GDPR Compliance: How TenePass Protects Your Data

< All Topics

Renting a home often means sharing sensitive personal documents like ID cards, bank statements, and salary slips with multiple landlords or agencies. Without strict safeguards, this information can be exposed to unnecessary risks. TenePass was created precisely to stop this oversharing. That is how TenePass protects your data by replacing repeated document sharing with one secure, verified certificate that keeps your information private while making the rental process faster and safer.

At TenePass, we make rental scoring faster and fully compliant with the General Data Protection Regulation (GDPR). Every step of our process, from document submission to certificate sharing, follows the highest privacy standards. This means your data stays safe, your rights are protected, and you can apply for properties with confidence.

Clear Consent and Honest Communication

We believe in being upfront about how we handle your data. Before we process anything, you give clear permission and know exactly what happens next. This approach follows the GDPR principles of lawfulness, fairness, and transparency (Articles 5(1)(a) and 6), ensuring that your information is always treated with honesty and respect.

Used Only for What You Agree To

Your information is collected only to create your rental score and verified TenePass certificate, nothing more. We never use your data for marketing or unrelated purposes. This follows the GDPR rule on purpose limitation (Article 5(1)(b)), which means your data is used exactly as promised, and only for that purpose.

Only What’s Needed, Nothing More

We share just enough information to make renting safe and simple. Landlords see your rental score and a few basic details, but never your actual documents. Even your rental profile and preferences are optional.

You decide what to show and can hide them from your certificate at any time, even after sharing it. This follows the GDPR rule on data minimization (Article 5(1)(c)), ensuring your privacy stays protected without slowing down the process.

Checked for Accuracy and Fairness

Every document you upload is reviewed by human trained experts in our evaluation team. They make sure your information is correct and genuine, so your score is fair and reliable. This follows the GDPR principle of accuracy (Article 5(1)(d)), which requires all personal data to be correct and up to date.

Kept Only as Long as Needed

We securely store your documents only while they are needed for your active certificate. They are permanently deleted 30 days after the certificate expires or if you delete your account. This follows the GDPR principle of storage limitation (Article 5(1)(e)), which ensures that personal data is never kept longer than necessary.

Secure and Confidential at Every Step

Your data is protected with strong AES-256 encryption, hosted securely within the EU, and accessible only to authorized team members. These measures follow the GDPR principles of integrity and confidentiality (Articles 5(1)(f) and 32), ensuring your information stays private and secure at all times.

Transparent and Accountable

Every time a document is accessed or a scoring action is taken, it is automatically recorded in a detailed audit log. This provides full transparency and meets the GDPR principle of accountability (Article 5(2)), ensuring every action on your data can be traced and verified.

Your Data, Your Rights

You stay in control of your information at all times. You can view, correct, delete, or withdraw consent for your data whenever you choose. TenePass also includes multiple visibility layers, so you can enable or disable your shared certificate or attached rental profile at any time. When you turn them off, your data is instantly hidden across the entire platform. This follows the GDPR principles on data subject rights (Articles 12 to 23), which guarantee your ability to manage how your personal data is used.

Our Partners Follow the Same Rules

Every partner we work with signs a GDPR-compliant processing agreement. This ensures your data is handled with the same care, security, and confidentiality as within TenePass itself. This follows the GDPR principle on processor obligations (Article 28), requiring all partners to meet strict data protection standards.

Your Data Stays Within Safe Borders

We keep your personal data within the European Union, where it is fully protected by EU privacy laws. If a transfer outside the EU is ever needed, it will happen only with your explicit consent and strong safeguards in place. This follows the GDPR principles on data transfers (Articles 44 to 50), ensuring your information remains secure wherever it goes.

TenePass is GDPR-native

At TenePass, privacy is not an afterthought, it is the foundation of trust between renters and those offering a home. Every feature, safeguard, and setting is designed to give you control over your information while keeping it secure within the EU.

We are not just GDPR-compliant, we are GDPR-native, meaning privacy is built into our system from the ground up, not added later as an obligation. For full details about your rights, data handling, and our technical measures, please refer to our Privacy and Cookie Policy, where we explain exactly how your information stays protected at every step.

Table of Contents
Was this helpful?