Privacy Policy
1. Who is the controller?
The data controller is RentRiga SIA, registered at [Rīga address], Latvia, registration number [reg. no.]. Contact: privacy@rentriga.com. Our Data Protection Officer can be reached at dpo@rentriga.com.
2. What data we process and why
| Category | Examples | Lawful basis | Retention |
|---|---|---|---|
| Listing data sourced from third-party portals | Address, price, photos, landlord/agency contact details where publicly displayed by the source | Legitimate interest (Art. 6(1)(f)) — running an aggregation service in the public interest of renter transparency | Active for up to 90 days after the listing is removed from its source; then hard-deleted |
| Enquiry data you submit | Your name, email, optional phone, message | Performance of pre-contractual steps you have requested (Art. 6(1)(b)) | 24 months from last contact; deleted on request |
| Account data (when accounts are launched) | Email, hashed password, saved searches, favourites | Performance of contract (Art. 6(1)(b)) | While your account is active; 30 days after deletion request |
| Technical and analytics data | IP (truncated), browser, page URL, referrer; cookie-free analytics where possible | Legitimate interest in service operation and security (Art. 6(1)(f)) | 30 days for raw logs; aggregated metrics indefinitely |
3. Sharing your data
We share data only with:
- The landlord or agency you choose to contact, when you submit an enquiry.
- Processors acting on our behalf under written data processing agreements (hosting, email delivery, error monitoring, analytics).
- Authorities, where required by law.
We do not sell your personal data and we do not use it to train AI models.
4. International transfers
Some of our processors operate outside the EU/EEA (for example email delivery). Transfers are protected by EU Standard Contractual Clauses and, where applicable, by adequacy decisions of the European Commission.
5. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent. Submit requests to privacy@rentriga.com; we respond within 30 days.
If you are a landlord and your contact details appear on a listing aggregated from a third-party portal, you can request immediate removal via our takedown form.
You may also lodge a complaint with the Data State Inspectorate of Latvia (DVI), Elijas iela 17, Rīga LV-1050, www.dvi.gov.lv.
6. Security
We apply industry-standard organisational and technical measures: encryption in transit and at rest, access controls, hardened infrastructure, vulnerability scanning, and a documented incident response plan. We will notify affected users and the DVI of any data breach likely to result in a risk to rights and freedoms, within 72 hours.
7. Cookies
See our Cookie Policy. RentRiga uses only strictly necessary cookies by default; analytics and marketing cookies are loaded only after explicit consent.
8. Changes to this Policy
Material changes will be announced on the site at least 14 days before they take effect. The "Last updated" date at the top of this page tracks revisions.