Privacy Statement

I. Definitions and General Provisions

Article 1 – Definitions

For the purposes of this Privacy Statement, the following terms have the following meanings:

Privacy Statement: this privacy statement;

GDPR: the General Data Protection Regulation (Regulation (EU) 2016/679);

Data Subject: any natural person whose Huurfix is processed by Huurfix , including the Tenant and the Landlord;

Tenant: the person who has Huurfix to provide services;

Landlord: the landlord of the Tenant’s dwelling, or the landlord’s authorized representative;

Huurfix: Huurfix .V., located at Lichttoren 32, 5611 BJ Eindhoven, registered in the Commercial Register of the Chamber of Commerce under number 96141476, and reachable viahuurfix;

Rent Review: the assessment of the Tenant’s living space based on the statutory points system (housing valuation system);

Website:huurfix.

Article 2 – General Provisions

2.1 This Privacy Statement describes how Huurfix, as the data controller within the meaning of the GDPR, processes personal data of Data Subjects, including both the Renter and the Landlord.

II. Processing of Personal Data

Article 3 – Personal Data

3.1 Huurfix , among other things, the Tenant’s name, contact information, details about the living space and the lease agreement, payment information, and communications with Huurfix. This information is provided by the Tenant. Huurfix processes Huurfix Landlord’s Huurfix and contact information to the extent necessary to correspond on behalf of the Tenant; this information is provided by the Tenant or obtained from sources such as the Land Registry or the Chamber of Commerce, and is only obtained directly from the Landlord in exceptional cases.

3.2 Providing this information is necessary to perform the Rent Check and provide further services; without this information, Huurfix cannot provide Huurfix services, or cannot provide them in full.

3.3 To the extent that the file contains special categories of personal data, such as income data or health data, Huurfix processes Huurfix only to the extent necessary for the establishment, exercise, or defense of legal claims (Article 9(2)(f) of the GDPR).

Article 4 – Purposes and Principles

4.1 Huurfix personal data for the following purposes, based on the legal basis specified for each:

Article 5 – Processing of the Lessor’s Data

5.1 Huurfix on behalf of the Tenant in dealings with the Landlord. The basis for this is the legitimate interest of Huurfix the Tenant in effectively representing the Tenant’s interests. The Landlord has not given consent for this, and, given the number of Landlords and the nature of the services provided, is not informed separately about this processing (Article 14(5)(b) of the GDPR). The Landlord may exercise the rights set forth in Article 9 in the same manner as the Tenant.

5.2 To the extent that the processing of the Landlord’s data is necessary for the establishment, exercise, or defense of legal claims, Huurfix may reject Huurfix request by the Landlord to erase his data (Article 17(3)(e) of the GDPR) or to cease processing following an objection (Article 21(1) of the GDPR) reject such a request on that basis.

III. Disclosure and Transfer

Article 6 – Recipients

6.1 Huurfix personal data exclusively to the following categories of recipients, to the extent necessary for the purposes specified in Article 4, or if Huurfix is legally required Huurfix : IT service providers for administration, customer management, email, and electronic signatures; a payment service provider; WhatsApp, for the purpose of automated communication; the Website’s hosting provider; advertising networks, only with consent; and the Rent Commission, courts, and, where applicable, an attorney, in the context of legal proceedings.

6.2 Huurfix has entered into a data processing agreement with the processors among the recipients listed above, to the extent required. The Rent Commission, courts, and any attorney receive data in their own capacity as part of the proceedings and are not data processors for Huurfix.

Article 7 – Transfer Outside the European Economic Area

7.1 Some of the recipients listed in Article 6 are located in, or process data from, the United States. This transfer is based on the EU-U.S. Data Privacy Framework, to the extent applicable, supplemented by the European Commission’s standard contractual clauses.

IV. Data Retention and Rights of Data Subjects

Article 8 – Retention Periods

8.1 Huurfix the Tenant’s file for up to 7 years after the completion of the service, in accordance with the tax retention requirement for the relevant records. Data used for email marketing is retained for as long as the Data Subject remains subscribed; data used for advertising cookies is retained in accordance with the cookie policy. Huurfix not Huurfix personal data for longer than necessary, unless otherwise required by law.

Article 9 – Rights of Data Subjects

9.1 The data subject has, to the extent applicable, the right to access, rectification, erasure, and restriction of processing, and, to the extent that the processing is based on consent or a contract and is carried out by automated means, the right to data portability. The data subject may object to processing based on a legitimate interest and has an unconditional right to object to direct marketing. Consent may be withdrawn at any time. Huurfix to a request within one month and may request verification of the requester’s identity.

9.2 Requests or questions may be directed tohuurfix. The data subject has the right to file a complaint with the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).

V. Final Provisions

Article 10 – Changes and Contact Information

10.1 Huurfix amend this Privacy Statement; the most recent version is available on the Website. This Privacy Statement was last updated on July 8, 2026. Contact: Huurfix .V., Lichttoren 32, 5611 BJ Eindhoven,huurfix.