Achmea Real Estate Privacy Statement

The role of Achmea Real Estate

Achmea Real Estate acts as asset manager for various clients. Achmea Real Estate buys, operates and sells real estate on behalf of these clients. They are the owners of the properties and therefore the data controller. When operating real estate on behalf of the client, Achmea Real Estate is the processor of your data.

In addition, Achmea Real Estate manages various real estate funds. In such cases, Achmea Real Estate and Achmea B.V. are joint controllers.

In many cases, the letting and operating activities are outsourced. The letting agent(s) and/or property manager then act as processor on behalf of Achmea Real Estate.

Your data in safe hands

Would you like to rent a home, retail premises, office or another type of property? Then we need your personal data. Your data is processed:

  • for the purpose of the rental agreement (to be concluded);
  • because you have given your (explicit) consent;
  • because there is a legal basis for doing so; or
  • because we have a legitimate interest.

Without your personal data, we cannot enter into a rental agreement with you. We think it is important that you know what we do with your personal data and what your rights are. That way, you can trust that your data is in good hands with us.

Which data do we use?

We process personal data in accordance with the GDPR and collect no more than is necessary for the stated purpose, depending on the stage of the rental process you are in.

When registering your interest

If you are interested in a home or project, we process your name, email address and (optionally) phone number. We also process information about your housing preferences, such as when you are looking for a home and how many people your household consists of. We process this in order to make a good match between the home and the home seeker.

When registering for a home or project

If you want to register for a home or project, we process your address, place of residence, phone number, date of birth, place of birth, nationality and details of your identity document (such as type and date of issue). If you are employed, we also ask you for an employer's statement. If you are self-employed, we ask for an income statement (IB-60 form), and if you are retired, we ask for a pension overview. Do you receive benefits? Then we ask for your annual benefits statement. With this data, we can make a preliminary assessment of whether you are eligible for the home in question. We also process your current address and place of residence in cases where we (are required to) give priority in the registration on that basis.

Upon allocation

If a home is provisionally allocated to you, we ask you for additional information. For example: payslips, bank statements, a UWV insurance statement and a copy of your passport (without citizen service number (BSN) and passport photo). We also need data about your co-tenants. In addition, we process your payment details for the automatic collection of the rent. To comply with our legal obligations, such as those under the Wwft (Dutch Anti-Money Laundering and Anti-Terrorist Financing Act), we assess the risks to our organisation at this stage of the rental process. We do this by checking, for example, whether you are on a sanctions list or hold a prominent public position.

Special categories of personal data

For some of our residential complexes (care properties), we also ask you for a care needs assessment (zorgindicatie). Achmea Real Estate does not process the content of your care needs and has no access to your medical data. We only ask whether you have a care needs assessment.

We also use cookies

Our website uses cookies. You can read what cookies are and how we handle them in our cookie statement.

What do we use your data for?

If you are a (prospective) tenant, we use your data for the following purposes:

1. Performance of a (future or existing) agreement

These processing operations are necessary to conclude or perform a rental agreement.

  • Concluding a rental agreement with you, or having one concluded;
  • Performing the rental agreement;
  • Making payments and collecting receivables, including handing them over to third parties;
  • Planning or carrying out maintenance, or having it planned or carried out;
  • Conducting or arranging viewings and takeovers, or having them conducted or arranged;
  • Registering (data from) tenancy agreements.

2. A legal obligation to which we are subject

These processing operations are mandatory under laws and regulations.

  • Complying with our duty of care: are you a suitable tenant for the property?
  • Performing or applying legal obligations to which we are subject, for example in the context of combating money laundering and terrorist financing (Wwft);
  • Carrying out checks relating to rent allowance (huurtoeslag);
  • Conducting online background research where required by law (bad press).

3. Our legitimate interest

These processing operations are necessary for business operations, optimisation and management. They have no contractual or legal basis, but do meet the balancing of interests test.

  • Identifying the needs and preferences of (potential) tenants;
  • Handling disputes, questions or investigations, including legal proceedings;
  • Carrying out internal management activities;
  • Maintaining contact with external property managers we engage to carry out letting activities;
  • Optimising our processes and systems;
  • Conducting tenant satisfaction surveys.

4. Consent you have given

Only applicable where marketing cannot be based on legitimate interest (e.g. direct marketing by email to non-customers).

  • Marketing purposes (for example commercial email campaigns that require consent).

Which contacts do we record?

We record what we agree with you and use our contacts with you to improve our communication. These are the contacts we record:

  • letters and emails we send to you and receive from you;
  • phone calls and chats;
  • what you do and view on our website;
  • when you contact us via social media such as LinkedIn.

Profiling

In some processes within Achmea Real Estate, we create a profile of you based on the data we hold about you. This may be data we have received from you directly or data from external (public) sources. We analyse this data with the aim of, among other things, gaining insight into your likely preferences and managing risks more effectively. Examples where we use profiling are:

  • Determining debtor risks
  • Assessing risks for the purpose of combating fraud and preventing money laundering and terrorist financing (Know Your Customer (KYC)/Customer Due Diligence (CDD)).

The profiles created are often used as input for decisions made by employees. For example, when entering into a (rental) agreement, where we look at suitable income, household composition and a score from our partners, who retrieve data from the guardianship and administration register (curatele- en bewindregister), the bankruptcy register and debt recovery activities. Using this information, the employee can assess whether your financial situation is suitable for the home in question.

From whom do we receive your data and with whom do we share it?

We usually receive your data from you or through our property managers, because in many cases they arrange the letting for us. For example, when a rental agreement is concluded or when you subscribe to a newsletter.

Sometimes we obtain your data in a different way. We may request data about you from the Land Registry (Kadaster), the Chamber of Commerce (KvK) or the Matrimonial Property Register (Huwelijksgoederenregister). In the context of our duty of care and our Wwft obligations, we also consult national and international sanctions lists. We may also obtain data about you from public sources, such as credit reference agencies and public registers. One example is Economic Data Resources B.V. (EDR), which retrieves data from the guardianship and administration register, the bankruptcy register and EDR debt recovery activities. In some cases, we also consult newspapers, the internet or social media to comply with legal obligations under the Wwft. We do not sell your data.

  • the clients, as owners of the property;
  • (commercial) property managers to operate the property;
  • plumbers, repairers, contractors and maintenance companies to carry out work in your home;
  • the bank, for payment purposes;
  • valuers, estate agents and legal service providers;
  • collection agencies and bailiffs, for payment purposes;
  • lawyers and judicial authorities in the context of payment arrears or a dispute;
  • investigative authorities, tax authorities (in the Netherlands and abroad), (financial) regulators;
  • outsourcing parties relating to office automation and carrying out investigations under statutory provisions;
  • companies for benchmarking purposes;
  • service providers such as accountants and auditors;
  • our suppliers and business relations;
  • prospective tenants, to schedule viewings;
  • potential buyers, to be able to sell real estate complexes;
  • other parts of Achmea B.V., such as Internal Audit, Risk and Compliance;
  • the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and other regulators where necessary in individual cases.

The same privacy rules apply within the European Economic Area (EEA). The EEA comprises all EU countries plus Liechtenstein, Norway and Iceland. If it is necessary to transfer data to countries outside the EEA, we do so with great care and take appropriate safeguards.

How do we keep your data safe?

Our website and IT systems are well secured. We continuously take technical and organisational measures to prevent misuse of your data. Our employees have also been given clear instructions on how to handle your data. In addition, we make clear agreements with companies that process and use data on our behalf and according to our instructions.

Have you nevertheless discovered a vulnerability in our online services? You can report it via Achmea's Responsible Disclosure. We appreciate you letting us know. That way we can take measures and work together to improve the security of our data and systems.

How long do we keep your data?

We keep your data for as long as we need it to perform an agreement with you or for as long as required by law. After that, we delete your data or anonymise it.

When we anonymise your data, we delete all data that refers to you. The data can then no longer be linked to you. The anonymised data helps us gain a better picture of our risks, products and services.

Your rights

  • request your data from us;
  • have your data changed if it is incorrect;
  • have your data deleted
    • Sometimes we cannot delete your data. For example, because we still need your data, or to comply with the law.
  • object to certain uses of your data
    • You can do this if, for example, you no longer want to receive emails with offers from us. Our emails contain a link you can use to unsubscribe. You can also call us. In other cases, please state clearly why and to what you object.
  • withdraw your consent;
    • Did you give us consent to use your data? Then you may withdraw your consent at a later time. From that moment on, we will no longer use your data.
  • transfer your data;
    • You can ask for your data to be transferred to another party or to yourself.
  • temporarily stop the use of your data.
    • For example, if you believe we do not have the right to use your data.
  • file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Let us know if you want to exercise your rights

Send us an email or a letter. To ensure that we use the data of the right person, we must be able to verify the identity of the person who wants to exercise their rights. We can usually do this using your name, address and place of residence. Please provide these details when you want to exercise your rights. In some cases, for example when the identity cannot be verified using the data we hold, we may ask for a copy of your passport or ID card. We will respond within one month of receiving your message.

Send an email to: [email protected]

You can also send a letter to:

Achmea B.V. (ARE)
Attn. AVG-Loket
P.O. Box 9150
7300 HZ Apeldoorn

Do you have a question, suggestion or complaint?

Send an email to Achmea's Data Protection Officer: [email protected]

You can also send a letter to:

Achmea B.V. (Achmea Real Estate)
Attn. Privacy Manager (Compliance & Operational Risk Management)
P.O. Box 866
3700 AW Zeist

Unable to resolve it together?

You can always submit your complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may change this privacy statement

We may do so, for example, if laws or regulations change or if we develop new products or services.

Last updated: March 2026