Wenn Sie Ihren Wohnsitz in Europa (mit Ausnahme des Vereinigten Königreichs) oder Afrika haben, ist Ihr Vertragspartner HomeExchange SAS. Die unten stehende Datenschutzerklärung von HomeExchange SAS gilt für Sie.
Wenn Sie Ihren Wohnsitz in den Vereinigten Staaten, Kanada oder einem anderen Land auf dem amerikanischen Kontinent, Australien, Neuseeland, dem Vereinigten Königreich oder Asien haben, ist Ihr Vertragspartner HomeExchange INC. Die unten stehende Datenschutzerklärung von HomeExchange INC gilt für Sie.
HomeExchange SAS, Betreiber der HomeExchange-Plattform, misst dem Schutz und der Vertraulichkeit Ihrer personenbezogenen Daten große Bedeutung bei. Wir betrachten sie als grundlegende Voraussetzung für unsere Zuverlässigkeit und die Vertrauensbeziehung zu unseren Mitgliedern.
Unsere Datenschutzrichtlinie verdeutlicht daher unser klares Engagement, die geltenden Vorschriften zum Schutz personenbezogener Daten einzuhalten, insbesondere die Datenschutz-Grundverordnung (DSGVO).
Ziel dieser Datenschutzrichtlinie ist es, Sie transparent darüber zu informieren, wie und warum wir Ihre personenbezogenen Daten im Zusammenhang mit den von uns angebotenen Dienstleistungen verarbeiten.
Unsere Datenschutzrichtlinie gilt für Sie, unabhängig von Ihrem Aufenthaltsort, sofern Sie mindestens 18 Jahre alt sind.
Wenn Sie jünger sind als das oben angegebene gesetzliche Mindestalter, sind Sie nicht berechtigt, unsere Dienste zu nutzen, ohne dass uns zuvor eine ausdrückliche Einwilligung eines Elternteils oder der sorgeberechtigten Person per E-Mail an dpo@homeexchange.com übermittelt wurde.
Wenn Sie der Ansicht sind, dass wir personenbezogene Daten Ihrer Kinder ohne Ihre Zustimmung verarbeiten, kontaktieren Sie uns bitte ebenfalls unter der oben genannten Adresse.
Wir verarbeiten Ihre personenbezogenen Daten aus folgenden Gründen:
Ihre Daten werden direkt bei Ihnen erhoben, wenn Sie unsere HomeExchange-Plattform nutzen. Wir verpflichten uns, Ihre Daten ausschließlich für die oben beschriebenen Zwecke zu verarbeiten.
In bestimmten Fällen können wir personenbezogene Daten auch indirekt von Partnern erhalten, sofern Sie ihnen zuvor Ihre Einwilligung erteilt haben.
Nachfolgend finden Sie eine Zusammenfassung der Kategorien personenbezogener Daten und ihrer jeweiligen Speicherfristen:
Nach Ablauf der jeweiligen Speicherfristen wird die Löschung Ihrer personenbezogenen Daten unwiderruflich. Wir können Ihnen diese Daten danach nicht mehr bereitstellen. Höchstens können wir anonymisierte Daten zu statistischen Zwecken weiter aufbewahren.
Bitte beachten Sie außerdem, dass wir im Falle eines Rechtsstreits verpflichtet sind, alle Sie betreffenden Daten für die gesamte Dauer des Verfahrens aufzubewahren – selbst über die oben genannten Speicherfristen hinaus.
Die geltenden Datenschutzvorschriften gewähren Ihnen spezifische Rechte, die Sie jederzeit und kostenlos ausüben können, um die Nutzung Ihrer Daten zu kontrollieren:
Damit eine Anfrage berücksichtigt werden kann, muss sie direkt von Ihnen an dpo@homeexchange.com gerichtet werden. Anfragen, die nicht über diesen Weg eingehen, können nicht bearbeitet werden.
Anfragen dürfen ausschließlich von Ihnen gestellt werden. Wir können daher einen Identitätsnachweis anfordern, wenn Zweifel an der Identität der anfragenden Person bestehen.
Wir beantworten Ihre Anfrage so schnell wie möglich, spätestens jedoch innerhalb von drei Monaten ab Eingang, wenn die Anfrage technisch komplex ist oder wir gleichzeitig zahlreiche Anfragen erhalten.
Bitte beachten Sie, dass wir übermäßige oder unbegründete Anfragen, insbesondere wenn sie wiederholt erfolgen, ablehnen können.
Ihre personenbezogenen Daten werden ausschließlich von unseren Teams und technischen Dienstleistern verarbeitet, die sie benötigen, um unseren Dienst bereitzustellen. In bestimmten Fällen können Daten auch an Forschungseinrichtungen oder Universitäten für wissenschaftliche Projekte übermittelt werden.
Wir prüfen alle technischen Dienstleister sorgfältig vor ihrer Beauftragung, um sicherzustellen, dass sie die geltenden Vorschriften zum Schutz personenbezogener Daten strikt einhalten.
AUẞERDEM GARANTIEREN WIR, DASS WIR IHRE DATEN NIEMALS AN DRITTE ODER GESCHÄFTSPARTNER VERKAUFEN ODER ÜBERTRAGEN.
Die über unsere HomeExchange-Plattform verarbeiteten personenbezogenen Daten werden ausschließlich auf Servern innerhalb der Europäischen Union gehostet.
Wir bemühen uns zudem nach Möglichkeit, ausschließlich technische Tools zu verwenden, deren Server ebenfalls innerhalb der EU betrieben werden. Sollte dies nicht der Fall sein, stellen wir sicher, dass geeignete Garantien zum Schutz der Vertraulichkeit und Sicherheit Ihrer personenbezogenen Daten umgesetzt werden.
Wir setzen technische und organisatorische Maßnahmen ein, um täglich die Sicherheit Ihrer personenbezogenen Daten zu gewährleisten und jeden Risikofall von Zerstörung, Verlust, Veränderung oder Offenlegung zu verhindern.
Technische Sicherheitsmaßnahmen
A/B-Testing, getrennte Datenbank für Benutzerpasswörter (Backend) von Benutzernamen, Verschlüsselung der „User“-Datenbank im Ruhezustand und bei der Übertragung, Verschlüsselung von Benutzerpasswörtern (Frontend), Vorgabe komplexer Benutzerpasswörter (Frontend), HTTPS-Protokoll, Penetrationstests, Zugriffsnachverfolgbarkeit, VPN für Teams von HomeExchange SAS, MFA-Schutz auf Server- und Datenbankebene, Konten, zentralisiertes Zugangsmanagement, Echtzeitüberwachung verdächtiger Aktivitäten, Segmentierung von Produktions- und Testumgebungen, Verschlüsselung von Backups.
Organisatorische Sicherheitsmaßnahmen
IT-Richtlinie, Verfahren zum Umgang mit Datenschutzverletzungen, Verfahren zur Verwaltung der Betroffenenrechte, Verhaltensregeln, Sensibilisierung und Schulung der Teams zweimal jährlich, Videoüberwachung in den Räumlichkeiten, Brandschutzschulung, Erste-Hilfe-Schulung.
Wir informieren Sie darüber, dass wir beim Besuch unserer Website Cookies einsetzen. Weitere Informationen finden Sie in unserer Cookie-Richtlinie.
Um den Schutz und die Integrität Ihrer Daten bestmöglich zu gewährleisten, haben wir offiziell einen unabhängigen Datenschutzbeauftragten (DPO) bei unserer Aufsichtsbehörde gemeldet.
Sie können unseren DPO jederzeit und kostenlos unter dpo@homeexchange.com kontaktieren, um weitere Informationen oder Einzelheiten zur Verarbeitung Ihrer Daten zu erhalten.
Sie können die „Commission nationale de l’informatique et des libertés“ (CNIL) jederzeit unter folgender Adresse kontaktieren: Service des Plaintes, 3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07 oder telefonisch unter +33 (0)1 53732222.
Wir können unsere Datenschutzrichtlinie jederzeit ändern, um sie an neue gesetzliche Anforderungen oder neue Verarbeitungsmethoden anzupassen, die wir künftig einsetzen könnten.
Effective Date: January 6th, 2026
This policy (“Privacy Policy”) describes how HomeExchange Inc. with an address at C/O WEWORK, 625 Massachusetts Avenue, Cambridge, MA 02139 (“HomeExchange” or “we”), collects and uses personal information from users across various platforms, including www.homeexchange.com, the HomeExchange application, other websites, mobile sites, services, applications, and platforms operated by HomeExchange where this Privacy Policy is featured or referenced, or where no separate Privacy Policy is provided, as well as from customers who interact with us through other channels (collectively, the “Sites”). The words “user,” “you” and “your” in this Privacy Policy refer to a user of the Sites.
The Sites are operated by HomeExchange. The words “user,” “you” and “your” in this Privacy Policy refer to a user of the Sites.
Please read this Privacy Policy carefully, as it applies each time a user accesses the Sites and uses their services.
By using the Sites, you represent that you have read, understood and agree to be bound by this Privacy Policy, the Privacy Policy for California Residents, if applicable to you, the Privacy Policy for Texas Residents, if applicable to you, the Privacy Policy for Nebraska Residents, if applicable to you, the Sites’ Terms of Use, and Cookie Policy (collectively, the “Website Policies”). If you do not agree with the Website Policies, please do not access or use the Sites.
When you use the Sites, we may collect your (i) personal information (data that personally identifies you), or (ii) aggregate information, concerning your use of the Sites and your account activity (e.g., number and times of logins, most frequently visited pages, IP address, etc.), which does not personally identify you.
We collect the categories of personal information outlined below from the following sources:
The categories of personal information we may collect from you include:
Please be aware that if you do not allow us to collect certain personal information from you, we may not be able to deliver certain services to you, and some of our services may not be able to take account of your interests and preferences. If collection of personal information is mandatory, we will make that clear at the point of collection so that you can make an informed decision whether to provide your information.
When you access or use our Sites, some information not associated with specific users, such as device type, location information, IP address, cookie identifiers, webpage traffic, and access time is automatically collected in order to ensure the Sites’ functionality. Once your user profile is created, anytime you log in, we will collect additional information and add it to your user profile, such as the membership or GuestPoints you have purchased, and any other information that may be available from time to time.
Cookies. The Sites use cookies. A cookie is a small text file that is stored on a user’s computer for record keeping purposes. Cookies can be either session cookies or persistent cookies. A session cookie expires when you close your browser and is used to make it easier for you to navigate our Sites. A persistent cookie remains on your hard drive for an extended period of time.
We use cookies to identify you when you access the Sites, to personalize your experience on the Sites, to provide ads, marketing communications and social media features, to analyze our traffic and customers’ interactions with advertising banners, and to identify repeat visitors for statistical purposes. We also share information about your use of the Sites with our social media, and advertising partners, who may combine it with other information that you have provided to them or that they have collected from your use of their services.
When you first visit our Sites, we provide you with a choice to either accept or deny certain cookies. If you choose to decline optional cookies, please note that some of the features and services of the Sites may not function as well as intended. Even if you choose to accept cookies, you are always free to change your mind and revoke that consent. Most browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies. Please note that the Sites use certain cookies that are fundamentally necessary for the Sites to work and allow you to use the functions of our services. Without this type of cookies, you cannot receive the requested services. These cookies enable services that you have specifically requested and allow you to use the Sites’ features (e.g., logging in). We need these cookies to provide you with our services and you cannot deny necessary cookies.
We may receive personal or aggregate information about you from our business partners and service providers (such as advertising partners, data analytics providers, and mailing lists providers), or other third parties to whom you have provided your information, and consented to the sale, rental or transfer thereof, and combine this information with other information we collect from you. Occasionally, we may obtain information about you from third parties such as a data aggregator or vendor who provide us with additional aggregate information about our existing customers.
Social Media. When creating an account through third-party social media sites and/or applications, we may access some of your information from your social media account, such as name, email address, and profile picture.
Please note that this Privacy Policy does not apply to third-party social media sites, and you should always refer to the privacy policies of the relevant social media sites for information concerning their collection and processing of information.
Customer Service. If you fill out a questionnaire or contact our Customer Service department by phone or by email, we will collect certain personal information from you, such as your name, address, email address and phone number. We may need to use your personal information to further contact you to respond to your inquiry or request.
Live Chat. If you use the live chat feature on our Sites, we will collect certain information from you such as your name, email address, and information about why you are chatting with us. We only collect this information in order to communicate with you, address why you are chatting with us, and ensure that you have a great customer experience. Some of that information that you provide to us may be considered sensitive personal information as it may reveal your gender, race, national origin, etc. Our live chat is operated by a third-party service provider, who can use such information only in compliance with this Privacy Policy to provide customer service and for no other purpose.
Texts. If you have signed up to receive text messages from us, we may collect information from you through one of our inbound text messaging programs. You agree to receive recurring automated promotional and personalized marketing text (e.g., SMS and MMS) and other messages (e.g., cart reminders) from HomeExchange to the mobile telephone number you provided when signing up or any other number that you designate. Consent to receive automated marketing text messages is not a condition of any purchase. Message and data rates may apply. Message frequency will vary. Our text messaging program is operated by a third-party service provider, who can use such information only in compliance with this Privacy Policy and for no other purpose.
Your information is processed using primarily electronic means and is used, without limitation, for the following purposes:
The Sites use Secure Socket Layer (SSL) / Transport Layer Security (TLS) software and similar encrypting systems to protect your information when you purchase products on the Sites. Only employees, contractors and agents of the Sites operator may access user information on a need-to-know basis and only for the purposes set forth in this Privacy Policy.
While we make reasonable efforts to ensure your information is processed and stored in a secure manner, we cannot guarantee the security of data transferred over the Internet and you assume the risk of any such transfer.
HomeExchange is based in the United States and works with service providers and corporate affiliates that may be located outside of the United States, including countries of the European Union. If you provide your personal information to us, your information may be processed in a foreign country, where privacy regulations may be different from the ones in your home country. By submitting your personal information to us, you consent to the transfer, storage, and processing of your data in a country other than your country of residence, including, but not limited to, any country in the European Union.
We will not sell or otherwise disclose your information, except as described in this section and other relevant sections of this Privacy Policy.
Generally, we share your personal information as necessary to provide the services or products you request. We also may share your personal information when required by law, to protect your rights and safety, and with your consent. Specifically, we may share your personal information with third parties, including:
HomeExchange retains your personal information for as long as necessary to fulfill the purpose(s) for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. When we are no longer required to retain the personal information as described above, we will destroy, erase, or de-identify it, unless we are legally required to maintain it for longer.
The Sites may contain links to third-party websites. We do not operate, control, monitor, endorse or guarantee those third-party websites. This Privacy Policy does not apply to the collection and use of information by such third-party websites. We suggest that you carefully read the privacy policy and other policies of all third-party websites.
We provide hyperlinks to third-party websites only for the convenience of our users and it is not a recommendation that users access such third-party websites. We do not guarantee the services or goods provided and sold by such third-party websites to Internet users. YOU AGREE THAT YOUR USE OF ANY THIRD-PARTY WEBSITE IS AT YOUR SOLE RISK AND WITHOUT WARRANTIES OF ANY KIND BY HOMEEXCHANGE, EXPRESS, IMPLIED OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF TITLE, FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY OR NONINFRINGEMENT. UNDER NO CIRCUMSTANCES SHALL HOMEEXCHANGE BE LIABLE FOR DAMAGES ARISING FROM ANY TRANSACTION BETWEEN YOU AND ANY THIRD-PARTY WEBSITE OR FOR ANY INFORMATION APPEARING ON THIRD-PARTY WEBSITES.
You may update, correct or remove your personal information at any time and free of charge by emailing us at dpo@homeexchange.com. We may ask that you identify yourself and the information you wish to access, change or delete for security purposes, and we will comply with your request as soon as reasonably practicable. By removing some of your information, you may not be able to access some of the Sites’ features. We may keep some of your personal information if required by law and/or for recordkeeping purposes.
Email. You may unsubscribe from any marketing email communications by clicking on the “Unsubscribe” button included in all of our marketing communications or by contacting us at dpo@homeexchange.com. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding HomeExchange and our services and, to the extent permitted by law, you will not be able to opt out of those communications (e.g., communications regarding updates to our Website Policies).
Text. To stop receiving text messages, reply “STOP” to any text message you have received from us. Note that you will continue to receive transaction-related emails regarding services you have requested. We may also send you certain non-promotional communications regarding HomeExchange and our services and, to the extent permitted by law, you will not be able to opt out of those communications (e.g., communications regarding updates to our Website Policies).
Our Sites do not recognize Do Not Track signals. Some third parties may collect aggregate information about the users’ online activities over time and across websites when they use the Sites.
If you are a California resident, please read our Privacy Policy for California Residents for additional information concerning the collection and processing of your personal information and the rights granted to you with respect to such information.
If you are a Nebraska resident, please read our Privacy Policy for Nebraska Residents for additional information concerning the collection and processing of your personal information and the rights granted to you with respect to such information.
If you are a Texas resident, please read our Privacy Policy for Texas Residents for additional information concerning the collection and processing of your personal information and the rights granted to you with respect to such information.
We do not sell services for purchase by children. If you are under 18 years old, you may use the Sites only under the supervision of a parent or guardian. In accordance with the Federal Children’s Online Privacy Protection Act of 1998 (COPPA), we do not knowingly collect, solicit or use personal information of children under the age of 13 provided without parental consent. Should we become aware that a user under the age of 13 has registered without verifiable parental consent, any such information will be deleted.
HomeExchange may amend or update all or any portion of this Privacy Policy, at any time, without notice, in its sole discretion. Please access this section regularly to verify if any changes were made to our Privacy Policy and to review the updated Privacy Policy.
If you have any questions or comments about this notice, the ways in which HomeExchange collects and uses your information described above, your choices and rights regarding such use, please do not hesitate to contact us at dpo@homeexchange.com.