Products InterphoneCloud intercom AccessDoors, lifts & gates AppFor every resident Company ContactWe reply within a day Manager loginSchonell Manager console Designed & made in Singapore · Since 2014
Legal

Privacy & terms.

How Schonell collects and protects personal data, and the terms that govern use of Schonell Access, Interphone Cloud, and the Schonell App.

Privacy Policy
Schonell Pte Ltd  ·  Effective date: 3 July 2026  ·  Version 3.0

Schonell Pte Ltd ("Schonell", "we", "us", "our") provides cloud-based intercom, access control, visitor management, and condominium digital services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA") and its subsidiary legislation. By using our Services or website, you consent to the practices described here.

01 Scope

  • Residents, tenants, and authorised occupants using Schonell applications;
  • Property managers, MCSTs, and building administrators;
  • Business customers and authorised system users; and
  • Website visitors (schonell.co).

02 Data Controller and Data Intermediary Roles

2.1 MCST / Building Management as Data Controller

For condominium and estate deployments, the MCST, building owner, or property management entity determines how resident data is used and is therefore the organisation with primary responsibility for that data under the PDPA (the "Data Controller").

2.2 Schonell as Data Intermediary / Processor

In such deployments, Schonell acts as a Data Intermediary under the PDPA. We process personal data strictly on behalf of, and in accordance with the instructions of, the MCST or authorised client. We do not independently decide how resident data is used.

2.3 Direct Relationships

For website enquiries or direct business communication, Schonell acts as the Data Controller and is fully responsible for the personal data collected.

03 Personal Data We Collect

3.1 Resident / User Information

  • Name; unit number / property address;
  • Phone number and email address;
  • Resident type (owner / tenant / authorised occupant);
  • Login credentials (securely stored or tokenised); and
  • Device identifiers (mobile device ID, push tokens).

3.2 Access Control & Intercom Data

  • Door access logs (entry/exit records);
  • Intercom call logs (incoming/outgoing, timestamps);
  • Visitor entry records;
  • Temporary access credentials (QR codes / PINs where applicable); and
  • Access permissions assigned by administrators.

3.3 Administrative Data

  • MCST / management user accounts;
  • Admin actions and audit logs; and
  • System configuration data.

3.4 Technical Data

  • IP address, browser type, and device information;
  • Operating system;
  • App usage logs and session data; and
  • Error logs and diagnostic data.

3.5 Website Data

  • Name, email, and contact details submitted via forms;
  • Cookies and analytics data; and
  • Website usage behaviour.

04 Purpose of Collection

We collect and use personal data to:

  • Operate intercom, access control, and smart building systems;
  • Authenticate users and manage secure access;
  • Enable communication between residents, visitors, and building management;
  • Process access requests and visitor approvals;
  • Maintain audit logs for security and accountability;
  • Provide technical support and system maintenance;
  • Improve system performance and reliability;
  • Detect and prevent unauthorised access or misuse; and
  • Comply with legal and regulatory obligations.

05 Legal Basis for Processing

Where consent is not obtained or is not practicable in the circumstances, we may rely on the legitimate interests exception under the PDPA for purposes such as security monitoring, fraud prevention, and system reliability, having assessed that the benefit to the public and our clients outweighs any adverse effect on the individuals concerned.

06 Account Access and Authentication

Access is granted strictly through accounts issued by authorised administrators (e.g. MCST or property management):

  • Each account represents an authorised system identity;
  • Authentication is required for all access;
  • The system validates credentials but does not verify real-world occupancy; and
  • Account issuance, updates, and revocation are managed by the deploying authority.

Users are responsible for safeguarding their login credentials and must not share them with unauthorised persons. Where credentials are shared, the system will still grant access as authenticated system access based on the credentials presented, the system validates the credential, not the identity of the person presenting it. Sharing credentials may therefore result in access being granted to individuals other than the account holder.

07 Video and Audio Data

Where your Schonell intercom deployment includes video or audio calling functionality, video and audio are transmitted live between the visitor panel and the resident’s device or app to facilitate real-time communication, and are not recorded or stored by Schonell. Where a specific deployment or feature involves recording (for example, a visitor snapshot on an unanswered call), such recordings are retained only for the period set out in Section 10 below, and access to them is controlled by the MCST or building management as Data Controller, not by Schonell.

08 Disclosure of Personal Data

We do not sell personal data. Personal data may be disclosed to:

  • MCSTs, building management, or property owners;
  • Authorised residents or system users;
  • Third-party service providers (cloud hosting, SMS/email providers, notification services);
  • Technical vendors under confidentiality obligations; and
  • Regulatory or legal authorities where required by law.

All third parties are required to maintain appropriate data protection standards.

09 Data Security

  • Encrypted data transmission (TLS/HTTPS);
  • Secure authentication systems;
  • Role-based access control;
  • Audit logging of system activity;
  • Controlled access to production infrastructure; and
  • Monitoring and security updates.

No system can guarantee absolute security, but we continuously maintain and improve our safeguards. Our Services also depend on internet connectivity, third-party telecommunications infrastructure, and on-site hardware; we do not guarantee uninterrupted or error-free operation. Further detail on service availability is set out in our Terms of Use.

10 Data Retention

Personal data is retained only for as long as necessary to provide the Services, fulfil contractual obligations, comply with legal requirements, and maintain audit and security logs. Data may be deleted or anonymised upon contract termination, subject to client requirements and legal obligations.

11 Access and Correction Rights (PDPA)

Under the PDPA, individuals may request access to their personal data and correction of inaccurate personal data. Requests should be directed to the MCST or building management (primary Data Controller), or to Schonell where we act as Data Controller. Identity verification may be required before processing requests. If you withdraw consent to processing that is necessary for a feature to function (for example, app-based access), that feature may no longer be available to you; we will inform you of the likely consequences before acting on a withdrawal request.

12 Cookies and Analytics

Our website uses cookies and analytics tools (such as Google Analytics) to understand website usage, improve user experience, and analyse traffic patterns. This may involve transfer of technical data (such as IP address, in truncated or anonymised form where configured) to servers located outside Singapore, including the United States, under the analytics provider’s own data protection safeguards. You may disable cookies via browser settings, but some features may not function properly.

13 Cross-Border Data Transfers

Where personal data is transferred outside Singapore, we ensure that recipients provide a standard of protection comparable to PDPA requirements through contractual or legal safeguards, in accordance with Section 26 of the PDPA.

14 Data Breach Management

  • Contain and assess the incident promptly;
  • Notify the Personal Data Protection Commission (PDPC) and affected parties where required under the PDPA’s Data Breach Notification obligation; and
  • Implement corrective and preventive measures.

15 Third-Party Services

We may engage third-party service providers for cloud infrastructure hosting; messaging and notification delivery (SMS, push notifications, email); telecommunications and voice services (including SIP trunking, VoIP, and call routing); and analytics, monitoring, and system performance tools. These providers process personal data only under our instructions and are contractually bound to maintain confidentiality and appropriate safeguards under the PDPA.

16 Children’s Data

Our Services are typically accessed within a household account managed by a parent, guardian, resident, or the MCST/building management, rather than opened directly by a child. Where a minor’s data is processed in this context, the managing adult or MCST is responsible for ensuring appropriate consent, consistent with their role as Data Controller under Section 2 above.

17 Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or regulatory changes, system enhancements, or operational updates. Updated versions will be posted here with a revised effective date.

18 Contact Us

OrganisationSchonell Pte Ltd
AttentionData Protection Officer (DPO)
Emailsupport@schonell.com.sg
Websiteschonell.co
v3.0 · 3 Jul 2026, added legal basis clarification, video/audio data section, service availability note, cross-border analytics disclosure, and children’s data section. Supersedes v2.0, 2 Jul 2026.