This Privacy notice is provided by Digs Swansea Lettings LLP for prospective tenants and applicants, tenants and guarantors to tell you what information we hold about you, why we collect it, what we do with it and who it may be shared with. We collect and handle personal information to fulfil our role to provide rental accommodation. This includes letting and setting up tenancies, property management including repair work, arranging payment of utility supplies, rent collection, possible reference and immigration checks, maintaining our records and dealing with the deposit and termination of the tenancy.
This will be referred to as “data” and “your information”
Any reference to guarantors, tenants or applicants can also include any former guarantors, tenants or applicants. Not all of this policy may seem relevant and therefore please disregard any information that is not relevant. References to a tenant can also include a guarantor, as a guarantor underwrites a tenant’s obligations and therefore references to the tenancy include the guarantee.
Please read through this to be informed of how we use your information and inform us if any of the information supplied by you changes.
Data Controller:
Digs Swansea Lettings LLP
Heritage House, 10A Park Place, Clifton, Bristol, BS8 1JW
lettings@digsswansea.biz
01792 514 516
ICO registration number: ZA558764
Why are we giving you this notice?
We are giving you this notice as we are required by data protection law to inform you why information is collected about you and then what is done with it. We must act fairly in relation to this information. You have various legal rights relating to this information which are spelt out in more detail in this notice.
For us to collect or use your information there must be a legal basis or gateway for doing so. This notice identifies the relevant gateways for the various types of information we collect and hold.
Under the data protection legislation, we can only process your data as necessary and to the extent that it is needed. However, in certain instances, as required, we can share your data, such as with utility suppliers, our own professional advisers, police/law enforcement agencies or regulatory authorities.
What type of data do we collect and hold about you?
We collect your information in different ways, including the information you supply to us during the application process. If you fail to provide the required information, we may not be able to proceed with the tenancy. The personal data we may process consists of:
• Identity and contact details including name, date of birth, student number, and where necessary car registration
• Personal/background information including occupation/status
• Bank details
• Verification and credit status
• Deposit (if any) including the amount, who it is paid by and bank details for return on tenancy termination
• Tenancy details including renewals, joint tenants, other residents and guarantors
• Immigration/right to rent checks
• Rent and other payments
• Recovery of arrears, claims or possession proceedings
• Repairs/health and safety/housing conditions
• Breach of tenancy terms/nuisance/anti social behaviour
• Council Tax liability
• Water charges payable
• Utilities and services provided
• Welfare Benefits
• Termination of tenancy
• Audio and CCTV recordings (if any)
• Complaints
• Insurance
• Health or disability
• Emails texts and other communications and via our website where we operate one.
• Website and online portal information.
We also generate and use data internally, e.g. our rent records.
Your data may also be collected and received third parties. This may be information from other tenants or neighbours and can include information from your guarantor or a guarantor of a joint tenant. Public bodies such as local authorities or the police, or other law enforcement agencies may give us information about you. This can include the Department for Work and Pensions or the local authority where you are receiving Universal Credit or housing benefit. Information may be given to us relevant to Council Tax by the local authority. Utility companies or service providers may also give us personal information about you. We obtain information about you when we carry out credit checks or take up references. We may also receive information from you via websites or from online rental portals such as StuRents, Gumtree, Zoopla, Rightmove or through our website. Any information which we receive in this way is set out in the Table to this privacy notice which gives you more details about information which we can receive from third parties.
Why do we use the information about you?
The various purposes for which it may be necessary for us to process different categories of your information include: –
• In our legitimate interests for ensuring you are allowed to rent out the property
• In our legitimate interests for deciding on the suitability of a proposed tenant/resident
• In our legitimate interests for verifying the credit worthiness/suitability of tenants/residents
• Our legal obligation to check immigration status/right to rent. This is also to verify identities.
• To perform our tenancy contract to deal with joint tenants and residents who are linked to the tenancy
• To perform our contract to complete the tenancy agreement
• In our legitimate interests to secure rental payments/performance of tenant obligations, e.g. deposits and guarantors
• For contractual performance for rent collection and collection of other payments including banking details
• For contractual performance for managing the tenancy and the property
• For contractual performance and/or in our legitimate interests for record keeping
• For contractual performance for arranging repairs and maintaining the condition of the property and keeping it in a safe condition.
• For contractual performance for monitoring and enforcement of tenant responsibilities
• For contractual performance or in our legitimate interests for recovering debts and other payments due, including any possession proceedings
• In our legitimate interests for administering liability for Council Tax
• In our legitimate interests and those of the provider relating to arranging and paying for utilities and services
• In our legitimate interests for dealing with welfare benefits (including Universal Credit and housing benefit) where payable in respect of the rent
• In our legitimate interests in relation to tenancy termination including the return of any deposit and for dealing with any deposit disputes.
• In our legitimate interests for processing complaints
• For contractual performance or in our legitimate interests for dealing with health and disability issues relating to tenants/residents
• In our legitimate interests for obtaining and holding audio and cctv recordings
• To perform our legal obligations to provide information to public or local authorities who are legally entitled to require this information
• In your vital interests for contacting next of kin etc., in an emergency
• In our legitimate interests for the storage of emails, records of calls and other communications
• In accordance with our legal obligations if you exercise your rights under data protection law
• To perform our legal obligations for compliance with legal and regulatory requirements
• In our legitimate interests for the establishment and defence of legal rights
• In our legitimate interests for prevention, detection and investigation of crime and anti social behaviour and the security of any website or other means of electronic communication
We may change the purposes where this is compatible for the purpose for which we obtained the data originally. If we need to use your data for a non-compatible purpose we will notify you and explain the legal gateway that allows us to do so. We may process your information without your knowledge where this is required or permitted by law.
Do we share your data?
Where it is necessary, we will share data that we hold with others. We must comply with data protection legislation when doing this. Information can be shared with contractors and suppliers; utilities and service providers; trades people; financial organisations including banks and insurance companies; debt collection and tracing agents; public and government bodies (including those who administer benefits); courts; police and law enforcement agencies; taxation authorities; local authorities in relation to Council Tax and regulatory functions; any future owner of the property if we are selling and other landlords including where you apply to another landlord for a tenancy. We may need to share information with your next of kin etc., e.g. in an emergency. We also may share information with professional advisers such as lawyers and accountants or an advice agency which involves sharing information about you with them. If you live in a flat we may give information to the freeholder. We also send notifications to and have correspondence with any tenancy deposit scheme protecting any tenancy deposit which has been paid and may be required to share information with them at the end of the tenancy if a deposit dispute should occur. Where you are in a joint tenancy or there are guarantors for your tenancy, as necessary, we will share information either with joint tenants or guarantors or both. This may relate to your performance of your responsibilities under the tenancy agreement including rent arrears or other breaches of the tenancy terms. In some cases, we may be under a legal obligation to provide information either because of the law or because of a contractual obligating binding on us. What we share will depend on what is necessary in the circumstances and more details are given in the Table in respect of different kinds of information which we hold about you.
Immigration/right to rent checks
By law, we are required to check your immigration status before we rent a property to you. This means that you are legally obliged to produce certain documentation (e.g. a passport or driving licence) to us. This applies whether or not you are a UK or EU citizen. We are required to see original documentation and also to take and keep copies of it. We check this documentation as part of our process to verify your identity at the outset of the tenancy. Prospective tenants and all adult residents who will live at the property must be checked.
Search engines and websites
As necessary, we obtain information about you which is publically available via search engines such as Google or Facebook and websites. This will include information about you which you yourself made public. Further details are set out in the Table. However, when doing so we make sure that we comply with applicable guidelines under data protection legislation.
Special categories of data/sensitive personal data
In limited situations we will process information about your health or any disability. This data is given special protection under data protection law. Normally we would expect to ask you for your explicit consent before we collect or use this kind of data.
Obligation to process data
Property Letting is highly regulated so we are under various legal obligations. These include an obligation to carry out gas safety checks under gas safety legislation. We may need to handle data for this purpose such as to give the contracted gas safety engineer access to the property. We are also legally obligated to pass over details of your occupancy of the property to Welsh Water to enable them to collect water charges.
Legally we must also hold and process information relating to any tenancy deposit which you pay to us including sharing your information with a deposit scheme by which any deposit is protected.
Under any statutory licensing schemes applicable to the property we may be required to give information to the local housing authority relating to your occupation of the property. Similarly, there are various regulatory requirements which may mean that we need to give information about you to public or local authorities or other regulatory authorities.
Utilities
In line with advice from the Information Commissioner we consider that it is in the legitimate interests of utility companies to receive information about occupants of the property to enable them to bill you for utilities (unless these are included within your rent or are paid by us and then invoiced to you).
Council Tax
We notify the council of your occupancy relevant to the collection of Council Tax, including sharing your student status to ensure relevant exemptions are applied.
In any event they are entitled to serve notice upon us requiring this information if they choose to do so.
Retaining Communications
We monitor, record and retain your calls, emails, text messages, social media messages and any other communications. This is in our legitimate interests to maintain an accurate record which is necessary ot manage your tenancy and the property as well as to deal with tenancy applications and prospective tenants and guarantors. We need these records for our ongoing dealings with you, including our data protection obligations.
Telephone calls
To protect our legitimate interests telephone conversations may be recorded electronically for monitoring and to ensure that we have a record of what is said. You or others may leave messages when calling.
CCTV
When CCTV is installed, this is for security purposes in cases where we consider that it is in our legitimate interests to carry out such monitoring which must be done in accordance with legal requirements. We may also use CCTV to detect breaches of the tenancy terms, e.g. in the common parts or outside the building. Recordings will be kept for these purposes.
Length of storage of data
Data can only be stored on a time limited basis and not excessively. We will hold personal data about you for the duration of your tenancy and for seven years after your tenancy has ended. This is the statutory limitation period of six years plus a further year to allow for service of proceedings should proceedings commence later. We are also required to retain information for up to six years for tax purposes. If your tenancy application does not go ahead then we retain data for one year.
Storage and security of data
We have put in place appropriate measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. All our information is stored securely electronically on servers or devices. Certain information is also retained on a secure basis in hard copy format.
Information legally required under your tenancy agreement
Your tenancy agreement provides that in certain situations you must give us information when asked. This is a legal obligation because it is a contractual requirement. You should refer to the relevant clauses in your tenancy agreement which tell you the situations in which such information must be given.
Holding data outside the European Union
Our email account is web based and is provided by Microsoft Exchange. Providers store related data internationally and not necessarily within the European Union. Microsoft meet the adequacy standard required by data protection laws. The recipient of this data is the provider concerned. Data is also held in Arthur Property Management Software. For further information on this you can view their own data protection policy here: https://www.arthuronline.co.uk/gdpr/.
Your rights
As the data subject, due to us holding personal data about you, you have a number of rights under data protection legislation. To exercise any of these rights you should contact us. You can do so by using the contact details provided above.
In particular you have a right to object to the processing of your information where we are processing this in our own legitimate interests or those of a third party. This applies if you feel that this impacts on your own interests or your fundamental rights or freedoms.
These rights are as follows –
• Access – you have the right to make a request to be told what personal data we hold about you including what data has been processed and to have access to your personal data.
• Correction/Rectification – if you consider any data we hold about you is inaccurate you can tell us so that where appropriate this can be corrected. Where a mistake is made in data processing then you can ask to have it rectified. Any third parties who have received the data from us should then be told of the rectification and you should be informed by us of any such third parties.
• Erasure – you have a right to ask us in certain circumstances to erase any data we hold about you (the so called right to be forgotten). Individuals can request the right to have personal data erased to prevent processing in specific circumstances, i.e. it is no longer necessary, consent has been withdrawn, there is an objection and where applicable your rights etc., override the legitimate interests to continue our processing, or data has been unlawfully processed.
• You can object to our processing of data – this allows you to object to our processing of data about you. We must then stop processing data unless we can establish legitimate reason for continuing. In particular this applies where we are relying on our own legitimate interests or those of a third party to process data but it can also apply in other situations.
• Restricting processing – you can ask us to suspend processing of your personal data and we must then restrict processing of data. This includes where you are contesting the accuracy of a statement or the lawfulness of the processing.
• Data portability – this allows individuals to reuse their personal data for their own purposes across different services allowing them to move, copy or transfer personal data more easily.
Withdrawal of consent
Where your consent provides us with the legal gateway to process data about you you can withdraw this at any time by telling us by email or post using the details above.
We take great care in implementing and maintaining the security of the Site and your information. We employ industry standard procedures and policies to ensure the safety of the information we collect and retain, and prevent unauthorised use of any such information, and we require any third party to comply with similar security requirements, in accordance with this Privacy Policy. Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorised access or abuse our Site, and we make no warranty, express, implied or otherwise, that we will prevent such access.