Privacy Policy

Last updated: 22 October 2026

Amsterooms respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, contact us or use our room-search and rental-related services in the Netherlands.

This Privacy Policy is intended to comply with the General Data Protection Regulation (GDPR) and applicable Dutch data-protection legislation.

1. Who is responsible for your personal data?

The data controller responsible for processing your personal data is:

Amsterooms
Owner: Alejandro Gonzalez
Business registration number (KvK): 93619685
Address: Baden Powellweg 161, 1069 LE Amsterdam, The Netherlands
Website: https://www.amsterooms.nl

For questions about this Privacy Policy or to exercise your privacy rights, please contact us through our website or the contact details published there.

2. What personal data do we collect?

We collect personal data that you voluntarily provide to us, information necessary to provide our services, and limited technical information generated when you visit our website.

Depending on your interaction with Amsterooms, we may process the following categories of personal data.

2.1. Identification and contact information

  • First and last name;

  • Email address;

  • Telephone number;

  • Address and country of residence;

  • Date of birth or other identity-verification details, where necessary.

2.2. Accommodation requirements

  • Preferred location and type of accommodation;

  • Maximum rental budget;

  • Intended move-in date and preferred rental duration;

  • Household composition and number of intended occupants;

  • Relevant preferences or requirements concerning the accommodation;

  • Communications and correspondence concerning your search.

2.3. Rental application and financial information

Where necessary to assess a rental application or assist with a potential tenancy, we may process:

  • Employment status and type of employment contract;

  • Employer details and proof of employment;

  • Income information and supporting financial documents;

  • Information about a guarantor, where applicable and necessary;

  • Documents or information requested by a landlord for a rental application.

We aim to collect only the information reasonably necessary for the relevant purpose. Please do not send us sensitive personal data or complete identity-document copies unless they are genuinely necessary and we have explained why they are required.

2.4. Identity documents

Where reasonably necessary for identity verification or a rental application, we may request limited identity information or an identity document.

We do not routinely require or retain a complete copy of your passport or identity card where a less intrusive verification method is sufficient. If a copy is necessary, we will seek to minimise the information collected and retained, including by avoiding unnecessary retention of your photograph, machine-readable zone or national identification number.

2.5. Communications and contractual information

We may retain information contained in emails, WhatsApp messages, telephone notes, enquiries, service agreements, invoices, payment records and complaints insofar as necessary for our services, administration, legal obligations or the establishment and defence of legal claims.

2.6. Website and technical information

When you visit our website, certain technical information may be processed, depending on the website configuration and your cookie preferences. This may include:

  • IP address;

  • Browser and device information;

  • Pages visited and approximate visit duration;

  • Website interaction and diagnostic information;

  • Cookie or similar technology identifiers, where applicable.

The information collected depends on the technical services and analytics tools actually used on our website.

3. Why do we use your personal data?

We process personal data only for specified purposes and where a lawful basis under the GDPR applies.

Where processing is based on legitimate interests, we will consider whether those interests are overridden by your rights and freedoms.

We will not use your personal data for a new, unrelated purpose without providing any additional information required by law and obtaining consent where consent is necessary.

4. Sharing personal data with third parties

We do not sell your personal data.

However, sharing certain information may be necessary to provide our services.

4.1. Landlords and authorised representatives

Where you ask us to assist with a specific room or rental application, we may share relevant information with the relevant landlord, property manager or authorised rental representative.

This may include your name, contact details, household composition, employment or income information and supporting documents, where relevant to the application.

We aim to share only information necessary for the particular application. We will not assume that signing a general agreement gives us unrestricted permission to distribute your personal data to unrelated third parties.

4.2. Service providers

We may use service providers for business administration and the operation of our services, such as email, website hosting, cloud storage, accounting, communication and payment services.

These providers may process personal data on our behalf where necessary and subject to applicable data-protection requirements.

4.3. Legal and regulatory disclosures

We may disclose personal data where necessary to comply with a legal obligation, respond to a lawful request from a competent authority, or establish, exercise or defend legal claims.

4.4. Business transfers

If Amsterooms undergoes a business transfer, merger or restructuring, personal data may be transferred where necessary and lawful. Any transfer will remain subject to applicable data-protection requirements.

5. International transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable GDPR requirements, for example through an applicable adequacy decision or appropriate safeguards.

You may contact us to request further information about relevant international transfers and the safeguards used, where applicable.

6. How long do we retain personal data?

We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of applicable legal obligations and the need to establish or defend legal claims.

Our intended retention approach is as follows:

  • Enquiries that do not result in a client relationship: retained only as long as reasonably necessary to respond and manage the enquiry, normally no longer than six months unless a longer period is justified.

  • Room-search and rental application information: retained during the Assignment and, where necessary, for a limited period afterwards to handle follow-up matters, complaints or potential legal claims.

  • Identity documents and supporting financial documents: retained only for as long as genuinely necessary for the relevant verification or application, unless continued retention is legally justified.

  • Contracts, invoices and accounting records: retained for the applicable statutory period. Dutch tax rules generally require relevant business administration records to be kept for seven years.

  • Website technical and cookie data: retained according to the applicable technical purpose, cookie configuration and consent preferences.

These are retention guidelines, not a promise that every category will always be deleted on the same date. We may retain specific information longer where a legal obligation or an actual dispute requires it. We will delete or anonymise information when it is no longer necessary.

7. How do we protect your personal data?

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.

Depending on the information and the circumstances, these measures may include access restrictions, secure accounts, appropriate storage practices and limiting access to people who need the information for the relevant purpose.

No method of electronic transmission or storage can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and take the steps required by applicable law, including notifying the competent supervisory authority or affected individuals where required.

8. Cookies and website analytics

Our website may use cookies or similar technologies.

Strictly necessary cookies may be used where required for the website to function. Non-essential analytics, advertising or tracking technologies will be used only in accordance with applicable consent requirements.

The specific cookies, their providers, purposes and retention periods depend on the tools actually installed on the website. Further details should be provided in a separate Cookie Policy or cookie-preference interface, where applicable.

You may manage cookies through the available website controls and your browser settings. Blocking certain cookies may affect website functionality.

9. Your privacy rights

Under the GDPR, you may have the following rights, subject to applicable legal conditions:

  • Right of access: request confirmation of whether we process your personal data and obtain a copy.

  • Right to rectification: request correction of inaccurate or incomplete information.

  • Right to erasure: request deletion of your personal data where the legal conditions are met.

  • Right to restriction: request that we restrict certain processing.

  • Right to data portability: receive certain data you have provided in a structured, commonly used and machine-readable format, where applicable.

  • Right to object: object to processing based on legitimate interests, on grounds relating to your particular situation.

  • Right to withdraw consent: where processing is based on consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

  • Rights concerning automated decisions: where applicable, exercise rights relating to decisions based solely on automated processing that have legal or similarly significant effects.

To exercise your rights, contact us through the contact details published on our website and describe your request.

We may need to verify your identity before responding. We will not routinely require a full copy of your passport for this purpose. If additional verification is genuinely necessary, we will explain what is required and encourage you to conceal unnecessary information.

We will respond within the period required by the GDPR, normally within one month of receiving your request. Where legally permitted, this period may be extended for complex or numerous requests, and we will inform you if an extension is necessary.

Some requests may be refused or limited where a legal exception applies, for example where information must be retained to comply with a statutory obligation or to establish or defend legal claims.

10. Complaints

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve the issue.

11. Children’s personal data

Our room-search services are intended for individuals seeking accommodation and are not specifically directed at children.

We do not knowingly collect personal data directly from children unless there is a lawful and necessary reason to do so. Where information about other household members or intended occupants is required for a rental application, the person providing that information should ensure that they are entitled to do so.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, data-processing practices or applicable law.

The updated version will be published on our website with a revised “Last updated” date. Where required by law, we will provide additional notice of significant changes.

13. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:

Amsterooms
Alejandro Gonzalez
Baden Powellweg 161
1069 LE Amsterdam
The Netherlands

Website: https://www.amsterooms.nl

Please use the contact details published on our website to submit privacy-related requests.