22nd May 2018
aparto is a Student Accommodation management company with assets in the UK and Ireland.
Our goal is to maintain your trust and confidence when handling your data. aparto promises to protect the individual’s right to privacy, and implement safeguards that prevent the misuse of private information.
aparto is committed to meeting the legislated data protection requirements in all the countries in which it operates, specifically the EU General Data Protection Regulation (GDPR)
What We Collect
aparto collects the following information from customers and potential customers in order to provide product services: contact details, such as name, email address, and phone number, booking data, as well as information related to the day to day running of our business, such as financial and transaction data. You have the right to access your personal data held by us, and to request its correction or deletion.
End User Personal Data
aparto collects both our residents and potential customers (“End User”) personal data for the purposes for providing them with accommodation services and services that relate to accommodation. Personal data collected from End Users varies but typically includes name, email address, phone number, gender, date of birth and identifiers such as student IDs. It can include the Users bank details and the details of guarantors, financial and academic institutions.
We are considered a Data Controller under the Data Protection Legislation. We work with third parties on our behalf (who are considered Data Processors), in accordance with our obligations under the applicable Data Protection Legislation to assist them in providing a robust approach to data protection. End User data protection issues can be raised with us, and we will cooperate with the relevant third party data processor if necessary.
Logs & Telemetry
Who We Share Data With
There will be circumstances where it is necessary for aparto to share some customer data. When this data sharing takes place, this will always be relevant for the purpose the data was given. For example, if you are a resident, we may provide your Local Authority End User data for the sake of a council tax exemption notice relating to accommodation. When we share this data, we commit to doing so in a way which protects your privacy in line with the GDPR regulations.
You are welcome to contact us at any stage to express any reasonable limitations on how your data is used, at firstname.lastname@example.org. We will never share sensitive personal data with third parties without the individual’s express consent.
For the purposes of providing our services, we engage cloud service providers, which provide the infrastructure for several of our systems. These organisations will host and transmit encrypted personal data, and do so under a contract with aparto that requires the same standards of protection for the subject’s data rights. In the event of a requirement to disclose data to another third party, or for a purpose which is substantially different from our existing services, you will be given the opportunity to opt-out. With these third parties, and any others, aparto remains liable for the handling of your personal data.
aparto will use your data for the purpose of direct marketing. However, we make a commitment not to share your data with any third-party agents for their direct marketing, or marketing their products. All data collected for the purpose of marketing will only be used by aparto for the purpose of marketing our accommodation.
aparto make a commitment to delete any data relating to marketing our accommodation once the specific year of study expires.
How We Use Data
We use Personal Data to provide our services, and we host End User data so that our Customers can provide services to their customers. Examples of how we may use
• To respond to inquiries and provide customer support
• To improve our existing products or develop new ones
• For audits, regulatory purposes and compliance with industry standards
• To send marketing communications
• To make tenancy deposit and rent refund payments
• To comply with local laws and taxes, and to cooperate with local law enforcement
• For Health and Safety Purposes, to record accidents and injuries.
The information that aparto collects is treated with the utmost care and security. aparto uses commercially reasonable efforts to ensure that the data is:
• Used fairly and lawfully, for limited and specifically stated purposes
• Used in a way that is adequate and relevant to the business purpose, and not excessive in nature
• Is managed to maintain its integrity
• Kept only for the period for which it is required to provide services
• Handled according to people’s data protection rights
• Kept safe and secure
• Not transferred across borders without the protection of strong encryption, secure storage, and the legal basis to do so, by arrangement with data controllers
Access to your Information, Correction and Deletion
To make a request for your data information, corrections or deletions, please do so in writing to: email@example.com
Data Protection Officer
aparto has appointed an internal data protection officer for you to contact if you have any questions or concerns about StarRez’s personal data policies or practices:
Tom Rix – Director Operations
5 Welbeck Street, London W1G 9YQ, UK
If any concerns or complaints remain unresolved after contacting the Data Protection Officer, you may raise the issue with the panel provided by the Data Protection Authority (DPA) in your country, as a free, independent resolution mechanism. Under certain circumstances it is possible for you to invoke binding arbitration as a dispute resolution mechanism.