Privacy Policy
Effective Date: [DATE]
Last Updated: [DATE]
This Privacy Policy explains how [LEGAL COMPANY NAME], operating rentapartments.com and related services (the “Platform,” “we,” “us,” or “our”), collects, uses, shares, stores, and protects personal data when you access or use our website, applications, and related services.
This Privacy Policy applies to Hosts, Guests, visitors, and other users of the Platform.
By accessing or using the Platform, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject to applicable law.
1. Who We Are
The data controller for the purposes of this Privacy Policy is:
[LEGAL COMPANY NAME]
[FORM OF COMPANY: UG (haftungsbeschränkt)]
[REGISTERED ADDRESS]
[CITY, COUNTRY]
[PRIVACY / LEGAL EMAIL]
Website: rentapartments.com
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us using the details above.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed in connection with:
- the Platform website and applications;
- account creation and account management;
- Listings and booking activity;
- payments, refunds, payouts, and deposits;
- messages and communications through the Platform;
- reviews and feedback;
- support, moderation, verification, fraud prevention, and dispute handling.
This Privacy Policy does not directly apply to third-party services that operate under their own privacy notices, including payment providers such as Stripe.
3. Categories of Personal Data We Collect
Depending on how you use the Platform, we may collect the following categories of personal data.
3.1 Account and Registration Data
We may collect:
- first name and last name;
- preferred name;
- email address;
- phone number;
- account role and account status;
- profile image;
- hashed password and login-related security data;
- email verification and phone verification status;
- account creation and update timestamps.
3.2 Identity and Verification Data
We may collect:
- date of birth;
- name as shown on official documents;
- government ID information;
- uploaded government ID files;
- address;
- tax-related information, including tax ID, tax country, and tax status;
- verification and onboarding data required for compliance, payment, or payout purposes.
3.3 Profile Data
Users may choose to provide profile-related information such as:
- job;
- languages;
- nationality;
- gender;
- preferred language;
- timezone;
- bio;
- social media links;
- additional personal profile details.
Some of this information is optional.
3.4 Listing and Property Data
For Hosts and Listings, we may collect:
- Listing title and description;
- Listing photos and uploaded media;
- property type, place type, room and guest capacity;
- amenities and sleeping arrangements;
- location and address-related information;
- availability and calendar data;
- pricing, discounts, fees, and booking settings;
- cancellation terms and house rules;
- Listing draft information;
- Listing moderation data.
3.5 Booking and Reservation Data
We may collect:
- booking dates;
- reservation status and payout status;
- request messages;
- guest count, children count, and pets count;
- total price and price breakdown;
- actual check-in and check-out information;
- cancellation, refund, and dispute-related information;
- deposit and damage-related booking information.
3.6 Payment and Payout Data
We may collect:
- payment status and payment references;
- amount and currency;
- limited payment method metadata such as card brand and last four digits;
- Stripe-related identifiers such as customer, payment intent, checkout session, transfer, payout, and refund IDs;
- payout-related information for Hosts;
- transaction history and payment-related records;
- deposit hold, release, or capture information.
We do not intend to store full payment card numbers on our own systems where payment processing is handled by Stripe or another integrated payment provider.
3.7 Messages, Notifications, and Communications
We may collect:
- message content exchanged through the Platform;
- conversation metadata;
- delivery, read, deletion, and edit status;
- support chat content;
- notification content and delivery data;
- push subscription data.
3.8 Reviews and Feedback
We may collect:
- ratings;
- review comments;
- timestamps;
- reservation-linked review information.
3.9 Damage Reports, Disputes, and Claims
We may collect:
- damage report descriptions;
- evidence files such as photos, videos, invoices, receipts, or estimates;
- requested and approved claim amounts;
- dispute-related communications;
- support notes and case outcomes.
3.10 Technical, Device, and Security Data
We may collect:
- IP address;
- login IP and signup IP;
- browser and device information, including user agent;
- timestamps relating to activity or login;
- approximate geolocation inferred from IP or provided by the user where applicable;
- antifraud, account security, and risk-related metadata.
3.11 Moderation and Safety Data
We may collect or generate:
- Listing moderation scores;
- moderation flags and moderation events;
- rejection reasons;
- image-analysis metadata;
- OCR-derived text from uploaded images;
- safety and policy-enforcement related indicators.
4. How We Collect Personal Data
We may collect personal data:
- directly from you when you register, create a Listing, make a booking, upload files, send messages, submit reviews, or contact support;
- automatically when you use the Platform, including through device, security, and activity logs;
- from payment providers such as Stripe;
- from authentication or login providers;
- from other users where a booking, review, dispute, or support process involves you;
- from moderation, verification, or compliance checks performed manually or with automated assistance.
5. How We Use Personal Data
We use personal data for the following purposes.
5.1 To Create and Manage Accounts
We use personal data to register users, authenticate access, secure accounts, and maintain account settings.
5.2 To Publish and Manage Listings
We use data to allow Hosts to create, edit, publish, and manage Listings.
5.3 To Enable Bookings and Stays
We use data to allow Guests and Hosts to request, confirm, manage, cancel, and complete bookings.
5.4 To Process Payments, Refunds, Payouts, and Deposits
We use data to process booking payments, refunds, payouts, deposit-related operations, and payment-related disputes.
5.5 To Verify Users and Prevent Fraud
We use data to verify Hosts and, where applicable, Guests; to reduce fraud; to secure accounts; and to protect the Platform and its users.
5.6 To Provide Messaging, Notifications, and Support
We use data to support communication between users, provide customer support, send notifications, and respond to issues.
5.7 To Handle Disputes, Damage Reports, and Enforcement
We use data to review damage claims, investigate disputes, assess refunds, and enforce Platform rules.
5.8 To Moderate Content and Improve Safety
We use data to review Listings, uploaded content, reviews, and platform activity for quality, policy compliance, and trust and safety purposes.
5.9 To Improve the Platform
We use data to improve the user experience, platform functionality, ranking systems, safety features, and operational performance.
5.10 To Comply With Legal Obligations
We use data where necessary to comply with applicable legal, tax, accounting, regulatory, or law-enforcement obligations.
6. Legal Bases for Processing
Where the GDPR or similar laws apply, we rely on one or more of the following legal bases.
6.1 Performance of a Contract
We process personal data where necessary to:
- create and manage accounts;
- publish Listings;
- enable bookings;
- process payments and payouts;
- provide messages, notifications, and support connected to Platform use;
- administer cancellations, refunds, and booking-related workflows.
6.2 Legal Obligation
We process personal data where necessary to comply with legal obligations, including:
- accounting and financial recordkeeping;
- tax obligations;
- regulatory requests;
- certain compliance and identity-verification obligations;
- lawful disclosures to authorities.
6.3 Legitimate Interests
We may process personal data where necessary for our legitimate interests, including:
- fraud prevention;
- account and payment security;
- moderation and safety;
- dispute handling;
- support operations;
- service integrity;
- internal analytics and service improvement;
- enforcement of our Terms and Platform rules.
Where required, we will balance these interests against your rights and freedoms.
6.4 Consent
Where required by law, we rely on consent for certain optional processing activities, such as certain marketing communications or non-essential tracking technologies.
You may withdraw consent where applicable at any time. This will not affect the lawfulness of processing carried out before withdrawal.
7. How We Share Personal Data
7.1 Between Hosts and Guests
We may share limited personal data between Hosts and Guests where necessary for a booking, stay, communication, dispute, or support process.
For example:
- Hosts may see certain Guest identity and booking details relevant to the stay.
- Guests may see certain Host and Listing information relevant to the booking and stay.
7.2 With Stripe and Other Payment Providers
We may share personal data with Stripe and other integrated payment providers to:
- process payments;
- process refunds;
- support payouts;
- manage deposits or holds;
- complete onboarding and verification steps;
- comply with payment-related legal and compliance requirements.
7.3 With Verification, Compliance, and Fraud-Prevention Providers
We may share data with providers that help us perform:
- identity checks;
- age checks;
- onboarding checks;
- compliance screening;
- fraud prevention;
- safety or risk reviews.
7.4 With Hosting, Infrastructure, Messaging, and Storage Providers
We may share data with vendors that provide:
- cloud hosting;
- file storage;
- messaging infrastructure;
- email delivery;
- push notification services;
- analytics and technical operations.
7.5 With Support, Moderation, and Authorized Personnel
Authorized staff, contractors, and service providers may access personal data on a need-to-know basis for support, fraud prevention, moderation, legal compliance, and dispute handling.
7.6 With Advisors and Authorities
We may share personal data with:
- legal, tax, accounting, and professional advisors;
- courts, regulators, tax authorities, law enforcement, or other competent authorities,
where required by law or where necessary to establish, exercise, or defend legal claims.
8. Payments and Stripe
Payments on the Platform may be handled through Stripe.
When you use payment-related features, personal data may be processed in connection with:
- payment initiation;
- customer setup;
- payment method storage;
- payment verification;
- refunds;
- payouts;
- deposit holds or damage-related recovery;
- legal and compliance checks.
We may store limited payment-related metadata and Stripe identifiers, but payment card processing is generally handled by Stripe.
9. Verification, Fraud Prevention, and Safety
We may use personal data to verify users and protect the Platform.
This may include:
- identity verification;
- age verification;
- payment-related checks;
- legal-right-to-list verification for Hosts;
- fraud and abuse detection;
- suspicious activity reviews;
- account restriction or enforcement decisions.
Verification may involve manual review, automated checks, or both.
Failure to complete required verification may result in restricted access to Listings, bookings, payments, or payouts.
10. Messages, Reviews, and User Content
10.1 Messages
Messages sent through the Platform may be processed to:
- provide communication between users;
- support booking workflows;
- respond to support requests;
- investigate disputes;
- enforce rules;
- protect safety and prevent abuse.
10.2 Reviews
Reviews and ratings may be displayed to other users as part of the Platform’s trust and transparency features.
10.3 Listing Content
Hosts are responsible for the original content they submit in Listings. We may display, format, translate, moderate, and adapt that content for Platform purposes.
11. AI-Assisted Content and Automated Review
The Platform and/or Hosts may use AI-assisted tools for:
- Listing descriptions;
- summaries;
- translations;
- recommendations;
- moderation support.
We may also use automated tools to identify potentially unsafe, misleading, prohibited, or low-quality content. These processes may be combined with human review.
Hosts remain responsible for the original accuracy and lawfulness of their Listing content.
12. Data Retention
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including for:
- account administration;
- bookings and stays;
- payments and payouts;
- support and communication;
- fraud prevention and safety;
- compliance and legal obligations;
- dispute resolution and legal claims.
Retention periods may vary depending on the type of data and the purpose of processing. For example:
- account data may be retained while the account remains active and for a reasonable period thereafter;
- booking and payment records may be retained for accounting, tax, audit, and dispute purposes;
- verification data may be retained for compliance, fraud prevention, and legal obligations;
- messages and support data may be retained for communication history, safety, and dispute handling;
- damage reports and claim data may be retained for enforcement and legal-defense purposes.
13. International Data Transfers
Some of our service providers may process personal data outside the EEA, including in countries that may not provide the same level of data protection as your country.
Where required by applicable law, we use appropriate safeguards for such transfers, which may include:
- adequacy decisions;
- standard contractual clauses;
- or other lawful transfer mechanisms.
14. Cookies and Similar Technologies
We may use cookies and similar technologies for:
- essential site functionality;
- security;
- session management;
- performance and analytics;
- user preferences.
Where required by law, we will request consent before using non-essential cookies or similar technologies.
Where applicable, additional details may be provided in a separate Cookie Policy or through a cookie consent tool.
15. Data Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure.
However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security.
16. Your Rights
Where applicable under data protection law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of your data;
- request restriction of processing;
- object to certain processing;
- request portability of your data;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent supervisory authority.
To exercise your rights, contact us at [PRIVACY EMAIL].
We may need to verify your identity before processing certain requests.
17. Children
The Platform is intended for users aged 18 and older.
We do not intend to offer the Platform directly to children. If data relating to minors is processed in connection with a booking, such processing is limited to what is necessary for the booking and is typically provided by the responsible adult user.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we may notify users by:
- posting the updated Privacy Policy on the Platform;
- updating the “Last Updated” date;
- sending an email or in-platform notice where appropriate.
19. Contact Us
If you have questions, concerns, or privacy requests, please contact:
[LEGAL COMPANY NAME]
[FORM OF COMPANY: UG (haftungsbeschränkt)]
[REGISTERED ADDRESS]
[CITY, COUNTRY]
[PRIVACY / LEGAL EMAIL]
Website: rentapartments.com