Privacy statement

To help you swap, we need data about you and your home. Here you can read which data, why, and what your rights are. We comply with the Algemene verordening gegevensbescherming (AVG), known in English as the General Data Protection Regulation (GDPR).

Who is responsible

company name, address, KvK (Dutch Chamber of Commerce) number KvK number, is responsible for processing your data on Woonwissel. Send any questions about privacy to email address.

Which data we process

• Account: your name, your email address and which email notifications you want to receive. You log in with a link that we send to your email address; we do not need a password.
• Listing: the address of your home, the type of home, the number of rooms, the floor area, the rent, photos, a floor plan, a description, your landlord, the features and your preferences, such as the neighbourhoods where you want to live.
• Messages: what you exchange with other users through the platform.
• Payments: which service you bought, when and for what amount. Your bank or card details are processed by our payment provider Mollie, not by us.
• Technical data: your IP address, the type of browser and device, and when you use the platform.
• Reports and blocks: who you reported or blocked, why, and your explanation. The person you reported does not see that it was you.

If you choose neighbourhoods and preferences before you have an account, that choice stays on your own device. It only reaches us when you sign up.

Why, and on what legal basis

Purpose	Legal basis
Your account, your listing, swap suggestions and messages	Performance of the contract
Delivering and invoicing paid services	Performance of the contract and the legal obligation to keep records
Preventing abuse, scams and fake listings	Legitimate interest
Securing and improving the platform	Legitimate interest
News and tips by email, if you choose to receive them	Consent, which you can withdraw at any time

What other users see

Other users see your listing: the details and photos of your home, the street and the town, your preferences and your first name. When you have a match, the other person also sees your house number and postcode. We do not show your email address. What you put in a message is only seen by the person you send it to. If someone reports a conversation, our admin team reads the messages to assess the report.

Who we share data with

We do not sell your data. We work with service providers that only process data on our instructions, under a data processing agreement:

• the hosting company where the platform runs;
• the service that sends our emails;
• Mollie, the payment provider that handles your payments;
• OpenFreeMap, which supplies the map images. If you load the map, that service sees your IP address.
• PDOK, the Dutch government's address search, which looks up your address as you type it. That service sees what you type and your IP address.

If a service provider processes data outside the European Economic Area, this only happens with appropriate safeguards, such as the European Commission's standard contractual clauses. We give data to the authorities if the law requires us to.

How long we keep data

• Account, listing and messages: until you delete your account. You can do that yourself, in My account. We then erase them straight away; they disappear from our backups within 30 days.
• If you do not log in for 2 years, we delete your account. We send you a reminder a month beforehand.
• Payments and invoices, with your name and email address: 7 years, even if you delete your account, because tax law requires it.
• Technical log files: no more than 6 months.

Security

The platform only works over a secure connection (https). We do not have passwords: for login links we only store an unreadable derivative (a hash), and each link works once. Only people who need your data for their work can access it.

Your rights

You may view your data, have it corrected or have it erased. You may ask to receive it in a common file format, object to processing and withdraw consent you have given. Send your request to email address; we respond within a month. You can also correct your data or delete your account yourself, in My account.

If you are not happy with how we handle your data, you can file a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).

Changes

If we change this statement, you will see it from the date at the top. If the changes are major, we will tell you in advance. You can read more about cookies in the cookie statement.