Article 1. Definitions

1.1. In this privacy statement, the following capitalized terms are used in the following meaning, unless expressly stated otherwise or the context requires otherwise:

AVG:
General Data Protection Regulation;

Person concerned:
The natural person whose Personal Data are processed;

Tenant:
The natural person who is looking for a rental property;

Client:
The natural person or legal entity who has entered into an Agreement with Rotsvast in connection with the rental of residential space and possibly in connection with the management of residential space;

Agreement:
The agreement between Rotsvast and the Data Subject, including the Agreement between the Client and Rotsvast and the registration of the Tenant with Rotsvast ;

Personal data:
Information about an identified or identifiable natural person;

Rotsvast :
The user of this privacy statement:

1. Rotsvast Nederland BV, located at Elzenhof 26 in Bodegraven, registered with the Chamber of Commerce under Chamber of Commerce number
53465288; and
2. Each branch of Rotsvast , see article 2.1 for a list of the branches of Rotsvast ;

Website:
The website https://www.rotsvast.nl.

1.2. Unless the context otherwise requires, defined terms in the singular also refer to the plural.

Article 2. Controllers

2.1. The controllers are:

Establishment Rotsvast Alphen aan den Rijn
Veerstal 32 2801 RB Gouda
Phone: +31(0)18-2591900
E-mail: alphen@rotsvast.nl
Chamber of Commerce number: 64358763

Establishment Rotsvast Amersfoort
High Naarderweg 8
1217 AE Hilversum
Phone: +31(0)35-6281717
Email: amersfoort@rotsvast.nl
Chamber of Commerce number: 64806820

Establishment Rotsvast Amstelveen
Amsterdamseweg 185
1182 GV Amstelveen
Phone:+31(0)20-5036560
Email: amstelveen@rotsvast.nl
Chamber of Commerce number: 34167860

Establishment Rotsvast Amsterdam
Hendrik Jacobszstraat 8H
1075PD Amsterdam
Phone:+31(0)20-6627662
E-mail: amsterdam@rotsvast.nl
Chamber of Commerce number: 34167860

Establishment Rotsvast Bergen op Zoom
Block stables 2b
4611 WB Bergen op Zoom
Phone: +31(0)164-745003
E-mail: amsterdam@rotsvast.nl
Chamber of Commerce number: 20081102

Establishment Rotsvast Breda
Academiesingel 40
4811 AC Breda
Phone: +31(0)76-5220565
E-mail: amsterdam@rotsvast.nl
Chamber of Commerce number: 85981834

Establishment Rotsvast Delft
Old Langendijk 20
2611 GL Delft
Phone: +31(0)15-2158010
E-mail: delft@rotsvast.nl
Chamber of Commerce number: 27240908

Establishment Rotsvast Den Bosch
Market Field 44
5261EB Vught
Phone: +31(0)73-8200397
E-mail: denbosch@rotsvast.nl
Chamber of Commerce number: 17270846

Rotsvast The Hague branch
Anna Paulownastraat 46
2518 BG The Hague
Phone: +31(0)70-3464840
E-mail: denhaag@rotsvast.nl
Chamber of Commerce number: 70337853

Establishment Rotsvast Dordrecht
Old Langendijk 20
2611 GL Delft
Phone: +31(0)10-4762323
E-mail: dordrecht@rotsvast.nl
Chamber of Commerce number: 27240908

Establishment Rotsvast Eindhoven
Willemstraat 14
5611 HD Eindhoven
Phone: +31(0)40-2440244
E-mail: eindhoven@rotsvast.nl
Chamber of Commerce number: 17087805

Establishment Rotsvast Gooi Hilversum
High Naarderweg 8
1217 AE Hilversum
Phone: +31(0)35-6281717
E-mail: hilversum@rotsvast.nl
Chamber of Commerce number: 64806820

Establishment Rotsvast Gouda
Turfmarkt 116
2801 HC Gouda
Phone: +31(0)18-2591900
E-mail: gouda@rotsvast.nl
Chamber of Commerce number: 64358763

Establishment Rotsvast Groningen
Oostersingel 104
9711 XH Groningen
Phone: + 31(0)50-5267200
E-mail: groningen@rotsvast.nl
Chamber of Commerce number: 02089047

Establishment Rotsvast Haarlem
p/a Elzenhof 26
2411 Hr Bodegraven
E-mail: haarlem@rotsvast.nl

Establishment Rotsvast Leeuwarden
North Road 18
8911 ES Leeuwarden
Phone: +31(0)58-2991991
Email: lionarden@rotsvast.nl
Chamber of Commerce number: 02089047

Establishment Rotsvast Leiden
The Leiden
Phone: +31(0)71-8200270
E-mail: leiden@rotsvast.nl
Chamber of Commerce number: 70337853

Establishment Rotsvast Maastricht
Hoogbrugstraat 22
6221 CR Maastricht
Phone: +31(0)43-7600076
Email: maastricht@rotsvast.nl
Chamber of Commerce number: 80640850

Establishment Rotsvast Nijmegen
Molenveldlaan 150a
6523 RN Nijmegen
Phone: +31(0)24-2122095
E-mail: nijmegen@rotsvast.nl
Chamber of Commerce number: 73097160

Establishment of Rotsvast Broek in Waterland
Lane 2
1151 AA Broek in Waterland
Phone: +31(0)299-429882
E-mail:Northholland@rotsvast.nl
Chamber of Commerce number: 55769810

Establishment Rotsvast Roermond
Willem II Singel 12
6041 HS Roermond
Phone: +31(0)475-316312
E-mail: roermond@rotsvast.nl
Chamber of Commerce number: 62315528

Establishment Rotsvast Rotterdam
Watertorenweg 336
3063 HA Rotterdam
Phone: +31(0)10-4762323
E-mail: rotterdam@rotsvast.nl
Chamber of Commerce number: 27240908

Establishment Rotsvast Tilburg
Piusstraat 24a
5038 WS Tilburg
Phone: +31(0)13-5441506
E-mail: tilburg@rotsvast.nl
Chamber of Commerce number: 64415570

Establishment Rotsvast Utrecht
Burg. Reigerstraat 84 3581 KW Utrecht
Phone: +31(0)30-2144346
E-mail: utrecht@rotsvast.nl
Chamber of Commerce number: 62129503

Establishment Rotsvast Zeeland
London Quay 45
4331 JH Middelburg
Phone: +31(0)118-611412
E-mail:middelburg@rotsvast.nl
Chamber of Commerce number: 85981834

Establishment Rotsvast Zoetermeer
Turfmarkt 116
2801 HC Gouda
Phone: +31(0)182-591900
E-mail:zoetermeer@rotsvast.nl
Chamber of Commerce number: 64358763

Rotsvast Netherlands BV
Elzenhof 26
2411 HR Bodegraven
Phone: 06-23226323
E-mail: info@rotsvast.nl
Chamber of Commerce number: 53465288

Article 3. Personal data

3.1. Rotsvast collects and processes the following Personal Data:
a. First names and last name;
b. Address;
c. Postal code and city;
d. Email address;
e. Telephone number;
f. Occupation;
g. Marital status;
h. Copy of identity document;
i. IBAN;
j. Income data;
k. Employment contract;
l. Date of birth;
m. Place of birth;
n. Country of birth.
3.2. Rotsvast does not process any special Personal Data of Data Subjects.
3.3. In order to enter into an Agreement, the Tenant must provide the following Personal Data to Rotsvast : First name, last name, telephone number and e-mail address. Without this Personal Data, the Tenant cannot be registered with Rotsvast .
3.4. In order to conclude an Agreement, the Client must provide the following Personal Data to Rotsvast : First name, last name, address, postal code, city, telephone number and e-mail address. Without this Personal Data, the Rental Mediation Agreement and any management cannot be concluded.
3.5. In order to enter into a letter of intent regarding the rental of a residential property and to be able to enter into a rental agreement through the mediation of Rotsvast , the Tenant is obliged to provide certain Personal Data to Rotsvast , such as: Address, postcode, place of residence, profession, marital status, income, employment contract, date of birth, place of birth, country of birth and copy of identity document. The exact Personal Data that must be provided will be made known to the Tenant before the letter of intent or the rental agreement can be concluded. Without this Personal Data, the letter of intent or the rental agreement cannot be concluded.
3.6. If Rotsvast makes a copy of the Data Subject’s identity document to establish the Data Subject’s identity, the Citizen Service Number (BSN) will be blacked out.

Article 4. Basis and purposes of the processing

4.1. The basis for the processing of the Personal Data is the performance of the Agreement, the consent of the Data Subject and compliance with legal obligations.

4.2. Rotsvast collects and processes the Personal Data for the following purposes:
a. The conclusion of the Agreement;
b. The performance of the Agreement;
c. Sending rental properties that are new to the Tenant by e-mail
rental property offers from Rotsvast are included and fall within the requirements that
the Tenant has made known to Rotsvast ;
d. Making an appointment for a viewing;
e. Sending a confirmation of a viewing;
f. Sending information about a rental property that the Tenant wishes to view;
g. Making contact regarding the Agreement; h. Handling a question, comment or complaint from the Data Subject;
i. Drawing up a letter of intent;
j. Drawing up a rental agreement;
k. Assessing whether the Tenant has sufficient financial resources to meet the financial
to comply with obligations that will arise from renting a property in which the Tenant is interested;
l. Compliance with administrative obligations;
m. Sending the invoice;
n. Entering into and maintaining a customer relationship with the Data Subject;
o. Carrying out management activities on behalf of the Client; p. Compliance with laws and regulations.
4.3. Rotsvast will not retain the Personal Data for longer than is strictly necessary to achieve the purposes, as described in Article 4.2, for which the Personal Data are processed, unless there is a legal obligation that requires longer retention.
4.4. Rotsvast only processes the Personal Data that are minimally necessary for the existing purposes. Rotsvast strives for minimal data processing.
4.5. Rotsvast will not process the Personal Data for purposes other than those described above.
4.6. Rotsvast does not use automated decision-making.
4.7. For Rotsvast , careful handling of Personal Data is of great importance.
With regard to the processing of Personal Data, Rotsvast acts in accordance with the GDPR.

Article 5. Erasure of Personal Data

5.1. Rotsvast will delete Personal Data from its systems without undue delay, including if:
a. The Personal Data are no longer necessary in relation to the purposes for which they were processed;
b. The Data Subject objects to the processing of his or her Personal Data and this objection is justified;
c. The Personal Data is incorrect or out of date.
5.2. Rotsvast is not obliged to erase Personal Data if one of the situations described in the law applies in which the “right to be forgotten” does not apply.

Article 6. Providing Personal Data to Third Parties

6.1. Rotsvast will provide the Personal Data of the Data Subject to third parties if:
a. One of the legal bases applies to which the provision of
personal data to a third party is permitted;
b. It is necessary for the performance of the Agreement;
c. The Data Subject requests Rotsvast to provide Personal Data to a third party;
d. The Data Subject has given his consent to this;
e. The transfer will be made to a third party engaged by Rotsvast for the purposes listed in this privacy statement, such as, but certainly not limited to, an ICT service provider or an administrative office, with which third party Rotsvast has agreed by means of an agreement or other legal act that the third party offers sufficient guarantees with regard to technical and organizational security measures with regard to the processing to be carried out. Engaged third parties only have access to the Personal Data if this is necessary to carry out their work for Rotsvast and to the extent permitted by law;
f. It has been requested by an authority, such as the police or the judiciary. Before Rotsvast provides Personal Data to an authority, Rotsvast checks the powers of this authority.

Article 7. Right of access, right to portability, rectification and deletion

7.1. Upon request, Rotsvast will grant the Data Subject access to all Personal Data that Rotsvast maintains about him and will provide the Data Rotsvast free of charge with a copy of this Personal Data in such a form that the Data Subject himself can provide the Personal Data to a third party.
7.2. Rotsvast offers the Data Subject the opportunity to have any incorrect Personal Data that Rotsvast holds about him corrected or deleted free of charge.

Article 8. Objection

8.1. The Data Subject may object to the processing of his Personal Data at Rotsvast if he has a good reason to do so given his specific situation. After Rotsvast has received the Data Subject’s objection, Rotsvast will stop processing the Data Subject’s Personal Data, unless Rotsvast has legitimate interests in processing Personal Data that outweigh the interest of the Data Subject.

Article 9. Right by limitation

9.1. If the Data Subject has submitted a request to amend, supplement or delete his Personal Data or has submitted an objection to the processing of his Personal Data and the handling, processing and execution of this request or objection takes some time, the Data Subject may request Rotsvast to limit the processing of his Personal Data.

Article 10. Consent

10.1. The Data Subject may withdraw a given consent regarding the processing of his Personal Data at any time. The withdrawal of consent shall not have retroactive effect.

Article 11. Questions, requests and complaints

11.1. A request regarding Personal Data, including the exercise of one or more of the rights referred to in Article 7, 8 or 9, the withdrawal of consent or questions about this privacy statement can be submitted in the following ways:
a. By e-mail: info@rotsvast.nl;
b. By contacting the Rotsvast office by telephone or e-mail
with which the Data Subject has had contact or with which the Data Subject has entered into an Agreement, see article 2.1 for the contact details of the Rotsvast branches.
11.2. If the Data Subject invokes one of the rights described in Articles 7, 8 and 9, Rotsvast will inform the Data Subject within 1 month of receipt of the request about the action taken on the request.
11.3. If Rotsvast , at the request of the Data Subject, corrects, supplements or deletes Personal Data of the Data Subject or terminates or restricts the processing of the Personal Data or has processed a withdrawn consent, Rotsvast will inform the Data Subject thereof.
11.4. If the Data Subject believes that the processing of Personal Data by Rotsvast is not in accordance with this privacy statement and/or with the applicable laws and regulations, the Data Subject may file a complaint with the Dutch Data Protection Authority or with a supervisory authority in the country where the Data Subject resides.

Article 12. Security measures

12.1. In order to prevent unauthorized access to Personal Data, loss, theft and unlawful use of Personal Data, Rotsvast has taken various security measures, including measures against unauthorized access, use, modification, unlawful and unintentional destruction and unintentional loss of Personal Data. Rotsvast has taken the following security measures, among others:
a. Using secure systems with strong passwords to prevent unauthorized access to systems;
b. Using secure network connections;
c. The use of antivirus software;
d. The Website uses an SSL certificate;
e. Regularly performing software updates.
12.2. Persons who are hired by Rotsvast or who enter into employment with Rotsvast and who become aware of Personal Data in the context of their duties are obliged to maintain confidentiality by Rotsvast , for example in a contract of assignment, employment contract or confidentiality statement.
12.3. Only those employees of Rotsvast for whom it is necessary to have access to Personal Data in the context of their function/activities will be granted access to the Personal Data by Rotsvast .

Article 13. Amendments

13.1. Rotsvast reserves the right to unilaterally make changes to this privacy statement, for example due to a change in the law. The latest version of Rotsvast ‘s privacy statement can be found on the Website.

Article 14. Security Incident

14.1. If a security incident has occurred at Rotsvast in which Personal Data of a sensitive nature has been leaked or which for any other reason has a serious adverse effect on the protection of the processed Personal Data, Rotsvast will, if possible, report this to the Dutch Data Protection Authority within 72 hours of discovering the security incident and act in accordance with the Dutch Data Protection Authority’s data breach reporting policy rules.
14.2. If there is a security incident at Rotsvast that has an adverse effect on the personal privacy of the Data Subject, Rotsvast will inform the Data Subject thereof without delay.

Article 15. Third party privacy statement

15.1. This privacy statement does not apply to third party websites, such as social media websites, that are connected to the Website by means of links. Rotsvast accepts no responsibility or liability with regard to the manner in which these websites handle Personal Data. For more information about the manner in which these third parties handle Personal Data, etc., the privacy statement of the relevant website should be consulted.

Article 16. Cookies

16.1. The Website uses functional and analytical cookies.
16.2. A cookie is a small text file that is placed on your computer when you first visit the Website.
stored in the browser of the website visitor’s device.
16.3. The website visitor can opt out of cookies by changing his internet browser settings
to set it so that it no longer stores cookies. In addition, the website visitor can also delete all information previously stored via the settings of his browser. More information about enabling and disabling and deleting cookies can be found by the website visitor in the instructions and/or by using the Help function of his browser.
16.4. Rotsvast uses functional cookies to ensure the Website functions optimally.
16.5. With the help of analytical cookies, Rotsvast can collect and analyze information that
is connected to the way in which the Website is used. By using analytical cookies, Rotsvast processes data about the use of the Website, such as the amount of time spent on certain pages, country location, the type of device used to access the Website, performance statistics and similar data. Analytical cookies are placed by a third party, Google, on behalf of Rotsvast .
16.6. The Website only uses cookies that have no or very limited consequences for the privacy of the website visitor and for which no permission is required.
16.7. No Personal Data within the meaning of the GDPR is processed by means of cookies.
16.8. On this page you can read more about how Google handles personal data when a person agrees to the cookies on the Rotsvast website.