More of a rant than anything, one of my tenants is moving on and the ref agency used by the new LL is goodlord.co. They send a link to a form, which requires me to accept their t&c's including data policies etc.
I sent a decent email ref by email reply, but this kind of stuff boils my piss. I am volunteering my info, I do not have to give a ref at all, why make it hard??
bumple
Is it just clumsy wording; anything they hold relating to you will now be subject to some sort of data retention policy and they need to make you aware of what that is / why they hold it / what they'll use it for?
I've just done an employment one that was similar. Happy to write a reference, that would probably tell you far more than the bloody electronic form you've sent - which required me to tick yes/no to each box and then write a justification! Why do I need to justify "punctual" and "trustworthy" when I said yes. 15 questions, which are obviously generic to every job this vetting agency has ever seen - not one of them asked if she was actually any good at her job, or indeed what her current job title was. Rather there were vague things like "describe her personality"...
Then I get to the end and I'm agreeing that my personal data can be shared etc, and after all that their bloody form crashed!
Its a mickey take isn't it, they want free voluntary info out of you and expect you to adhere to their datagrab.
The best ref agencies offer a form, or email, or phone no.
I suspect the company (goodlord.co.uk?) need to justify keeping your data on their computers. It's just GDPR stuff.
You could write a letter, but they'd probably still need your consent to keep a copy of that on their computer too.
its goodlord.co
No .UK.
Its a modern URL...
I disagree about GDPR, they have a legal duty to treat my data with care, they do not need my permission for them to do their duty.
The t&c's were full of other stuff about cookies etc. No thanks.
It’s just GDPR stuff.
You could write a letter, but they’d probably still need your consent to keep a copy of that on their computer too.
In that case, it clearly shows they don't understand GDPR! Everyone who asks for consent as a lawful basis for processing stuff that they want to do even if you later revoke consent is doing it wrong. There are six lawful basis for processing data and in my experience, unless you are doing something that ordinary people wouldn't expect you to be doing with the data consent is the wrong choice. Ironically it's also the one that is the hardest work for the data controller to maintain (because it can be revoked etc).
they have a legal duty to treat my data with care, they do not need my permission for them to do their duty.
Part of treating it with care is making sure they have your express consent to hold it, I guess. Could sending the form be treated as implied consent under GDPR? Don't know.
Fortunately, this is just the kind of red tape that Brexit will no doubt tear up. 🙂
EDIT: My guess obviously wrong!
My estate agent (P.. R..s..) want my full personal income details etc every time I renew my tenancy contract. I had to get my HR to prove my earning etc. If the estate agent wants to create a clone of my details they can easily do so.
My guess obviously wrong!
Yeah like Poly I am familiar with GDPR as my company rents residential property, which I have the job of administering. Hence we are GDPR registered. And yours truly is the nominated officer.
All I have to do is keep records securely, not let anyone see them unless they have a legitimate reason (unless its cops then I tend not to give them out) and thats it. I don't need consent, its assumed that I will do my duty to keep their details secret when I ask for their details to register them as an applicant.
I have a duty to keep their stuff secret.
Anyone asking for consent is implying they will do more than that, these ref agents are suggesting they do more than that, and its a liberty to ask someone for a voluntary ref, and then expect them to consent to your bullshit.
Yeah like Poly I am familiar with GDPR as my company rents residential property
Anyone who holds electronic personal data as part of their business should be ICO registered, there are a lot of folk out there who don't know this.
Anyone who holds electronic personal data as part of their business should be ICO registered, there are a lot of folk out there who don’t know this.
The ICO write to you to remind you...