Privacy Policy

1. Who we are

RoomRadar NL ("RoomRadar", "we", "us") operates the website at the domain from which you reached this page and helps international students and renters in the Netherlands receive instant alerts when matching rental homes are listed. We are the data controller for the personal data described in this policy under the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).

For privacy questions, contact us at privacy@roomradar.nl. For support and general inquiries, email support@roomradar.nl. We typically respond within 1–2 business days.

2. What data we collect

• Account data: email address, password (hashed), full name, user type (student, professional, family) and employment status when you create an account.
• Saved searches & alert preferences: cities, search radius, budget, property type, move-in window, registration preference and amenity filters you submit so we can match listings.
• Favorites: the listings you save to your favorites list.
• Notifications & email activity: matches generated for you, timestamps, delivery status, bounce/error events and your unsubscribe state.
• Technical data: IP address, browser type, device, pages visited and aggregated usage metrics used in our internal analytics dashboard.

3. Why we use your data and our legal basis

• Performance of contract (Art. 6(1)(b) GDPR): to provide your account, run the matching engine on your saved searches, deliver email alerts for matching listings and let you manage favorites.
• Legitimate interest (Art. 6(1)(f) GDPR): to keep the service secure, prevent abuse, and produce aggregated, non-identifying analytics (totals of users, listings, matches and top cities) so we can improve RoomRadar NL.
• Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable Dutch and EU law, including responding to lawful requests from authorities.
• Consent (Art. 6(1)(a) GDPR): for any optional cookies or future marketing communications. You can withdraw consent at any time.

4. Email alerts and unsubscribe

When a new listing matches your saved search, we send a transactional email containing the listing title, city, monthly rent, property type and a link to the listing. Every email includes a one-click unsubscribe link that opens our unsubscribe page and immediately disables all listing-match emails for your account. You can also disable email notifications in your profile settings. Account and security emails (password resets, login alerts) are not affected by unsubscribing because they are necessary to operate your account.

5. Analytics

Our internal admin analytics dashboard shows only aggregated counts (total users, active alerts, listings, favorites, notifications generated, emails sent, top searched and matched cities). It does not display your name, email, search terms or any other identifying detail to other users.

6. How we share data

We do not sell personal data. We share data only with processors who help us operate the service under a GDPR-compliant data processing agreement: our cloud database and authentication provider, our transactional email provider, and our hosting/CDN provider. Where a processor is located outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses.

7. How long we keep your data

• Account, saved searches and favorites: until you delete your account.
• Notification and email-delivery logs: up to 12 months for deliverability and abuse-prevention, then deleted or anonymised.
• Aggregated analytics: retained indefinitely in non-identifying form.
• After account deletion, residual backups are purged within 30 days.

8. Your GDPR rights

Under the GDPR you have the right to access, rectify, erase or port your personal data, to restrict or object to processing, and to withdraw any consent you gave. You can exercise most of these rights directly from your profile page or by emailing privacy@roomradar.nl. We respond within one month.

If you believe we have not handled your data correctly you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. Security

Passwords are hashed, traffic is encrypted in transit (TLS), and database access is protected by row-level security so users can only read and write their own data. We review our security posture regularly.

10. Changes to this policy

We may update this policy when the service evolves or the law changes. We will update the "Last updated" date above and, for material changes, notify you by email or in-app banner before they take effect.

11. Contact

For privacy-related questions contact: support@roomradar.nl. We typically respond within 1–2 business days.