Skip to content
The Quarters

Legal

Data processing agreement

Required by Article 28 GDPR, and part of your contract with us the moment you open an account. You do not have to ask for it or sign anything separate.

Draft. Not yet in force

This agreement is a working draft, written to be reviewed rather than relied on. It has not been checked by a lawyer and does not bind anyone. It must not go live before legal review.

1. Roles

You are the controller of the personal data you put into The Quarters, principally the personal data of your tenants and prospective tenants. The Quarters B.V. is the processor. This agreement governs that processing and forms part of the terms of service.

2. Subject matter and duration

We process personal data for as long as you have an account, plus the 90-day export window afterwards, for the sole purpose of providing the service described in the terms.

3. What is processed

  • Categories of data subject: your tenants and prospective tenants, the people who enquire through your website, and your own staff.
  • Categories of personal data: names, contact details, correspondence, tenancy details and dates, payment and deposit amounts, signed agreements and the evidence recorded alongside a signature (timestamp, IP address, user agent).
  • Special categories: none are required by the service. Do not put them in free-text fields.

4. Our obligations

  • We process personal data only on your documented instructions.
  • We do not sell it, use it for our own purposes, or use it to train machine-learning models.
  • Everyone with access is under a duty of confidentiality.
  • We keep appropriate technical and organisational security measures. See the security page for what they currently are, stated honestly including what we do not yet have.
  • We help you respond to data-subject requests, and tell you without undue delay if we become aware of a personal data breach.
  • On termination we delete or return the data at your choice, after the export window.

5. Sub-processors

You give general authorisation for us to engage the sub-processors listed on the sub-processors page. We will add a new one to that page before it begins processing, and give you at least 30 days to object. If you object on reasonable data-protection grounds and we cannot offer an alternative, you may terminate and receive a refund of the unused term.

6. International transfers

Data is processed within the European Union except where a named sub-processor is established elsewhere. Those transfers rely on the European Commission’s Standard Contractual Clauses together with any supplementary measures required.

7. Audit

We will give you the information you reasonably need to demonstrate compliance with Article 28, and will co-operate with an audit on reasonable notice, not more than once a year unless a regulator requires otherwise.

8. Contact

Anything under this agreement goes to privacy@thequarter.ai.