Privacy
What RentBack does with your personal data, under the EU General Data Protection Regulation (GDPR; in Dutch, AVG). Last updated: 16 October 2026.
Who is responsible
RentBack is responsible for your personal data (the "controller"). RentBack is a sole proprietorship registered with the Dutch Chamber of Commerce (KvK) under number 42195002.
Address: 1e Lulofsdwarsstraat 34G, 2521 AZ Den Haag, the Netherlands
Email: hello@rentback.nl · WhatsApp: +370 634 18900
We have no data protection officer. Send privacy questions to the email address above.
What we collect, and why
1. The free rent check
| Data | Your address (postcode and house number), rent, contract start date, your answers about the home, first name, phone number, and the link or poster that brought you to the check. |
| Why | To calculate your result and send it to you on WhatsApp. |
| Legal basis | Steps you ask for before a possible agreement (GDPR art. 6(1)(b)). |
| Kept for | 12 months if you don't become a client, then deleted automatically. |
2. Messages and documents
| Data | Our WhatsApp or email conversation and the documents you send, such as your rental contract. |
| Why | To answer your questions and check whether you have a case. |
| Legal basis | Steps you ask for before a possible agreement (GDPR art. 6(1)(b)). |
| Kept for | At most 12 months if you don't become a client. |
3. Your case, if you become a client
| Data | The signed service agreement and authorization form, your rental contract, letters from your landlord and the Huurcommissie, and the details of the case. |
| Why | To run your case and to invoice our fee. |
| Legal basis | Our agreement with you (GDPR art. 6(1)(b)). For invoices and accounting records: our legal duty to keep them (GDPR art. 6(1)(c)). |
| Kept for | Until 12 months after the agreement ends, then deleted automatically. Only the records Dutch tax law requires (invoices and payments) are kept for 7 years. |
4. Counting visits
| Data | Numbers only: how many visitors open the check, reach each step, and which poster or link they came from. Not who they are. |
| Why | To see which posters and pages work. |
| Legal basis | Our legitimate interest in improving our service (GDPR art. 6(1)(f)). |
You don't have to give us your data, but without your address, rent and phone number we can't do the check or send you the result.
Who receives your data
- Hetzner Online (Germany) hosts our server and database.
- Telegram: when you finish the check, we get a short notification with your result, so we can reply fast. It doesn't contain your name, address or phone number: those stay on our server in the EU.
- WhatsApp (WhatsApp Ireland, part of Meta): if we chat with you. Messages are end-to-end encrypted. Meta can transfer data to the United States under the EU-US Data Privacy Framework.
- Public Dutch registers (Kadaster and PDOK for the building register and WOZ value, RVO's EP-Online for the energy label): we look up your home there. Only the address is sent.
- The Huurcommissie: if you are a client, what your case needs.
- Your landlord: if you are a client, only what your case needs, and only after your approval.
We never sell your data and never use it for advertising.
How long we keep it
The periods per purpose are listed above. A check that doesn't become a case is deleted automatically after 12 months. Deleted data disappears from our backups within 7 days.
Your rights
You can ask us to show you the data we have about you, to correct or delete it, to limit how we use it, or to give it to you in a format you can take elsewhere. You can also object to our use of it based on legitimate interest.
Send your request by email or WhatsApp. It's free, and we reply within one month. We may ask you to confirm who you are first.
If you're not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Cookies and tracking
We use no cookies, no ads and no third-party analytics. Our fonts are on our own server, so visiting the site sends nothing to Google or others, and our server keeps no log of visitors' IP addresses.
During your visit, the check page keeps two small settings in your browser (sessionStorage), for example so the intro animation only shows once. They are deleted when you close the tab.
Automated results
The check calculates an estimate automatically. It doesn't make decisions about you: a person reviews every case before anything is filed.
Security
We protect your data with encrypted connections (HTTPS), a server in the EU, and access limited to us. If something goes wrong, we follow the GDPR rules for data breaches.
Changes
We may update this policy. The date at the top shows the latest version.