vital interests (Art. 6(1)(d) GDPR): The processing is necessary to protect the vital interests of the data subject or of another natural person.
• Public interest (Art. 6(1)(e) GDPR): The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Under the FADP and the GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request information on whether and which personal data about you is being processed.
• Right to rectification: You have the right to request the correction and completion of inaccurate data.
• Right to erasure: You may request the deletion of your data.
• Right to object: You have the right to object to the processing of your data, in which case it will no longer be processed.
• Right to withdraw consent: You may withdraw your consent to data processing at any time.
• Right to data portability: You may request that your personal data be provided to you or transferred to another controller in a commonly used, machine-readable format.
• Rights in relation to automated individual decision-making: You may express your point of view regarding automated decisions and request that the decision be reviewed by a natural person.
• Right to restriction of processing: You have the right to request the restriction of processing of your data.
• Right to lodge a complaint with a supervisory authority: You may lodge a complaint with the competent supervisory authority. In Switzerland, this is the Swiss Federal Data Protection and Information Commissioner (FDPIC).

To exercise your rights, please contact us using the contact details provided in Section 2.

Please note that these rights may be subject to certain conditions, exceptions, or limitations, for example to protect third parties or business secrets.

We process personal data only for as long as is necessary for the defined purposes or in accordance with legal requirements. We regularly review the necessity of storing personal data and delete it as soon as it is no longer required or when the data subject withdraws their consent, provided that no other legal basis for continued storage and processing exists (e.g. documentation and evidentiary purposes or for the establishment, exercise, or defence of legal claims).

This Privacy Policy is dynamic and is reviewed regularly and updated where necessary in order to comply with current legal requirements and to ensure the continuous protection of user data. The most current version is always available on our website.

Valid as of 28.04.2026