RENTTEN

Privacy Policy

Version: 2026-02 | Effective date: 28 May 2026

Data Controller: Reiz Tech, UAB | info@rentten.com | rentten.lt

RENTTEN is not a credit institution, credit bureau, or financial institution. The Trust Analysis is an informational tool to assist landlords in making decisions.

1. Data Controller and Contact Details

Name	Reiz Tech, UAB
Address	Lvivo g. 105A, Vilnius, Lithuania
Company code	305572057
Email	info@rentten.com
Website	https://www.rentten.lt

2. What Data We Collect

2.1. Landlord data

Full name.
Email address.

2.2. Tenant data

The verification link is sent by the landlord or broker. The tenant provides:

Full name.
Email address.
Where applicable — electronic identity verification data (Smart-ID, Mobile-ID, or another eID method).

National identification code is NEVER collected or stored.

With active consent, the system receives data from lawfully accessible third-party sources, registries, or service providers where there is a legal basis, user consent, and technical integration:

Source	Data received	Use
State Social Insurance Fund Board (Sodra) and equivalent registries	Income, employment history, nature of employment, income consistency	Category A — financial stability
Centre of Registers and equivalent registries	Declared address, place of residence, date of birth, identity cross-check	Category C — profile; D — identity
Bailiff Information System and equivalent registries	Active proceedings, case history, case reason	Category B — legal history
RENTTEN platform	Previous landlord review	C3 indicator

2.3. Automatically collected data

Technical data: IP address, browser, operating system.
Usage data: pages visited, session duration.
Cookie data — described in detail in the Cookie Policy.

3. Purposes, Legal Bases, and Retention Periods

Purpose	Data	Legal basis	Retention period
Landlord account management	Email, name	Art. 6(1)(b) GDPR — performance of a contract	Account lifetime + 2 years
Transactional notification to landlord	Email	Art. 6(1)(b) GDPR — performance of a contract	90 days
Tenant Trust Analysis	Name, surname, email, identity and registry data	Art. 6(1)(a) GDPR — active consent	30 days from analysis; see Section 4
Landlord review aggregation	Review linked to profile	Art. 6(1)(f) GDPR — legitimate interests	5 years after account deletion
Post-deletion retention	Name, surname, year of birth, risk indicators	Art. 6(1)(f) GDPR — legitimate interests; see Section 4	5 years, then anonymisation
Marketing communications on behalf of RENTTEN	Email, name	Art. 6(1)(a) GDPR — separate voluntary consent	Until withdrawn or 3 years
Data transfer to partners	Email, name, surname	Art. 6(1)(a) GDPR — separate explicit consent	Per partner policies
Website security	IP address, technical data	Art. 6(1)(f) GDPR — legitimate interests	90 days
Payment processing	Billing data	Art. 6(1)(b) GDPR — performance of a contract	7 years
Legal obligations	Contract and accounting data	Art. 6(1)(c) GDPR — legal obligation	10 years

4. Post-Account-Deletion Retention

Primary purpose — fraud and abuse prevention. Secondary purpose — improving platform security and quality. Only pseudonymised data is used. National identification code is never retained.

Data	Retained?	Period	Form
Full name	Yes	5 years	Pseudonymised
Year of birth	Yes	5 years	Pseudonymised
National identification code	NO	Deleted immediately	Not retained
Email address	NO	Deleted immediately	Not retained
Risk indicators (category level)	Yes	5 years, then anonymisation	Without raw registry data
Raw registry responses	NO	Deleted within 30 days	Not retained
Anonymised aggregate data	Yes	Indefinitely	No longer personal data

In plain terms: upon account deletion, we retain your name, surname, and year of birth for 5 years. We do not retain national identification codes, email addresses, or raw registry data. After 5 years — full anonymisation.

5. Trust Analysis and Automated Decisions

The Trust Analysis is an informational tool. It is not a creditworthiness assessment, financial recommendation, or automated decision regarding tenancy.
Analysis results are presented as risk indicators based on data from lawfully accessible sources.
The final tenancy decision must always be made by a person, taking individual circumstances into account, and not solely on the basis of automated analysis.
Tenants may write to info@rentten.com to request a review of their analysis result. We respond within 30 days.
Analysis results are by default visible only to the landlord or broker.

6. Data Recipients

6.1. Data processors (service providers)

Lawfully accessible government registries and their service providers — data is processed where there is a legal basis, user consent, and technical integration.
Microsoft Azure (North Europe, EU) — data hosting. Data processing agreement in place.
Payment processing service provider — PCI-DSS compliant. Data processing agreement in place.
Email delivery service provider — transactional communications. Data processing agreement in place.

6.2. Partners (with separate consent only)

RENTTEN may, with separate user consent, transfer limited contact data (name, surname, email) to partners for the purpose of presenting offers. A list of partners is available upon request at info@rentten.com.

6.3. Transfers to third countries

All primary data is stored in the Azure North Europe region (EU territory). Where a service provider is located outside the EU/EEA, we apply Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

7. Your Rights

All requests to be submitted to info@rentten.com. We respond within 30 calendar days.

Right	Description	Notes
Right of access (Art. 15 GDPR)	Receive a copy of your data	Includes data retained post-deletion
Right to rectification (Art. 16 GDPR)	Correct inaccurate data	—
Right to erasure (Art. 17 GDPR)	Request deletion of your data	Limited due to exceptions in Section 4
Right to restriction (Art. 18 GDPR)	Restrict processing	—
Right to data portability (Art. 20 GDPR)	Receive data in CSV / JSON format	—
Right to object (Art. 21 GDPR)	Object to processing based on legitimate interests	Assessed individually
Right to withdraw consent (Art. 7 GDPR)	Withdraw consent at any time	Does not affect lawfulness of prior processing
Rights regarding automated decisions (Art. 22 GDPR)	Request human review	info@rentten.com
Right to lodge a complaint (Art. 77 GDPR)	Lodge a complaint with the supervisory authority: ada@ada.lt, vdai.lrv.lt	+370 5 279 1445

8. Types of Consent

RENTTEN operates four separate, voluntary, and independent consents:

Consent type	Purpose	How given	Mandatory?
Verification consent	Permits data to be obtained from registries	Active consent in the verification form	Yes (no analysis without it)
Cookie consent	Analytical and marketing cookies in the browser	Cookie banner	No (necessary cookies — yes)
Marketing consent	Emails with RENTTEN offers	Separate checkbox at registration	No
Partner consent	Transfer of contact details to partners	Separate checkbox at registration	No

9. Cookies

RENTTEN uses necessary, analytical, and marketing cookies. Full information is provided in the Cookie Policy (rentten.lt).
Necessary cookies — no consent required. For platform operation.
Analytical cookies (Google Analytics) — only with your consent via the cookie banner.
Marketing cookies (Meta Pixel) — only with your consent via the cookie banner.
Cookie banner consent is entirely separate from consent to marketing emails or data transfer to partners.

10. Contact and Policy Changes

All enquiries: info@rentten.com
State Data Protection Inspectorate: ada@ada.lt | vdai.lrv.lt | +370 5 279 1445
We will notify you of material changes by email at least 14 days in advance.