Legal
Privacy policy
Last updated: draft, not yet in force.
Draft. Not yet in force
This privacy policy is a working draft, written to be reviewed rather than relied on. It has not been checked by a lawyer and does not bind anyone. It must not go live before legal review.
This policy covers two different groups of people, and the difference matters, so it is stated first.
Visitors to this website
If you are reading thequarter.ai, The Quarters B.V. is the controller of any personal data you give us here.
What we collect
- What you type into a form. Your name, email address, company and whatever you write in the message box. We use it to reply to you and for nothing else.
- Server logs. Standard web-server records including IP address, kept for a short period for security and troubleshooting.
- Nothing else. This site sets no advertising cookies, runs no third-party trackers, and loads its fonts from our own servers rather than from a font CDN, so reading this page does not tell anyone else that you did.
Users of the The Quarters application
If you have an account at app.thequarter.ai, we are the controller of your account data (your name, email address, role and sign-in records), which we process to give you the service and to bill you for it.
Your tenants’ data: we are not the controller
The personal data of the people renting your apartments (names, contact details, agreements, correspondence) belongs to you. You are the controller and we are your processor. We handle that data on your instructions, for the purpose of providing the service, and for nothing else. We do not sell it, we do not use it for our own analysis, and we do not use it to train machine-learning models.
The terms of that arrangement are in the data processing agreement, which forms part of your contract with us, and the third parties involved are listed on the sub-processors page.
Legal bases
- Contract. Providing the service to you and taking payment for it.
- Legitimate interests. Answering your enquiries, keeping the service secure, and preventing abuse.
- Legal obligation. Keeping the financial records we are required to keep.
How long we keep things
- Enquiries: two years from your last contact with us, then deleted.
- Account data: for as long as you have an account, then 90 days, during which you can still export.
- Invoices and financial records: seven years, because Dutch law requires it.
- Data you control: for as long as you keep it, and deleted on your instruction.
Where your data is
In the European Union. Two of our sub-processors are established in the United States and those transfers rely on the European Commission’s Standard Contractual Clauses; both are named, with what they touch, on the sub-processors page.
Your rights
You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable format. Write to privacy@thequarter.ai and we will answer within one month.
If you are a tenant and your data is in this system because your landlord put it there, we are the processor and not the controller. Write to your landlord, or to us and we will pass it on.
You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
If we change this policy in a way that matters, we will say so before it takes effect rather than quietly updating a date at the top.