Privacy notice (Datenschutzerklärung)

What we process

• Account data: name, email address, role, sign-in history.
• Listing data: address, property details, photos, viewing slots.
• Verification data: identity document, ownership or management evidence, rental contract or sublet permission, contact details.
• Activity data: bookings, reports, complaints, payment records for verification fees.

Why we process it

• To operate your account and the accommodation search.
• To verify who is renting a property and whether they are allowed to rent it.
• To prevent fraud and handle reports and complaints.
• To meet legal record-keeping duties.

How verification documents are protected

• Documents are held in private storage with no public links.
• They are encrypted in transit and at rest.
• Only the SafeNest Verification Team and Super Admin can open them, through short-lived links.
• Every access is logged with who looked at what and when.
• Documents are deleted once the verification purpose is met, following our retention policy.

Your rights

You can ask for access, correction, deletion, restriction, portability, and you can object to processing. Write to privacy@safenesthamburg.com. You may also complain to the Hamburg data protection authority.

Processors

SafeNest uses cloud hosting, database, email and payment providers under data processing agreements. Card details are handled entirely by the payment provider and never reach SafeNest.

Processors we use

• Hosting and application runtime: our cloud hosting provider (servers in the EU where technically possible).
• Database, authentication and file storage: our managed database provider, with personal data stored in an EU region where technically possible.
• Transactional email: our email delivery provider, used only for service messages.
• AI services: an AI model provider used to help structure listing text, review contracts and documents you upload, and flag unusual patterns. AI output is always reviewed by a person before any verification decision.
• Payments (only once commercial mode is enabled): Paddle as Merchant of Record. No payments are processed during the pilot.

Verification data

Identity and ownership documents are never shown publicly. We store only the verification result, date, verification type and the internal audit information needed to operate. Copies of identity documents are not kept longer than necessary; each document record carries a retention date and is deleted or anonymised when no longer needed. Nothing is deleted automatically unless a retention rule has been explicitly configured.