Data Processing Agreement (draft)

Status of this draft

This page is a public draft summary for operators (agencies, funds, multi-listing landlords) whose legal teams ask about GDPR when renter household details — including children — appear in Seuras. It is not a signed contract and not legal advice. Request a countersigned DPA at info@seuras.com before production use.

Roles

Seuras is typically the controller of marketplace accounts, authentication, and platform logs.

When an operator receives a renter profile, household summary, or chat content through Seuras to decide on a viewing or tenancy, the operator usually acts as an independent controller for that tenancy decision. Where Seuras processes personal data solely on the operator’s documented instructions (for example hosting operator-uploaded tenant files), Seuras acts as a processor under GDPR Art. 28.

Categories of data

Account identifiers (name, email, phone), renter profile fields the user chose to share (household type, work, stay length), optional notes about children or pets, listing and viewing metadata, and in-app messages related to the operator’s properties.

Special-category or highly sensitive data should not be collected unless strictly necessary. Full names and dates of birth of children should only appear when needed for a lease document.

Purpose and instructions

Processor activities (if any) are limited to providing the Seuras software: hosting, chat delivery, viewing calendars, and draft lease tools for the operator’s listings.

Operators must not use Seuras profile data for unrelated marketing, sale to third parties, or discrimination prohibited by Polish or EU law.

Security and subprocessors

Seuras applies access controls, transport encryption, and least-privilege practices appropriate to a rental marketplace beta. A current list of infrastructure subprocessors is available on request.

Personal data is hosted in the EEA unless a transfer tool approved under GDPR applies.

Assistance, deletion, and audits

Seuras will reasonably assist operators with data-subject requests that relate to platform processing, breach notifications where legally required, and deletion or return of operator-instructed data after the engagement ends, subject to legal retention duties.

Audit rights and liability caps will be set in the signed DPA. Contact info@seuras.com to start that process.