Privacy statement
Last updated: 4 November 2026
1. Who we are
PMA Amsterdam is the trade name used by PMADAM B.V., Ridderspoorweg 134, 1032 LL Amsterdam, registered with the Dutch Chamber of Commerce (KvK) under number 76623823. PMADAM B.V. is the controller for the personal data described in this statement. PMA Amsterdam is part of PMA Makelaardij & Beheer.
For privacy questions, contact us at contact@pma-realestate.nl or +31 (0)20 225 10 14.
We have not designated a Data Protection Officer.
2. Which personal data we process, why, and on what legal basis
| Who | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Website visitors who contact us | Name, email, phone, role, message | To answer your question | Our legitimate interest in responding to enquiries; steps prior to a contract |
| Owners who complete the property intake | Contact details, country of residence, property address and details, plans for the property | To assess your request and prepare a proposal | Steps prior to entering into a contract |
| Clients (owners) | Contact and identity details, bank account, property details, rental income, payments and fees | To perform our letting and management agreement; to keep our financial records | Performance of a contract; legal obligation (tax records) |
| Rental applicants | Contact details, household composition, copy of ID (with BSN and photo covered), proof of income, employment details, references | To assess applications and select a tenant | Steps prior to entering into a contract; legitimate interest of the landlord in a reliable tenant |
| Tenants | Contact details, lease, rent payments, deposit, repair and incident reports | To manage the tenancy on behalf of the owner | Performance of a contract; legal obligation |
| Contractors and suppliers | Business contact details, invoices | To arrange work and pay invoices | Performance of a contract; legal obligation |
We only ask for data we need for these purposes. We do not ask rental applicants about health, religion, nationality, origin or other characteristics that may not play a role in tenant selection. We do not use your data for automated decision-making or profiling, and we do not sell your data.
Where we ask for your consent (for example, to keep your application on file for a longer period), you can withdraw it at any time. This does not affect processing that took place before you withdrew it.
3. Do you have to provide your data?
Some data is necessary to enter into or perform an agreement with us, such as your contact details and, for rental applicants, proof of identity and income. We tell you which data is required. Without it, we cannot assess your request or enter into an agreement. Fields marked as optional in our web forms can be left empty.
4. Who receives your data
We only share personal data when necessary for the purposes above:
- Owners of the property you rent or apply for, to the extent needed for the tenancy;
- Contractors, who receive a tenant’s name and phone number to carry out repairs;
- Service providers that process data on our behalf, under a data processing agreement:
- Microsoft 365 (email and documents)
- WordPress.com / Automattic (website and web forms)
- Properize (tenant screening)
- Moneybird (invoicing and accounting)
- Rently (Tenant & Landlord portal)
- PMA Makelaardij & Beheer, for example when you ask for an energy label, valuation or sale;
- Lawyers, bailiffs, the Rent Tribunal (Huurcommissie) or authorities, when needed to protect our rights or when the law requires it.
5. Data outside the European Economic Area
Some service providers may process data outside the European Economic Area (EEA). In that case, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission (for example, the EU–US Data Privacy Framework) or standard contractual clauses. You can ask us for more information about these safeguards.
6. How long we keep your data
We do not keep personal data longer than necessary for the purposes above:
| Data | Retention period |
|---|---|
| Contact form messages | Up to 1 year after our last contact |
| Property intake forms that do not lead to an agreement | Up to 1 year |
| Applicants who are not selected | Up to 4 weeks after the selection, unless you agree to a longer period |
| Client and tenant files | For the duration of the agreement and up to 2 years afterwards |
| Financial and tax records | 7 years, as required by Dutch tax law |
7. Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access, such as restricted access on a need-to-know basis, secure connections and two-factor authentication. Our staff and the service providers we work with are bound by confidentiality.
If a data breach occurs that poses a risk to you, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours, where required, and inform you without undue delay if the risk is high.
8. Cookies and statistics
Our website uses functional cookies that are needed for the website to work. We use Jetpack Stats (WordPress.com) to count visits and see which pages are used, without advertising cookies and without building visitor profiles. We do not use advertising or tracking cookies, and we do not embed Google Maps on our website.
Our website links to other websites, such as our client portal and rental platforms. This privacy statement does not apply to those websites; please read their own privacy statements.
9. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time.
Send your request to contact@pma-realestate.nl. We respond within one month. To protect your data, we may ask you to verify your identity; please do not send a copy of your ID unless we ask for it.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Changes
We may update this privacy statement, for example when the law or our services change. The latest version is always published on this page, with the date of the last update.