Controller
SIA Axxio, Tērbatas iela 32, Rīga, LV-1011, Latvia. Contact: hello@coliving-residences.com.
What we collect
When you contact us or use our chat, we process what you send us: your name, email address and your message. If you apply for a room and become a tenant, we also process the details needed for the rental agreement and for invoicing: your date of birth, nationality, home address, passport number and a copy of your passport, and your bank details for the deposit and the rent. When you visit the site we process limited technical data (such as IP address, device and browser information) and privacy-friendly analytics data.
Why we process your data (legal basis)
We use your data to answer your enquiries and run the chat, to prepare and manage your rental agreement, to operate and secure the website and understand how it is used, and to meet our legal obligations. The legal bases are Article 6(1)(b) GDPR (contract and pre-contract steps), Article 6(1)(f) GDPR (our legitimate interest in running and securing the site) and Article 6(1)(c) GDPR (legal obligations).
Who we share it with
We rely on trusted service providers who act as our processors: our hosting and infrastructure provider (Vercel), our database provider (Neon), our email provider (IONOS), bot protection for the chat (Cloudflare Turnstile) and privacy-friendly, self-hosted analytics (Matomo). Booking links may take you to Airbnb and some pages embed Google Maps; those providers act as their own controllers once you interact with them. We never sell your data.
International transfers
Some providers, such as Vercel, Cloudflare and Google, may process data outside the EU/EEA. Where that happens, the transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep enquiry and chat data only as long as we need it to help you and for a short period afterwards. Applicant and tenant data is kept for the duration of your tenancy and for the retention periods required by law, for example for accounting, and is then deleted.
Analytics
We use privacy-friendly, self-hosted analytics (Matomo) with IP anonymisation to understand how the site is used. It sets no cookies at all and does not sell or share your data.
Cookies
For details on cookies, see our Cookie policy.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing; where processing is based on consent you can withdraw it at any time. To exercise these rights, contact us at the email above. You also have the right to lodge a complaint with a supervisory authority, in Latvia the Data State Inspectorate (Datu valsts inspekcija).