#

Trust Center

HousingPass is committed to protecting personal data, maintaining robust security controls, and operating in compliance with applicable privacy regulations. This Trust Center provides an overview of our security, privacy, and compliance practices.

General Data Protection Regulation (GDPR).

Security Measures.

Data Processing Agreements (DPA)

Data Retention Policy & Compliance Documentation

Incident Response

HousingPass maintains procedures for identifying, investigating, and responding to security incidents and personal data breaches.

Procedures for identifying and investigating security incidents.

Structured response protocols for personal data breaches.

Notification of supervisory authorities where required by law.

Timely notifications to affected users within applicable GDPR timeframes.

#

GDPR Compliance

HousingPass processes personal data in accordance with the General Data Protection Regulation (GDPR).

Our Principles

  • Lawful, fair, and transparent processing
  • Purpose limitation and data minimisation
  • Accuracy and data quality management
  • Storage limitation
  • Integrity and confidentiality
  • Accountability and documentation

Legal Basis for Processing

Depending on the processing activity, HousingPass relies on:

  • User consent (Art. 6(1)(a) GDPR)
  • Contractual necessity (Art. 6(1)(b) GDPR)
  • Legitimate interests (Art. 6(1)(f) GDPR)

Data Subject Rights

HousingPass supports all applicable GDPR rights, including:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to data portability
  • Right to object
  • Right to withdraw consent

Privacy by Design

Privacy considerations are integrated into the design and operation of the HousingPass platform through:

  • Data minimisation
  • Role-based access controls
  • Automated deletion workflows
  • Audit logging
  • Controlled data sharing
  • Secure anonymisation procedures

Users can exercise these rights through their account dashboard or by contacting our privacy team.

Security Measures

HousingPass implements technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure.

Encryption

  • AES-256 encryption for stored personal data
  • TLS 1.3 encryption for all data transmissions
  • Secure password hashing using bcrypt
  • Encrypted backup storage

Access Management

  • Role-based access controls (RBAC)
  • Principle of least privilege
  • Multi-factor authentication for administrative access
  • Session management and access monitoring

Infrastructure Security

  • Hosting exclusively within Germany
  • ISO 27001-certified infrastructure providers
  • Web Application Firewall (WAF)
  • DDoS protection
  • Continuous monitoring and threat detection
  • Regular security reviews and audits

Data Security Controls

  • Automated deletion processes
  • Audit trails for critical actions
  • Verification and document handling controls
  • Restricted access to sensitive information
  • Secure backup and recovery procedures

Data Processing Agreements (DPA)

HousingPass works with institutional landlords, property managers, corporate housing providers, and selected service providers. Under EU Consumer Privacy Act and EU data privacy agreements, by accepting the terms of services, users allow HousingPass to handle their information under compliance with trusted third party partners.

Processor Management

All third-party processors that handle personal data on behalf of HousingPass are subject to:

  • GDPR-compliant Data Processing Agreements
  • Confidentiality obligations
  • Security requirements
  • Ongoing vendor assessments

Institutional Clients

For eligible institutional clients, HousingPass can provide a Data Processing Agreement (DPA) covering:

  • Scope of processing
  • Security measures
  • Subprocessor obligations
  • International transfer safeguards
  • Audit and compliance provisions

Request a DPA

To request a Data Processing Agreement or discuss compliance requirements, please contact:

support@housingpass.com

Data Retention Policy

HousingPass retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory, and contractual obligations.

Data Category
Retention Period
Identity Verification Documents
90 days after verification
Credit Assessment Data
90 days after analysis
Credit Scores & Financial Indicators
12 months
Application Documents
24 months from last activity
Previous Landlord References
6 months
Tenant Profile Data
Until account deletion + 30 days
Authorisation Logs
60 months
Technical Audit Logs
60 months
Billing & Payment Records
10 years
Anonymised Statistical Data
Retained for benchmarking, fraud prevention and analytics purposes

Account Deletion

When a tenant deletes their account:

  • Active landlord authorisations are revoked
  • Personal information is removed from operational systems
  • Documents are deleted according to applicable retention schedules
  • Statistical datasets may be retained only in anonymised form

Data Minimisation

HousingPass periodically reviews retained information to ensure that personal data is not kept longer than necessary.

Questions about Security or Compliance?

Need our DPA, security documentation, or have questions about privacy? Contact our compliance team.

Compliance & Security Guidelines

For official regulatory requests, custom contracts, or technical details, you can request support regarding:

HousingPass continuously reviews and enhances its security, privacy, and compliance framework to maintain trust with tenants, landlords, and institutional partners.

Security & Compliance

Customer Care

Imprint

Powered by Housingpass

© 2026 Housingpass. All Rights Reserved

Housingpass - Smart Property & Tenant Management