Data Safety

What We Collect

• Account Information: Name, email address, phone number, and profile picture
• Property Information: Listings details, photos, and location data
• Communication Data: Messages between users on our platform
• Usage Data: How you interact with our services
• Device Information: IP address, browser type, and device identifiers

What We Don't Collect

• Financial information (credit card details are processed by secure third-party providers)
• Government identification numbers
• Health or medical information
• Sensitive personal data without explicit consent

Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols
• Secure Storage: Personal data is stored in encrypted databases with restricted access
• Authentication: Multi-factor authentication available for enhanced account security
• Regular Updates: Our systems are regularly updated with the latest security patches
• Firewall Protection: Advanced firewall systems protect against unauthorized access

Operational Safeguards

• Access Control: Strict access controls limit who can view your personal information
• Employee Training: Regular security training for all staff members
• Security Audits: Regular third-party security assessments and penetration testing
• Incident Response: Comprehensive incident response plan for potential security events
• Data Minimization: We only collect data necessary for providing our services

Where We Store Data

Your data is stored on secure servers located within the European Union, ensuring compliance with GDPR requirements. We use reputable cloud service providers that maintain high security standards and certifications.

How Long We Keep Data

• Active Account Data: Retained as long as your account is active
• Inactive Account Data: Deleted after 3 years of inactivity
• Communication Data: Retained for 1 year for safety and dispute resolution
• Transaction Records: Retained for 7 years as required by law
• Marketing Data: Deleted immediately upon unsubscribe request

You Have the Right To:

• Access Your Data: Request a copy of all personal data we hold about you
• Correct Your Data: Update or correct any inaccurate information
• Delete Your Data: Request deletion of your personal information
• Export Your Data: Receive your data in a portable format
• Restrict Processing: Limit how we use your data
• Object to Processing: Opt-out of certain data uses

How to Exercise Your Rights

You can manage most of your data directly through your account settings. For additional requests, contact our Data Protection Officer at dpo@theflatshare.com. We will respond to all legitimate requests within 30 days.

When We Share Data

• With Your Consent: Only when you explicitly agree
• For Service Delivery: With service providers who help us operate our platform
• Legal Requirements: When required by law or court order
• Safety Reasons: To protect users and prevent fraud

We Never:

• Sell your personal data to third parties
• Share your data for advertising without consent
• Transfer data outside the EU without adequate protection
• Use your data for purposes unrelated to our services

Best Practices

• Strong Passwords: Use unique, complex passwords for your account
• Two-Factor Authentication: Enable 2FA for additional security
• Verify Communications: Be cautious of phishing attempts
• Keep Software Updated: Use the latest version of our app and your device software
• Report Suspicious Activity: Contact us immediately if you notice anything unusual
• Log Out: Always log out when using shared or public devices

Red Flags to Watch For

• Requests for passwords or financial information via email
• Suspicious links claiming to be from FlatShare
• Unexpected account activity or login attempts
• Offers that seem too good to be true

We Comply With:

• GDPR: General Data Protection Regulation (EU)
• LGPD: Lei Geral de Proteção de Dados (Brazil)
• Portuguese Data Protection Law: Local privacy regulations
• Industry Standards: ISO 27001 security standards

Regular Assessments

We conduct regular privacy impact assessments and security audits to ensure our practices meet the highest standards. Our data protection measures are reviewed quarterly and updated as needed.

Annual Transparency Report

We publish an annual transparency report detailing:

• Number of data requests from authorities
• Types of data requests received
• Our response to these requests
• Security incidents and our responses
• Improvements to our data protection measures

Continuous Improvement

We continuously invest in improving our data protection capabilities through new technologies, staff training, and process improvements. Your feedback helps us identify areas for enhancement.

Response Times

• General Inquiries: Within 48 hours
• Data Access Requests: Within 30 days
• Security Concerns: Within 24 hours
• Urgent Safety Issues: Immediate response