PRIVACY STATEMENT

PROPS REAL ESTATE

Article 1. Definitions

1.1. In this privacy statement, the following capitalized terms are used in the following meaning, unless expressly stated otherwise or the context otherwise requires:

GDPR: General Data Protection Regulation;

Data subject: The natural person whose Personal Data are processed;

Tenant: The natural person who is looking for a rental property;

Client: The natural person or legal entity who has entered into an Agreement with Propsvastgoed in connection with the rental of residential space and possibly in connection with the management of residential space;

Agreement:The agreement between Propsvastgoed and the Data Subject, including the Agreement between the Client and Propsvastgoed and the registration of the Tenant with Propsvastgoed;

Personal data: Data relating to an identified or identifiable natural person;

Propsvastgoed: The user of this privacy statement: 1. Propsvastgoed, located at Donkere Spaarne 18 in Haarlem, registered with the Chamber of Commerce under Chamber of Commerce number 34107572

Website: The website https://www.propsvastgoed.nl.1.2. Unless otherwise indicated in the context, defined terms in the singular also refer to the plural.

Article 2. Controllers

2.1. The controller is: Propsvastgoed Donkere Spaarne 18 2011 JG Haarlem Telephone number: 31 (0) 23-5318080 Email: office@propsvastgoed.nl Chamber of Commerce number: 34107572

Article 3. Personal data

3.1. Propsvastgoed collects and processes the following Personal Data:a. First and last names;b. Address;c. Postal code and city;d. E-mail address;e. Telephone number;f. Occupation;g. Marital status;h. Copy of identity document;i. IBAN;j. Income data;k. Employment contract;l. Date of birth;m. Place of birth;n. Country of birth.3.2. Propsvastgoed does not process any special Personal Data of Data Subjects.3.3. In order to conclude an Agreement, the Tenant must provide the following Personal Data to Propsvastgoed: First name, last name, telephone number and e-mail address. Without this Personal Data, the Tenant cannot be registered with Propsvastgoed.3.4. In order to conclude an Agreement, the Client must provide the following Personal Data to Propsvastgoed: First name, last name, address, postal code, city, telephone number and e-mail address. Without this Personal Data, the Rental Mediation Agreement and any management cannot be concluded.3.5. In order to enter into a letter of intent regarding the rental of a residential property and to be able to enter into a rental agreement through the mediation of Propsvastgoed, the Tenant is obliged to provide certain Personal Data to Propsvastgoed, such as: Address, postcode, place of residence, profession, marital status, income, employment contract, date of birth, place of birth, country of birth and copy of identity document. The exact Personal Data that must be provided will be made known to the Tenant before the letter of intent or the rental agreement can be concluded. Without this Personal Data, the letter of intent or the rental agreement cannot be concluded.3.6. If Propsvastgoed makes a copy of the identity document of the Data Subject in order to establish the identity of the Data Subject, the Citizen Service Number (BSN) will be blacked out.

Article 4. Basis and purposes of the processing

4.1. The basis for processing the Personal Data is the performance of the Agreement, the consent of the Data Subject and compliance with legal obligations.4.2. Propsvastgoed collects and processes the Personal Data for the following purposes:a. The conclusion of the Agreement;b. The performance of the Agreement;c. Sending the Tenant by e-mail rental properties that have been newly included in the rental property offer of Propsvastgoed and that fall within the wishes that the Tenant has made known to Propsvastgoed;d. Making an appointment for a viewing;e. Sending a confirmation of a viewing;f. Sending information about a rental property that the Tenant wishes to view;g. Making contact regarding the Agreement;h. Handling a question, comment or complaint from the Data Subject;i. Drawing up a letter of intent;j. Drawing up a lease agreement;k. Assessing whether the Tenant has sufficient financial resources to meet the financial obligations that will arise from renting a home in which the Tenant is interested;l. Complying with administrative obligations;m. Sending the invoice;n. Entering into and maintaining a customer relationship with the Data Subject;o. Carrying out management activities on behalf of the Client; p. Complying with laws and regulations.4.3. Propsvastgoed will not retain the Personal Data for longer than is strictly necessary to achieve the purposes, as described in article 4.2, for which the Personal Data are processed, unless there is a legal obligation that requires longer retention. 4.4. Propsvastgoed only processes the Personal Data that are minimally necessary for the existing purposes. Propsvastgoed strives for minimal data processing. 4.5. Propsvastgoed will not process the Personal Data for purposes other than those described above. 4.6. Propsvastgoed does not use automated decision-making. 4.7. Careful handling of Personal Data is of great importance to Propsvastgoed. With regard to the processing of Personal Data, Propsvastgoed acts in accordance with the GDPR.

Article 5. Erasure of Personal Data

5.1. Propsvastgoed will delete Personal Data from its systems without undue delay if: a. The Personal Data are no longer necessary for the purposes for which they were processed; b. The Data Subject objects to the processing of his Personal Data and this objection is justified; c. The Personal Data are incorrect or outdated. 5.2. Propsvastgoed is not obliged to delete Personal Data if one of the situations described in the law applies in which the “right to be forgotten” does not apply.

Article 6. Providing Personal Data to Third Parties

6.1. Propsvastgoed will provide the Personal Data of the Data Subject to third parties if: a. One of the legal bases applies on which the provision of personal data to a third party is permitted; b. It is necessary for the performance of the Agreement; c. The Data Subject requests Propsvastgoed to provide Personal Data to a third party; d. The Data Subject has given his consent for this; e. The transfer is made to a third party engaged by Propsvastgoed for the purposes listed in this privacy statement, such as, but certainly not limited to, an ICT service provider or an administrative office, with which third party Propsvastgoed has agreed by means of an agreement or other legal act that the third party offers sufficient guarantees with regard to technical and organizational security measures with regard to the processing to be carried out. Engaged third parties only have access to the Personal Data if this is necessary to carry out their work for Propsvastgoed and to the extent legally permitted; f. This has been requested by an authority, such as the police or the judiciary. Before Propsvastgoed provides Personal Data to an authority, Propsvastgoed checks the powers of this authority.

Article 7. Right of access, right to portability, rectification and deletion

7.1. Upon request, Propsvastgoed will grant the Data Subject access to all Personal Data that Propsvastgoed keeps about him and Propsvastgoed will provide the Data Subject with a copy of this Personal Data free of charge in such a form that the Data Subject can provide the Personal Data to a third party himself. 7.2. Propsvastgoed offers the Data Subject the opportunity to have any incorrect Personal Data that Propsvastgoed keeps about him corrected or deleted free of charge.

Article 8. Objection

8.1. The Data Subject may object to the processing of his Personal Data at Propsvastgoed if he has a good reason to do so given his specific situation. After Propsvastgoed has received the Data Subject's objection, Propsvastgoed will stop processing the Data Subject's Personal Data, unless Propsvastgoed has legitimate interests in processing Personal Data that outweigh the interest of the Data Subject.

Article 9. Right by limitation

9.1. If the Data Subject has submitted a request to amend, supplement or delete his Personal Data or has submitted an objection to the processing of his Personal Data and the handling, processing and execution of this request or objection takes some time, the Data Subject may request Propsvastgoed to limit the processing of his Personal Data.

Article 10. Consent

10.1. The Data Subject may withdraw a given consent regarding the processing of his Personal Data at any time. The withdrawal of consent shall not have retroactive effect.

Article 11. Questions, requests and complaints

11.1. A request regarding Personal Data, including exercising one or more of the rights referred to in Article 7, 8 or 9, withdrawing consent or questions about this privacy statement can be submitted in the following ways:a. By e-mail: office@propsvastgoed.nl;b. By contacting the Propsvastgoed branch by telephone or e-mail with which the Data Subject has had contact or with which the Data Subject has entered into an Agreement, see Article 2.1 for the contact details of the Propsvastgoed branches.11.2. If the Data Subject invokes one of the rights described in Articles 7, 8 and 9, Propsvastgoed will inform the Data Subject within 1 month of receipt of the request about the action taken on the request.11.3. If Propsvastgoed, at the request of the Data Subject, corrects, supplements or deletes Personal Data of the Data Subject or terminates or limits the processing of the Personal Data or has processed a withdrawn consent, Propsvastgoed will inform the Data Subject thereof.11.4. If the Data Subject believes that the processing of Personal Data by Propsvastgoed is not in accordance with this privacy statement and/or with the applicable laws and regulations, the Data Subject may file a complaint with the Dutch Data Protection Authority or with a supervisory authority in the country where the Data Subject resides.

Article 12. Security measures

12.1. In order to prevent unauthorized access to Personal Data, loss, theft and unlawful use of Personal Data, Propsvastgoed has taken various security measures, including measures against unauthorized access, use, modification, unlawful and unintentional destruction and unintentional loss of Personal Data. Propsvastgoed has taken the following security measures, among others:a. Using secure systems with strong passwords to prevent unauthorized access to systems;b. Using secure network connections;c. Using anti-virus software;d. The Website uses an SSL certificate;e. Regularly performing software updates.12.2. Persons hired by Propsvastgoed or employed by Propsvastgoed who become aware of Personal Data in the context of their duties are obliged to maintain confidentiality by Propsvastgoed, for example in a contract of assignment, employment contract or confidentiality statement.12.3. Only employees of Propsvastgoed for whom it is necessary to have access to Personal Data in the context of their position/activities will be granted access to the Personal Data by Propsvastgoed.

Article 13. Amendments

13.1. Propsvastgoed reserves the right to unilaterally amend this privacy statement, for example due to a change in the law. The latest version of the Propsvastgoed privacy statement can be found on the Website.

Article 14. Security Incident

14.1. If a security incident has occurred at Propsvastgoed in which Personal Data of a sensitive nature has been leaked or which for some other reason has a serious adverse effect on the protection of the processed Personal Data, Propsvastgoed will, if possible, report this to the Dutch Data Protection Authority within 72 hours of discovering the security incident and act in accordance with the Dutch Data Protection Authority's data breach reporting policy rules. 14.2. If a security incident has occurred at Propsvastgoed that has adverse effects on the personal privacy of the Data Subject, Propsvastgoed will inform the Data Subject thereof without delay.

Article 15. Third party privacy statement

15.1. This privacy statement does not apply to third party websites, such as social media websites, that are connected to the Website by means of links. Propsvastgoed accepts no responsibility or liability with regard to the manner in which these websites handle Personal Data. For more information about the manner in which these third parties handle Personal Data, etc., the privacy statement of the relevant website should be consulted.

Article 16. Cookies

16.1. The Website uses functional and analytical cookies.16.2. A cookie is a small text file that is stored in the browser of the device of the website visitor during the first visit to the Website.16.3. The website visitor can opt out of cookies by setting his internet browser in such a way that it no longer stores cookies. In addition, the website visitor can also delete all information that was previously stored via the settings of his browser. More information about enabling and disabling and deleting cookies can be found by the website visitor in the instructions and/or by using the Help function of his browser.16.4. Propsvastgoed uses functional cookies to ensure that the Website functions optimally.16.5. With the help of analytical cookies, Propsvastgoed can collect and analyze information that is linked to the way in which the Website is used. By using analytical cookies, Propsvastgoed processes data about the use of the Website, such as the amount of time spent on certain pages, country location, the type of device used to consult the Website, performance statistics and similar data. Analytical cookies are placed by a third party, Google, on behalf of Propsvastgoed.16.6. The Website only uses cookies that have no or very limited consequences for the privacy of the website visitor and for which no permission is required.16.7. No Personal Data within the meaning of the GDPR is processed by means of cookies.16.8. On this page you can read more about how Google handles personal data when a person agrees to the cookies on the Propsvastgoed website.