Landlord Privacy Notice
The Agent s committed to protecting and processing your personal data in accordance with the General Data Protection Regulations and the Data Protection Act 2018 (the legislation). For the purpose of the legislation and your personal data, MM Lettings Limited, is the Data Controller, Davinder Gharial is the person responsible for data protection and can be contacted at 51 Fretherne Rd, Welwyn Garden City, Hertfordshire, AL8 6NS.
The General Data Protection Regulations are to safeguard your personally identifiable information or personal data. This privacy notice will be regularly reviewed and updated.
The personal data we process may include the information in column A of the attached appendix and may also include other sensitive data concerning health, if relevant to your application. Where the provision of data is a statutory, a contractual requirement or a requirement necessary to enter into a contract, a refusal to provide the data may mean that we are unable to provide you with our service.
To ensure that we provide you with the best service possible we will need to collect and retain certain personal data. The data may be collected and processed by those listed in columns B and F. How we source the data is identified in column C. We may source data from 3rd parties or via third parties e.g. Land Registry or local authority licensing schemes.
Lawful basis of processing
Your personal data will be used for the activities in column D. There are 6 lawful basis of processing your data including consent, a legitimate interest, contract fulfilment, a legal obligation and a vital interest. For each usage of the date the lawful basis of the processing of your data will be identified in column E. A legitimate interest is when we have a business or commercial reason to process your personal data which needs to be balanced with your interests i.e. what is right and best for you.
Where we state that we have a legitimate interest, the fact that we have a legitimate interest and what that legitimate interest is, will be stated in column E, e.g. to keep in touch with you during the tenancy; to contact you when we need your consent.
Online identifiers, IP addresses and cookie identifiers
Where you visit our website we may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns.
We may obtain information by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:
- To estimate our audience size and usage pattern.
- To store information about your preferences, and so allow us to customise our site according to your individual interests.
- To speed up your searches.
- To recognise you when you return to our site.
Recipients of personal data
It will be necessary for us to process or share all or some of your personal data with a range of individuals, businesses and organisations and these may include those listed in column F.
Where is the data stored?
Your personal data is stored in the way described in column G and the data is always stored within the European Union or outside of the European Union but with an organisation operating under the General Data Protection Regulations.
Retention period and criteria used to determine the retention period
We will retain some elements of your personal data for up to the time defined in column H after we cease to be your agent. What information can be anonymized will be when no longer required for either contractual fulfilment or a legitimate interest. If the lawful basis for processing your data was consent then you may withdraw consent at any time.
You have a right of access to check your personal data to verify the lawful basis of processing. We are obliged to respond to an access request within 30 days and may not charge a fee unless the request is unfounded, excessive or repetitive. If a fee is charged it is to be a reasonable fee based upon the administrative cost of providing the information.
You have a right to rectification if the data we hold is either inaccurate or incomplete. If your data has been disclosed to third parties then we must inform them of the rectification, where possible.
You have a right to erasure of your data when consent is our basis of processing (the right to be forgotten). You may request that your personal data be erased, for example, where there is no compelling reason for its continued processing or where you withdraw consent. We will comply with your request unless we have another basis of processing justifying our retaining the data (for example a legal requirement or the defence of a legal claim).
You have some rights to ask us to restrict processing i.e. to block or supress processing where, for example, the data may be incorrect and whilst the accuracy is verified. We are permitted to store the data.
Your right to object
You do have a right to object to further processing of your personal data. We may be required to stop processing unless there is some other legitimate basis of processing such as a legitimate interest or a requirement for the exercise or defence of a legal claim.
Withdrawal of consent
Where the lawful basis for processing is your consent, you may withdraw consent at any time by writing to, Davinder Gharial, MM Lettings Limited at 51 Fretherne Rd, Welwyn Garden City, AL8 6NS, or emailing firstname.lastname@example.org
How to lodge a complaint with the supervisory authority
The supervisory authority responsible for data protection is the Information Commissioners Office (ICO) to whom concerns may be reported by phone on 0303 123 1113 or +44 1625 545 745 if calling from outside the UK, by email using the form on the website ico.org.uk or the livechat function.
Column A- Data collected by the Agent:
- Name, Title, Occupation
- Permanent address
- Business address
- Any other address
- Telephone numbers
- Names and contacts of next of kin or other family members or partners
- Email address (es)
- Bank details- past and present
- Tax status
- Any data relating to the ownership of the property
- Insurance details
Column B- Data collected by:
Column C- How is it collected?
- Online forms
- Landlord Terms of Business or any correspondence with the office
- Face to face meetings
Column D- Why is it collected?
- Enable the Agent to create and execute the tenancy agreement
- Enable to Agent to manage the property effectively
- and comply with the Law
- Consider relevant marketing material for the landlord
Column E- Lawful basis for processing
- Contract fulfilment
- Consent for various marketing material and communication
- Legal obligation
- Legal work
- Legitimate interest
- Vital interest
- Public interest
- (to generally keep in touch with you in the process of managing or creating your tenancy agreement and marketing your property)
Column F- With whom might we share this data?
- Local Authority
- Software providers
- Deposit Scheme
- Referencing company
- Partnered insurance company and mortgage providers
- Home Office
- Cloud provider
Column G- How may it be stored?
- Files – paper
- Premises or archived stores
- Electronic copy on server
- On the servers of software providers
When will it be deleted
- 6 years after tenant leaves
- All debts owed to the Agent have been settled
- Or if consent is withdrawn and the above two are not applicable