Privacy Policy

Effective date: November 2025

1. General

1.1 What is GDPR

GDPR is a European Union regulation that strengthens the protection of Personal Data. In the highly digitized world we live in today, information has become essential. We strive to ensure that any Personal Data that we have in our possession is properly processed in terms of the law and protected appropriately. Your Personal Data is critical for our business and for the provision of our services, and its security and proper use are of paramount importance to us.

1.2 What is Personal Data

Personal Data is personal information about an individual. We collect such information about our customers for relationship management, statistical reasons, service provision, and marketing purposes, and also about our employees, potential employees, or agents when they apply for a position with us. We may also collect some personal information from other individuals who are not our customers, for marketing purposes, subject to their consent.

Personal Data may be of a general nature and of a special nature. Generic Personal Data refers to data such as names, surnames, contact details, and similar data which can be used to identify a person. Special categories of Personal Data relate to more confidential kinds of Personal Data such as health data. Information regarding the different kinds of Personal Data we collect can be found in section 3 of this document.

1.3 What are Controllers and Processors of Personal Data

When you provide your Personal Data to a third party, you are passing such data to either a controller or a processor.

A Controller of your Personal Data is an individual or a company who has the power to determine the exact uses of the Personal Data you have supplied. A Processor is a third party who processes your Personal Data on behalf of a controller.

2. The Controller of your Personal Data

Next to Rent is a real estate services company. In this document, it shall be referred to as “Next to Rent”, “we”, or “us”.

We generally collect Personal Data regarding our clients at the stages outlined below:

1. When we are approached to assist a client to find property to buy or rent;
2. When we are approached to assist a client to sell or lease out a property;
3. When we are about to conclude a sale or lease and collect additional Personal Data as required by law.

We also process Personal Data on our potential and actual employees and on any other party who engages with Next to Rent.

2.1 When we are approached to assist a client to find property to buy or rent

When we are approached by a client seeking to buy or rent a property, Personal Data shall be collected by Next to Rent, which shall be the Controller of this Personal Data. Your Personal Data may be shared with our engaged sales or letting associates and with property owners or their representatives strictly for the purpose of providing our services.

2.2 When we are approached to assist a client to sell or lease out a property

Similarly, when we are approached by a client seeking to sell or lease out a property, Personal Data shall be collected by Next to Rent as Controller. Your Personal Data may be shared with potential buyers or tenants, as well as our associates, strictly to provide our services.

2.3 When we are about to conclude a sale or lease and collect additional Personal Data as required by the law

When a transaction can be concluded and thus a property sale or lease can be finalized, Next to Rent will require the collection of additional Personal Data from all parties involved. Such Personal Data is required under law and shall be primarily held and processed by Next to Rent as Controller. Any Personal Data collected in this regard may be shared with competent authorities, notaries, financial institutions, or service providers where required by law or necessary to finalize the transaction. Data will not be shared beyond what is necessary.

2.4 When engaged with Next to Rent

Should you apply to work with Next to Rent, your Personal Data shall be collected and processed by us for recruitment and employment purposes.

3. Your Personal Data

3.1 What Personal Data we collect

During your visit of this website, we will automatically collect the following Personal Data about you:

• information about the pages that you visit on this website;
• the date and time of your visit;
• your IP address;
• your web browser;
• the website that you visited before accessing this website;
• certain cookies (see our Cookie / Data Protection Statement).

If you are looking to sell, buy, or rent a property, we may obtain Personal Data from this website or from our associates. The Personal Data we process in this context is:

• your name and surname;
• your address;
• your telephone number;
• your email address;
• listings and associated listing information; and
• data concerning individual real estate transactions.

This information will only be obtained if you provide it yourself to us or input it on our website (for example via contact forms).

If you apply for a position with us, the personal information that we process may include:

• your name and surname;
• your CV and any Personal Data contained therein;
• your telephone number and mobile phone number;
• your email;
• personal references.

In cases where we ask you to provide any Personal Data, there is no obligation to do so, but if you do not, you may not be able to use all functions of our website, apply with us, or make full use of our real estate services.

3.2 Specific Categories of Personal Data

Certain Personal Data is more sensitive and is classified as special categories of Personal Data, which relate to the following:

• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic data;
• biometric data for the purpose of uniquely identifying a natural person;
• data concerning health;
• data concerning a natural person’s sex life or sexual orientation.

We will clearly explain the purposes for which we wish to use such Personal Data when it is being collected and, if necessary, obtain your consent at that time. In such cases, you will be able to withdraw your consent at any time. We will not process such Personal Data without obtaining your prior written consent unless otherwise specified by law.

4. Purposes for which we use your data

We will use your Personal Data to provide this website to you, to generate usage statistics, to improve and further develop this website, to provide real estate services to you, to respond to your requests and messages, to send you our newsletter if you have subscribed to it, to contact you about properties that may interest you, and to analyze your data in aggregate form for business intelligence purposes.

If you have applied for a position with us, we will process your data to determine your suitability for the position.

5. Legal basis for the processing

We shall always process your Personal Data in terms of the law and therefore we shall always have a proper legal basis to process your Personal Data:

1. If we process certain Personal Data about you that we receive from our website, from queries, or from our social media platforms, should you be looking to buy, sell, lease, or rent a property, the legal basis for the processing may be your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
2. If we process your Personal Data due to the fact that you would like to sell or lease out a property, we would have entered into a contractual arrangement with you and we would be processing your Personal Data to adhere to our contractual obligations in terms of Article 6(1)(b) GDPR, due to certain legal obligations in terms of Article 6(1)(c) GDPR, and to protect our legitimate interests in terms of Article 6(1)(f) GDPR.
3. If we are in the process of concluding a transaction of sale or lease of an immovable property, we shall also process additional Personal Data from each side of the transaction as required by law, including anti-money laundering and counter-terrorist financing requirements. The legal grounds for processing here shall be Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) GDPR.
4. In addition, should you apply for a position with us, the legal basis of processing of your Personal Data shall be your consent pursuant to Article 6(1)(a) GDPR or steps necessary prior to entering into a contract under Article 6(1)(b) GDPR.

6. Disclosures and data transfers

6.1 Independent Third Parties

As far as this is necessary for the purposes set out above, we may transfer your Personal Data to third parties as follows:

Should you require a detailed list of processors, kindly contact us as indicated below and we will provide you with more detail.

Some recipients may be located in or process Personal Data outside of your country. The level of data protection in another country may not be equivalent to that in your country. However, we only transfer your Personal Data to countries where the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients provide an adequate level of data protection. We do this for example by entering into appropriate data transfer agreements based on the Standard Contractual Clauses adopted by the European Commission. Such agreements are accessible upon request via info@nexttorent.mt.

6.2 Regulatory Authorities

We may be required to transfer your Personal Data to certain regulatory or government authorities when subject to a proper and lawful request. We may be obliged to provide such data and we may also be prevented from informing you that such data has been provided.

6.3 Personal Data collected from third parties

In certain cases, as allowed by law, we may receive Personal Data about you from third parties, such as public authorities or service providers, mainly relating to searches dealing with immovable property. Any Personal Data collected in this regard shall be processed and stored in terms of the law.

7. Retention periods

We will retain your data that we collect automatically when you visit this website for no longer than six months.

If you have subscribed to our newsletter, we will retain your email address until you unsubscribe. If you have registered on our website, we will retain your data for as long as your account exists and thereafter only for as long as there are any legal obligations to retain your data.

Moreover, we will retain your Personal Data that we receive in the course of our services at least until the end of your business relationship with Next to Rent unless there are statutory retention obligations or potential claims that are not yet time-barred.

In this regard we shall keep:

1. Any of your general Personal Data up to at least five years after the end of our business relationship, to protect our legitimate interests and comply with due diligence obligations. This period may be extended to ten years in certain situations as dictated under law;
2. Other Personal Data which may relate to transactions and other commercial matters for at least ten years due to obligations in relation to taxation and accounting matters.

If you have applied for a position with us, we will delete all your Personal Data if we do not engage you after four months, unless you provide consent to keep the Personal Data for longer.

8. Your rights and remedies

Under applicable data protection law, you have these rights:

1. to check whether and what kind of Personal Data we hold about you and to access or request copies of such data,
2. to request correction, supplementation, or deletion of Personal Data about you that is inaccurate or processed in non-compliance with applicable requirements,
3. to request that we restrict the collection, processing, or use of Personal Data about you,
4. in certain circumstances, to object for legitimate reasons to the processing of your Personal Data,
5. to request your Personal Data in a structured, commonly used, and machine-readable format, as allowed by law,
6. to know the identities of third parties to which your Personal Data is transferred.

When making such requests, please note:

1. Following your request, we shall have up to one month to reply, except in situations allowed under law. In such a case, we shall inform you why your request was not finalized within one month. The one-month time frame may be extended by a further two months in exceptional cases;
2. We have the right to charge a reasonable fee or refuse your request if such requests are manifestly unfounded or excessive;
3. When you are making a request, we may request documentation or information to confirm your identity.

In case of any complaints, you also have the right to lodge a complaint with the competent data protection authority in your place of residence or work.

9. Data Security Measures

We shall take necessary measures as required by law to ensure proper security and protection of your Personal Data. Such measures may include encryption, use of firewalls, anti-virus software and specialized security software, access restrictions and limitations, strict enforcement of policies, and other measures that we may enforce from time to time. Our measures strive to ensure that:

1. There is no unlawful destruction of your Personal Data;
2. Your Personal Data is not subject to unauthorized access;
3. Your Personal Data is not subject to unauthorized disclosure;
4. Your Personal Data is not subject to unauthorized modifications.

Despite our best efforts, we cannot provide a 100% guarantee in relation to our system security.

10. Surveillance and Security

We may apply certain surveillance and security measures at our offices and on our systems. At our premises, measures like CCTV footage may be recorded and retained in terms of our retention policy and security requirements. This Personal Data shall be stored and managed in accordance with current data protection law.

11. Marketing

11.1 Direct Marketing

We shall only send marketing material to you if authorized by law to do so and we shall not send unsolicited marketing material. If you subscribe on our website, create an account, or subscribe to our services, we may send you information regarding properties that would interest you, based on the information you have provided. We rely on your consent to send you such information, which you can withdraw at any time.

11.2 Social Media

We also use social media to promote our services. Should you contact us through social media or provide us with Personal Data through social media, this privacy policy shall also apply and any Personal Data collected there shall be managed in terms of this policy.

12. Hyperlinks

Our website contains hyperlinks to websites operated by other companies or businesses which are not related to us. These websites are managed by companies that have their own data protection policies and procedures on which we have no control. Therefore, we are not responsible for the way the owners of these websites process your Personal Data.

13. Updating of this Policy

We may update the terms of this Privacy Policy at any time in accordance with the law. If you are our client, we shall inform you if we carry out material changes to this policy. If you are not a client of ours, it shall be in your interest to regularly check this policy.

14. Contacting us

Should you have any questions regarding our data protection policies or would like to make a request in relation to your Personal Data, please contact us using the details below:

Next to Rent
54, Triq is-Swieqi, Swieqi, Malta
info@nexttorent.com
+356 79798661