Privacy policy

Dean Radar [rechtsvorm], located at [vestigingsadres], registered with the Dutch Chamber of Commerce under [KvK-nummer] and with VAT number [btw-nummer], is the controller for the personal data processed for the Dean service.

Dean Radar provides software that helps users monitor rental listings and receive matches. Dean Radar is not a landlord, letting agent or broker and does not decide who receives a home, who may attend a viewing or under which terms an external provider rents out a property.

For account and authentication, we process name, email address, login and session data, security signals and account status. For search profiles, we process selected cities, neighbourhoods, locations, radius, budget, property type, rooms, surface area, availability preferences and alert settings.

For email alerts, transactional messages, account and paywall recovery, marketing reminders and support, we process email address, message content, delivery status, error messages and limited audit logs. Transactional email and rental alerts are sent through Cloudflare Email Sending. We use Klaviyo for marketing email after opt-in and, where allowed, for account and paywall recovery after account creation.

When you enable WhatsApp, we process the connected phone number, opt-in status, message content where needed to deliver the alert, delivery information and audit logs. WhatsApp is provided through Meta/WhatsApp and is optional.

When you add a Sleutelgenoot search companion, we process that person's name or label and email address or phone number to forward matches. The main user declares that they have consent or another valid basis for this. The search companion receives an explanation and an opt-out option.

For subscription, invoicing and payment, we process invoice data, payment status, payment method data, any SEPA mandate data and administrative data. Stripe is our primary payment, invoicing and subscription provider. Banks or payment institutions may process data for payment handling and, where applicable, SEPA direct debit.

For scraping and matching, we process public or source-published rental listing data, such as title, address or location data, rent, characteristics, source, publication time, URL and technical fetch information. Scraper traffic may use proxy, browser rendering and infrastructure suppliers. This is generally external listing data, but may incidentally include personal data when a source publishes it publicly.

For technology, security, analytics and marketing, we may process IP address, device and browser data, cookie IDs, consent status, page views, errors, referer, campaign data and usage events. Non-essential statistics and marketing tools are activated only after the required consent.

To protect forms against spam and bot traffic, we use Cloudflare Turnstile. Cloudflare may process client-side security signals such as IP address, TLS fingerprint, user-agent, sitekey and page origin. Also see Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

We process personal data to create accounts, store search profiles, compare rental listings with search preferences, send email and WhatsApp alerts, manage subscriptions, provide support and secure the service. These activities are mainly based on performance of the agreement.

We process invoice and payment data to collect payments, keep records and comply with tax and accounting duties. These activities are based on performance of the agreement and legal obligations.

We process operational logs, fraud prevention signals, Turnstile security signals, scraper status information and limited error data based on our legitimate interests in security, continuity, abuse prevention, quality control and solving technical issues.

We rely on consent for non-essential cookies, statistics tools such as Google Analytics 4 and Amplitude where consent is required, marketing cookies, Google Ads, Meta Pixel, retargeting and opt-in marketing email through Klaviyo. For account and paywall recovery after account creation, we may also rely on our legitimate interest in helping you complete the search route you configured, where legally allowed. You can withdraw consent at any time and unsubscribe from marketing through the unsubscribe link.

Dean uses software rules to compare public or external rental listings with your search profile and to show or send possible matches. This selection has no legal effect for you and does not similarly significantly affect you within the meaning of the GDPR.

Dean Radar does not make decisions on behalf of landlords, letting agents, platforms or other providers. A match only means that our software considers a listing potentially relevant; it is not an offer, reservation, acceptance, invitation, guarantee or assessment of your chance of obtaining the property.

We may share personal data with suppliers needed for hosting, database, authentication, email, WhatsApp, analytics, marketing, payment, invoicing, security and support. They may process personal data only for the agreed service and under applicable arrangements.

Current or concretely planned suppliers include Supabase for database and authentication, Cloudflare for hosting, security, Turnstile bot detection, email and operational infrastructure, Stripe for payments, invoicing, subscription management and, where available, SEPA direct debit, banks or payment institutions for payments, Meta/WhatsApp for WhatsApp messages, Google for Google Analytics 4, Google Ads and Search Console, Amplitude for product analytics, Klaviyo for marketing email and account and paywall recovery, and suppliers for scraper proxies and browser rendering.

Google Search Console is used for insight into website discoverability and is not treated as a cookie or browser tracking tool as long as no browser-side Search Console tag or similar technology is placed.

When you click through from Dean to an external rental listing, further processing takes place with that external provider. That provider's privacy and cookie policy applies. Dean does not sell your account or search profile data to landlords, letting agents or advertising parties.

Some suppliers may process personal data outside the European Economic Area. Where this happens, we take appropriate measures, such as data processing agreements, standard contractual clauses, supplementary safeguards or reliance on a valid adequacy decision where applicable.

Because international transfers depend on the supplier, region settings and subprocessors used, we will update this text when the production stack changes.

We keep account data, search profiles, alert settings and Sleutelgenoot settings while your account is active or while needed to provide the service. After deletion, we erase or anonymise data that is no longer needed unless the law requires retention.

Invoices, payment data and administration are generally kept for seven years for tax duties. Onboarding drafts are kept briefly. Raw scraper payloads are kept briefly according to operational configuration, unless longer retention is needed for error analysis, security or evidence of misuse.

Email and WhatsApp audit logs are kept for a pragmatic limited period, generally up to twelve months, unless longer retention is needed for support, security, delivery, disputes or legal obligations. Backups are overwritten on fixed cycles.

You have the right to access, rectification, erasure, restriction, portability and objection where the GDPR grants those rights. Where processing is based on consent, you may withdraw consent. You can always unsubscribe from marketing through the unsubscribe link or by contacting us.

Send privacy requests from your account email address to help@heydean.nl. We may ask for additional information to verify your identity. If you are not satisfied, you may lodge a complaint with the Dutch Data Protection Authority.