1. About this notice
This Data Protection Notice explains how Kontorva Oy ('Kontorva', 'we', 'us') processes personal data through the RentPassport platform (rentpassport.eu). RentPassport is a cross-border tenant identity and verification service used by renters and property operators (landlords, letting agents, property management companies).
This notice is provided under Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 ('GDPR'). It applies to all personal data we process in connection with the RentPassport service.
💡 Important: We are committed to transparent processing. If anything in this notice is unclear, contact our Data Protection Officer using the details in Section 14.
2. Who we are
Legal name: Kontorva Oy
Business ID: 3570767-1
Registered address: Sturenkatu 26 lt. 36, 00510 Helsinki, Finland
Contact: support@kontorva.com
Where you use RentPassport to submit your information to a specific property operator, that operator is a separate controller for their use of your data in their tenant selection decision. This notice covers Kontorva's processing only.
3. What personal data we process
Identity data
- Full name, date of birth, nationality
- Government-issued ID documents
- ID images and extracted data
- Biometric data for verification
Contact data
- Email address, telephone number
- Postal addresses (current, prior)
Financial data
- Income information
- Bank account information
- Transaction data for affordability
- Employment status
Rental history data
- Previous and current tenancies
- Landlord references
- Lease event records
Account and usage data
- Account credentials
- Profile preferences
- Device and connection data
- Platform usage logs
Special category data
- Biometric data (Article 9 GDPR)
- Financial data with enhanced safeguards
4. How we use your data
| Purpose | Description | Lawful basis |
|---|---|---|
| Account creation | Creating and maintaining your account | Article 6(1)(b) - Contract |
| Identity verification | Verifying your identity with documents and biometrics | Article 6(1)(b) + Article 9(2)(a) - Consent |
| Building your profile | Aggregating verified data into a portable profile | Article 6(1)(b) - Contract |
| Sharing with operators | Transmitting your profile to selected operators | Article 6(1)(b) - Contract |
| Deposit escrow | Coordinating deposit holding with payment partner | Article 6(1)(b) + Article 6(1)(c) |
| Fraud prevention | Detecting and preventing fraudulent activity | Article 6(1)(f) - Legitimate interest |
5. Automated decision-making
RentPassport's tenant verification is classified as a high-risk AI system under the EU Artificial Intelligence Act.
You have the right to human intervention, to express your point of view, and to contest decisions made solely by automated means under Article 22 GDPR.
6. Who we share your data with
Property Operators
Shared only with operators you explicitly choose. Each operator is a separate controller.
Service Providers (Processors)
- • DigitalOcean, LLC - Hosting (Amsterdam)
- • Zone Media OÜ - Email services (Tallinn)
8. How long we keep your data
9. Your rights under GDPR
14. Contact our Data Protection Officer
For any privacy questions, to exercise your rights, or to make a complaint:
Email: support@kontorva.com
Postal: Data Protection Officer, Kontorva Oy, Sturenkatu 26 lt. 36, 00510 Helsinki, Finland