Privacy policy
Kiadah processes personal data in two distinct roles, and that distinction governs everything else: for professional accounts, Kiadah decides and answers; for the transaction circuit's data — buyers, visitors, sellers — the agency decides, and Kiadah acts on its behalf.
What we collect
From a professional creating an account: name, e-mail address, telephone, IPI/BIV number, agency name and the licence certificate provided.
From a visitor, on the agency's behalf: their name, e-mail address and, if given, telephone number. The agency enters these when booking the viewing.
From a buyer submitting an offer, on the agency's behalf: the details a notary will require to draw up the deed — name, date and place of birth, home address, marital status and, where known, matrimonial property regime. To these are added the content of the offer, its suspensive conditions, their notary if appointed, and the record of their electronic signature. Where an offer comes from several buyers, each provides the same details and signs for themselves.
From a seller, on the agency's behalf: name, e-mail address, and the record of their signed decision.
Your IP address is never kept in clear, only as an irreversible hash. No profiling is carried out, and no automated decision produces legal effects concerning you.
What they are used for
For a professional: to verify their licence against the public IPI/BIV register, to create and administer their account, and to reach them about the platform.
For a visitor, buyer or seller: to carry out the transaction they entered into, and nothing else. Identity details serve to draw up the offer and, if it goes ahead, the deed of sale; they feed no other use. Traceability — who offered what, when, sent to whom — is the very object of the service.
Your data is neither sold nor transferred. It serves no prospecting, whether for us or for third parties, and a buyer or seller met within an agency's file is never approached by us.
Who has access
The agency the file belongs to, and it alone: one agency never sees another's files. Within the agency, access follows the role — a collaborator prepares, a licensed agent commits.
The parties to the transaction, for what concerns them: a buyer sees their own offer and the identity of their co-buyers, since they commit together; they never see another buyer's offer, and there is no auction mechanism.
Our technical providers, for delivery only: hosting and e-mail sending. They are established in the European Union or covered by the safeguards of Chapter V of the GDPR. No transfer is made for any other purpose.
Consent and legal basis
Processing a visitor's, buyer's or seller's data rests on performance of the transaction and on the agency's legitimate interest in keeping proof of it — not on a consent that could be withdrawn midway without erasing an act already signed.
Where consent is asked for, no box is pre-ticked. Each consent is separate and recorded with its date and the exact version of the text accepted, so that this text can be produced as it stood.
Your rights
You may at any time request access to, rectification, erasure or portability of your data, object to its processing, and unsubscribe in one click from every message.
If you are a visitor, buyer or seller, address the agency first: it decides, and it answers within the legal one-month period. You may reply directly to the message you received. Write to contact@kiadah.be if it does not respond, and we will relay.
If you are a professional, write to us directly at contact@kiadah.be.
A right has its limits, and they are better stated: erasure does not extend to what evidences an act already performed. A signed and transmitted offer, with its timestamps, is proof that protects both parties; it is kept for as long as the law permits on that ground.
For how long
Professional account: for as long as the account is active, then deleted on closure or on request.
Visitor with no follow-up: their contact details are deleted twelve months after their last viewing if no offer has been made. That is what every message tells them, and what the product carries out.
Offer submitted: kept with its evidence file, because it attests to a commitment. An offer that expires without follow-up follows the limitation period applicable to the transaction; an accepted offer follows the fate of the sale file.
Data from the valuation simulator and the waiting list, withdrawn from the site: kept only for as long as needed to answer any erasure requests, then anonymised. It is no longer used.
How they are protected
Traffic with the site is encrypted. IP addresses are kept only as an irreversible hash. Links sent by e-mail — file, signature, tracking, seller's decision — are personal, unpredictable, single-use where they commit, and they expire. A property's documents are reachable only through the link given to the person concerned.
A data breach presenting a risk to you would be notified to the Data Protection Authority within 72 hours, and to the people concerned where the risk is high.