Privacy policy

Last updated: February 2026

Data controller

Pinacasa, located in Tilburg, Netherlands, is the data controller for personal data collected through this platform.

Data we collect

We collect the following types of personal data:

Data provided by the user

  • Name or pseudonym when publishing reviews
  • Email address for verification
  • Content of published reviews
  • Information about reviewed properties

Data collected automatically and anonymously

Purpose of processing

We use your personal data to:

  • Enable the publication and management of reviews
  • Verify the authenticity of reviews
  • Send service-related communications
  • Improve the platform and user experience
  • Comply with legal obligations
  • Generate aggregated and anonymous statistics about the rental market

Legal basis for processing

  • Consent: For sending commercial communications
  • Contract performance: For providing the review service
  • Legitimate interest: For improving our services and fraud prevention
  • Legal obligation: For compliance with applicable regulations

Data retention

Personal data will be retained as long as:

  • Reviews remain published
  • Necessary to comply with legal obligations
  • Deletion is not requested

User rights

In accordance with GDPR, you have the right to:

  • Access: Know what personal data we process about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Restrict processing in certain circumstances
  • Portability: Receive your data in a structured format
  • Objection: Object to the processing of your data

To exercise these rights, contact: [email protected]

Due to the anonymous nature of reviews, we can only process requests to edit or delete reviews if made from the same email used to submit the review, or if no email was provided, the claim code given upon successful submission is required.

Data security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Data encryption in transit (HTTPS)
  • Restricted access to personal data
  • Security monitoring

International transfers

Your data may be processed by service providers located outside the European Economic Area. In such cases, we ensure adequate safeguards exist in accordance with GDPR.

Complaints

If you believe your data is not being handled properly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

Modifications

We reserve the right to modify this privacy policy. Changes will be published on this page with the update date.