Supplementary privacy notice on tenant screening

Last updated: 02.10.2026

This notice supplements our general privacy policy with regard to the processing of personal data when screening prospective tenants. For everything else (e.g., use of the website and cookies), the general privacy policy applies.

General privacy policy

JB Group GmbH - S.r.l., Pillhofstrasse 17 / Via Pillhof 17, 39057 Eppan a.d.W. - Appiano s.s.d.V. (BZ), Italy. Email: info@verifido.it.

On behalf of landlords and agencies (clients), we check the financial reliability of prospective tenants before a tenancy agreement is concluded.

Retrieval of register data on the screened person and rating - legitimate interest of the client (landlord/agency) in checking the prospective tenant's ability to pay before concluding a tenancy agreement (Art. 6(1)(f) GDPR). The balancing of interests is documented.

Participation of the screened person (details and signed consent) and transfer of the report to the client - consent of the screened person (Art. 6(1)(a) GDPR).

Automated A-E rating - explicit consent of the screened person (Art. 22(2)(c) GDPR); every report is reviewed by a person before release (see section 2.10).

Invoicing and retention for tax purposes - legal obligation (Art. 6(1)(c) GDPR).

Some of the data is not collected from the screened person: name and Codice Fiscale are provided by the client. The check data is retrieved via the service provider OpenAPI S.p.A. (openapi.it) from public Italian registers: protests (unpaid bills of exchange and cheques), pregiudizievoli (e.g., mortgages, attachments, enforcement measures) and insolvency proceedings; depending on the plan, also creditworthiness and affordability details from the data provider's person report (e.g., credit score, employment and income, where available).

Name and Codice Fiscale of the screened person; the check result (register entries found or the data provider's report); the A-E rating; the proof of consent (the signed consent form uploaded by the client, with the details it contains).

How the rating is produced: every query is started by a member of the Verifido team in the internal admin area. Based on the result, the system calculates the rating according to fixed rules. Only the entries found in the registers on protests, pregiudizievoli and insolvency proceedings count; active entries weigh more than cancelled ones. No other personal characteristics are used for the rating.

The levels: A - no entries; B - cancelled entries only; C - one active encumbrance (pregiudizievole); D - one active protest or several active encumbrances; E - an active insolvency proceeding, or active protests together with active encumbrances.

Human review before release: before the report and rating become visible in the customer account, a member of the Verifido team reviews the report and releases it in the internal admin area. Without this release, neither the report nor the rating is available to the client.

The rating is a decision aid. Verifido does not decide on the tenancy agreement; that decision rests solely with the landlord or agency, and the report must not be the only criterion.

The report, the check result and the consent documents are deleted 90 days after the report is delivered.

Order and payment data are kept for tax reasons for up to 10 years.

The report is made available only to the respective client, and only after release in the client's customer account, not by email.

Service providers: OpenAPI S.p.A. (retrieval of register data) | Supabase (database and file storage, servers in Ireland, EU) | Vercel Inc. (hosting, server functions in the Frankfurt am Main region, EU) | Stripe (payment processing) | Aruba S.p.A. (sending order emails). Where required, data processing agreements have been concluded with these providers (Art. 28 GDPR).

Vercel Inc. and Stripe, Inc. are US companies, so a transfer to the USA cannot be ruled out. Such transfers are based on the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR), insofar as the provider is certified under it, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time with effect for the future.

You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 6(1)(f) GDPR), pursuant to Art. 21 GDPR. Regarding the A-E rating, you can express your point of view, request a review by a human and contest it; we will reply within 30 days.

You also have the right to lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali (www.garanteprivacy.it).

Contact: info@verifido.it