Privacy policy

_Last updated: 2026-10-09_

This policy explains what data RentalMarket.mt collects through this website and through our pages on Facebook, Instagram and WhatsApp, why we collect it, and how you can have it deleted.

What we collect

If you send an enquiry through this site. Your name, the email address or phone number you provide, your message, and the property you asked about.

If you message us on Facebook Messenger, Instagram or WhatsApp. The content of your message, your display name, and the account identifier the platform gives us. These messages arrive in our system so we can reply; some receive an automated response. Where an automated reply asks what you are looking for, answering is optional and you can ask for a person at any time: say so and the questions stop, and do not start again.

If a member of our team connects a Facebook Page. The Page's identifier, its name, an access token for that Page (stored encrypted), and the app-scoped Facebook user ID of the person who connected it. We use these only to publish property listings to those Pages and to receive and answer messages sent to them. We do not read private profile information and we do not post on behalf of personal accounts.

If you own a property we advertise. Your name and phone number, and what we have been told about the property. Usually you gave us these yourself. Sometimes an agent gave them to us when they brought us your property, so that we can reach you about it — if you would rather we did not hold them, write to the contact address on this site and we will remove them. We never publish an owner's name or number: they are not in the advert, not on the website, and not in anything sent to Facebook or Instagram.

If you are an agent placing property with us. Your name, agency, phone number and email address, the listings you send us, the notes written on them, and the messages you exchange with us. Your name and number appear on the listings you place, because that is how somebody reaches you about a property you are advertising.

Emails we send to landlords and agents. Our emails contain a small image that tells us when a message was opened, and the links in them record when one is clicked. We use this only to know whether a message arrived and whether it is worth following up, on the basis of our legitimate interest in not chasing somebody who has already answered. It is not used to build a profile of anybody. You can object at any time by writing to the contact address on this site, and turning images off in your email program stops the open tracking on its own.

Automatically. Server logs containing your IP address, browser type and the page requested, for security and fault diagnosis.

Cookies and visit statistics

This site sets no cookies of its own accord. On your first visit we ask whether we may count your visit with Google Analytics. Say no, or say nothing at all, and nothing is set and nothing is sent to Google — we remember only your answer, in your browser, so that we do not ask again.

Say yes and Google Analytics sets a cookie that lets repeat visits be recognised, and Google receives your IP address, the pages you look at and general information about your device. We use it only to see which pages people find useful. We do not connect it to an enquiry, a name or an email address, and we do not use it for advertising. The lawful basis is your consent (Art. 6(1)(a) GDPR), and you can withdraw it at any time by clearing this site's storage in your browser, after which we will ask again. Google acts as our processor and may process data outside the EEA.

Separately from Google, and without any cookie, our own server counts what happens on the site: which pages are opened, what is searched for, which site or app a visit came from, and when a WhatsApp, call or email button is tapped. To tell one visit from another it uses a code made from your IP address and browser type with a random key that is replaced every day and never stored, so the code cannot be traced back to you or followed from one day to the next. Your IP address is not stored. We keep these counts for thirteen months, to see which properties people are interested in and what they cannot find, on the basis of our legitimate interest in running a useful site (Art. 6(1)(f) GDPR).

Where an agent gave us your details

If you are a property owner whose name and number reached us through an agent rather than from you, this section is the notice we owe you. We hold your name, your phone number and the property concerned. We use them to contact you about that property and to keep our records straight, on the basis of our legitimate interest in knowing whose property we are advertising. You have every right listed below, including the right to object and the right to have the details deleted; write to the contact address on this site and we will action it.

Why we process it

To respond to your enquiry, show you properties matching what you are looking for, publish our portfolio, and meet our legal and record-keeping obligations. Our lawful bases are performance of a contract or steps taken at your request before entering one, our legitimate interest in answering enquiries, and, where required, your consent.

How long we keep it

An enquiry that did not lead to a letting is deleted after 24 months. The messages in a conversation are deleted after 36 months. Where an enquiry did lead to a letting, the records are kept for as long as the tenancy and afterwards for the period our tax and accounting obligations require. Data for connected Facebook Pages is kept until the Page is disconnected or deletion is requested. Server logs are kept briefly.

Who we share it with

With landlords or agents where necessary to handle your enquiry, and with the companies that run the systems we use. Those are: Meta Platforms Ireland Limited (Facebook, Instagram and WhatsApp messages and posts), Google (Gmail / Google Workspace), Ireland (the email we send), Hetzner Online GmbH, Germany (the servers this site runs on), Cloudflare, Inc. (R2), EU jurisdiction (the encrypted backups of our data). Each of them acts on our instructions and none of them may use your data for their own purposes. We do not sell your data.

Outside the EEA. Meta processes messages in the United States. Those transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and, where it does not apply, on the Commission's standard contractual clauses. Everything else is held inside the EU.

Confirming a letting or a sale. Where a property you enquired about is taken through an agent we introduced you to, we may contact you to confirm that it went ahead. We do this to verify a referral fee owed to us, on the basis of our legitimate interest in being paid for an introduction we made. You can object at any time.

Your rights

You can request access, correction or deletion, object to processing, ask us to restrict processing, and ask for a copy of your data in a portable form. Where we rely on your consent you can withdraw it at any time. Write to the contact address on this site.

Complaining. If you think we have handled your data badly, please tell us first — but you have the right to complain to a supervisory authority regardless. Ours is the Autoriteit Persoonsgegevens in the Netherlands (autoriteitpersoonsgegevens.nl). You may also complain to the authority in the country where you live or work, whichever is easier for you.

What happens automatically

Some of this runs without a person in the loop. A message arriving on WhatsApp is read to work out whether it is about a property; an enquiry is compared against the properties on our books to see which fit what was asked for; a first reply is sometimes sent automatically. None of it makes a decision with a legal or similarly significant effect on you — a person decides who is shown a property and who is put forward to a landlord — and you can ask for a person at any point.

The software itself was written with the help of AI coding tools. That is how the system was built; it is not something that happens to your data, and your messages are not sent to an AI provider to train anything.

Who is responsible

The controller for this data is Viento Huijser, trading as VRH Consultancy and REOS, eenmanszaak, KVK 99084368, VAT NL005371093B89, Trasmolen 90, 3352 AK Papendrecht, Nederland.

Deleting your Facebook data

If you want us to delete the data stored through your Facebook account, there are two ways.

Through Facebook: go to Settings & privacy → Settings → Apps and websites, select this app and remove it. Facebook then sends us a deletion request automatically, we delete the stored Pages and tokens, and you receive a confirmation code you can use to check the status.

Directly: email the contact address on this site and we will action the request by hand.

Either route deletes the stored Page identifiers, Page names and access tokens. That also ends our ability to post or reply as those Pages.

Contact

Questions about this policy: the contact address on this site.