Legal
Privacy policy
Last updated: 28 October 2026
KEYAA has not launched yet. Until launch, the site only collects the data you give us in its forms, so we can tell you when we launch, call you if you have an apartment, or send you our investor presentation, plus the technical data of your visit that any site needs in order to work. This page explains exactly which data, why, for how long, and your rights.
Who is responsible for your data
The data controller is the operator of KEYAA, based in Iași, Romania. Its identification and contact details are on the Company details page.
For any question about your data, write to the contact address on the Company details page.
What we collect and why
- Tenant early-access list: your email address and, if you choose, when you move, the area and your budget. We use them to tell you when we launch and which apartments appear in your area.Legal basis: Art. 6(1)(b) GDPR, steps taken at your request before a contract.
- Owner pre-registration: first name, phone, area, how many apartments you have and, if you choose, when they are free and your email address. We use them to call you and help you list your apartment at launch.Legal basis: Art. 6(1)(b) GDPR.
- Investor presentation request: name, email, firm or fund and, if you choose, your LinkedIn profile and how you heard about us. We use them to reply and send you the presentation.Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in answering investors.
- Marketing messages (KEYAA news): only if you tick the separate box for them.Legal basis: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time.
- Technical visit data: when you open a page, the site’s hosting provider (Vercel) automatically receives, as with any website, your IP address and your browser’s technical details. They are used only to deliver the page and protect it from abuse, and the logs they appear in are kept for a short time.Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, working site.
We do not ask for your ID card, the apartment’s address or any documents now. Owner verification starts at launch and will come with its own notice.
We make no automated decisions with your data and we never sell it.
Who else sees the data
Only the providers the site needs to work: hosting, the database and the email service. They act on our behalf under contract and cannot use the data for anything else.
If a provider processes data outside the European Economic Area, the transfer only happens with the safeguards GDPR requires (an adequacy decision such as the EU-US Data Privacy Framework, or standard contractual clauses).
How long we keep it
- Early-access and pre-registration data: up to 12 months after launch, or until you ask us to delete it, whichever comes first.
- Investor requests: up to 24 months after our last conversation.
- Marketing consent: until you withdraw it.
Your rights
You have the right to know what data we hold about you, to correct it, to have it erased, to restrict processing, to object to processing based on legitimate interest, to receive your data in a portable format, and to withdraw consent at any time without affecting earlier processing.
Write to us at the contact address at any time. We reply within one month.
If you believe we have not respected your rights, you can complain to Romania’s data protection authority (ANSPDCP), www.dataprotection.ro.
Minors
The forms are for people aged 16 and over. Rental contracts will be reserved for adults, or minors with their parents’ consent, under the rules that apply at launch.