Data processing agreement

This agreement applies between the manager, letting agent or owner who registers with SURVAI (the "Controller") and SURVAI (the "Processor"), under Article 28 GDPR.

1. Subject and purpose

SURVAI processes on the Controller's behalf the details of the tenants and owners of their properties (name, phone, e-mail, property, messages, photos, fault requests) solely to record and pass on faults.

2. Instructions

SURVAI processes the data only on the Controller's instructions, as expressed by the account settings (who receives what, owner copy, hours) and this agreement.

3. Confidentiality and security

Only persons who need access have it, bound by confidentiality. Data is transmitted encrypted and stored with providers that apply appropriate security measures. A breach is notified to the Controller without undue delay and at the latest within 72 hours.

4. Sub-processors

Twilio (WhatsApp), OpenAI (message analysis, no model training), Airtable (database), Render (hosting, EU), Google (e-mail). Changes are announced with 14 days' notice; the Controller may object.

5. Data subjects' rights

SURVAI assists the Controller in responding to access, correction and deletion requests. A tenant who writes STOP is deleted within 48 hours and the Controller is informed.

6. Duration and deletion

At the end of the cooperation SURVAI deletes or returns the data within 30 days, unless the law requires retention.

7. Audit

The Controller may request information about the processing and, with reasonable notice, verify compliance.