Privacy policy

Version: 2026-10-23

Draft – this text must be reviewed by a data-protection lawyer before public launch. In case of differences, the Slovenian version applies.

Who processes the data

The controller of personal data is RentPass.si. For privacy questions and to exercise your rights, write to zasebnost@rentpass.si.

What data we process

Renters: email address, first and last name, short bio, optionally employment status, pets and smoking; past rentals (city, period, landlord's name and email); references, replies, share links and when they were viewed; consents.

Landlords who give a reference: name and email as entered by the renter, and the answers in the reference form.

We do not collect flat addresses, national ID numbers (EMŠO), identity documents or special categories of personal data (health, religion, ethnicity, etc.).

Purpose and legal basis

We process renters' data based on consent (Art. 6(1)(a) GDPR) and to provide the service you use (Art. 6(1)(b) GDPR).

We process landlords' data based on the legitimate interest of the renter and landlord in exchanging a reference (Art. 6(1)(f) GDPR). Landlords are informed about the processing in the reference form.

We keep proof of consent because of a legal obligation (Art. 7(1) GDPR).

Who sees the data

Your profile, your list of rentals (city and period, without landlord details) and published references are visible only to people you send a share link to, and only while the link is valid. References are hidden by default; you decide which ones are shown.

Profiles cannot be searched by name and are not indexed by search engines. No email address is shown on a shared profile.

Retention

Unanswered reference requests are deleted after 30 days. Expired or revoked share links and view data are deleted after 90 days. References older than 5 years are hidden automatically.

When you delete your account, your data is hidden immediately and permanently deleted after 30 days. Proof of consent is kept for the legally required period.

Processors and location

Data is stored in the EU, on servers of the hosting provider Hetzner Online GmbH (Germany), which also sends our emails.

We only use strictly necessary cookies (sign-in session). Visit statistics use no cookies and no third-party service: we record the page viewed, the website you came from, device type, browser, operating system and language. Your IP address is not stored; visits are counted with a hashed key that changes every day, so you cannot be recognised from one day to the next. The data is kept for 13 months (legitimate interest, Art. 6(1)(f) GDPR).

Finding flats and renters

If you publish a search profile (based on a separate consent), it is visible to signed-in landlords who accepted the rules for landlords. Only the search profile and a summary of your rental history are shown – no name, email or reference content. The profile expires after 60 days.

When you accept a landlord's request, we pass on your name, email and a 7-day link to your RentPass. Requests are kept for 180 days; expired search profiles are deleted 90 days after expiry.

Landlords using the search give us a display name, optionally a phone number, and the content of their requests. Abuse reports are kept for up to one year after they are resolved.

Your rights

In settings you can download all your data at any time (right to data portability) and delete your account (right to erasure). You can correct your profile yourself, and hide or reply to a reference.

A landlord can request deletion of their reference or object to processing at zasebnost@rentpass.si.

You can withdraw consent at any time by deleting your account. You can lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si).