At STUDAPART, respecting your privacy and protecting your personal data is our priority.
This privacy policy (hereinafter the "Privacy Policy") aims to inform you, as a Tenant or Landlord, of the methods for processing your personal data when using the website https://www.studapart.com/en (the "Site") and the STUDAPART platform accessible at http://reservation.studapart.com (the "Platform") in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR") and Law No. 78-17 of 6 January 1978 relating to information technology, files and liberties in its latest version in force (together the "Applicable Regulations").
This Privacy Policy does not describe the methods for collecting and processing your data via cookies and other trackers ("Cookies") on the Site and the Platform. For more information, please consult our Cookies Policy (see bottom of the document).
It is specified that the terms Tenant and Landlord have the same meaning as given to them in the Platform's General Terms and Conditions of Use.
1. Who is the data controller?
During your navigation and/or registration on our Platform or, more generally, within the framework of managing our contractual relationship with you, the data controller within the meaning of Article 4, para. 1, no. 7 of the GDPR is STUDAPART, a simplified joint-stock company, registered in the Paris Trade and Companies Register under no. 790 562 813 and whose head office is located at 251 Rue Saint-Martin – 75003 Paris ("We", "Us", "Our").
On the other hand, when our services are used by partner institutions (third-party platforms, establishments, universities, schools, etc.) to disseminate rental offers on their sites and networks, we collect and process personal data in their name and on their behalf. Our partner institutions are therefore data controllers, and We act as a processor within the meaning of Article 28 of the GDPR.
2. What data do we collect?
Personal data is information that allows an individual to be identified directly or by cross-referencing with other data. Depending on the service requested, we collect personal data falling into the following categories:
### Identification data:
**From the Tenant and their guarantor:**
Title, surname, first name (mandatory)
Phone number (mandatory)
Email address (mandatory)
Postal address
Date of birth
Photocopy of identity card, passport, or residence permit
Copy of student card or certificate of enrollment
Scholarship certificate (if applicable)
Data on your current housing expectations/searches with us (search criteria, location preferences, budget, entry and exit dates, length of stay, type of housing sought, desired amenities)
**From the Landlord:**
Title, surname, first name
Email address
Phone number
Data relating to your housing and rental conditions (address of the property, type of housing, surface area, number of rooms, equipment, rental conditions, photos of the housing)
### Data relating to your professional life and/or that of your guarantor:
Company/employer name
Position/job title
Sector of activity
Type of employment contract (permanent, fixed-term, internship, etc.)
Employment start date
Proof of employment (certificates, work references)
CV (if provided)
### Economic and financial data of the Tenant and/or the guarantor:
Net income amount
Family allowance amount
Amount of other income (with description)
Housing type (owner/tenant)
Loan repayment amount (if owner)
Housing acquisition date (if owner)
Rent amount
Bank details (RIB) and account information
Pay slips (3 most recent)
Tax notices (income tax notice)
Rent receipts
Proof of address
Bank guarantee certificates
Credit card data (for payments)
### Connection data:
Connection logs (date, time, IP address)
Encrypted passwords
Connection history
**If you choose to log in using a third-party authentication service (e.g., Google or Facebook): certain data such as your name and email may be retrieved from this service. By choosing this method, you agree that said service communicates this data to us. We do not collect the password for your third-party account.**
### Browsing data:
IP address
Pages visited
Date and time of connection
Browser used and version
Operating system
User Agent
Unique user identifier
Geolocation data (if authorized)
Cookies and similar technologies
Session data
Referrer (originating page)
UTM data (source, campaign, medium)
### Communication data:
Messages exchanged via our messaging platform
Content of conversations (with automatic translation into French, English, and Chinese)
Files attached to messages
Communication history
Message metadata (date, time, participants)
### Contact data:
Any information you wish to transmit to us as part of your contact request
Contact messages via our forms
Communication preferences (SMS marketing, emails)
### Profile and preference data:
Housing search preferences
Configured alerts
Search history
Filtering criteria used
Scoring and evaluation data
3. Details on the processing of your personal data
Purposes | Legal Basis | Retention Periods |
Providing our matching services between Real Estate Owners (Landlords) and Tenants looking for accommodation, available on our Site and our Platform via your account. | Execution of Our General Terms and Conditions of Use (Art. 6, para. 1, point b) GDPR) | When you have created an account: your data is kept for the entire duration of your account. In case of account inactivity for 3 years, your personal data will be deleted if you do not respond to our reactivation email. Furthermore, your data may be archived for evidentiary purposes for 5 years. |
Ensuring the follow-up of the contractual relationship with our customers. | Execution of Our General Terms and Conditions of Use (Art. 6, para. 1, point b) GDPR) | Personal data is retained for the entire duration of the contractual relationship. Furthermore, your data (with the exception of your bank details) is archived for evidentiary purposes for a period of 5 years. Regarding your credit card data, it is retained by our payment service provider for the entire duration of your browsing and access to the Platform. Data relating to the card verification value or CVV2, printed on your credit card, is not stored. |
Analyzing your use of the services, understanding your expectations, and improving the features offered (notably by analyzing exchanges or compiling browsing and audience statistics for the Site and the Platform). | Our legitimate interest in improving our services (Art. 6, para. 1, point f) of the GDPR) | Personal data is retained for 3 years. Once anonymized, your data is no longer considered personal data because no re-identification is possible. |
Preventing bypass of the Platform, protecting against and fighting online fraud, protecting users, and ensuring the integrity of our services (notably, if necessary, through the analysis of communications exchanged on the messaging system). | Execution of Our General Terms and Conditions of Use | Personal data is retained for the entire duration of the contractual relationship. In the context of fighting fraud and bypass, proof of breaches of the General Terms and Conditions of Use may be archived for a period of 5 years for evidentiary purposes. |
Managing your reviews of our services. | Our legitimate interest in collecting your opinion on our services (Art. 6, para. 1, point f) of the GDPR) | 2 years from the publication of the review. |
Building a prospect file. | Our legitimate interest in developing and promoting our activity (Art. 6, para. 1, point f) GDPR) | Your data is retained for a period of 3 years from your last contact with us. |
Sending newsletters and promotional messages by email. | For customers: our legitimate interest in building customer loyalty and informing our customers of our latest news (Art. 6, para. 1, point f) of the GDPR). For prospects: • Individuals: your consent (Art. 6, para. 1, point a) of the GDPR). • Professionals: our legitimate interest in building loyalty and informing our clients and prospects of our latest news (Art. 6, para. 1, point f) of the GDPR). | Data is retained for a maximum period of 3 years from your last contact with us or, if you are a professional, until the withdrawal of your consent. |
Responding to your requests for information, contact, and/or demonstration via a third-party tool (Intercom). | The execution of pre-contractual measures taken at your request (Art. 6, para. 1, point b) of the GDPR) | Data is retained for a period of 3 years from your last contact. |
Retaining administrative information and documents related to our business activity. | Complying with our legal and regulatory obligations (Art. 6, para. 1, point c) of the GDPR) | Invoices are archived for a period of 10 years. If you are a professional: Data relating to your contract and elements relating to the signing of the contract are retained for 5 years. If you are an individual: Data relating to your contract and elements relating to the signing of the contract are retained for 10 years from the conclusion of the contract. |
Organizing contests / prize draws. | Execution of the contract (i.e., the contest rules previously accepted before participating) (Art. 6, para. 1, point b) of the GDPR) | Data is retained for the entire duration of the games or promotional operations and may be archived for 5 years for evidentiary purposes. |
Responding to requests to exercise rights by the data subjects. | Complying with our legal and regulatory obligations (Art. 6, para. 1, point c) of the GDPR) | If we request proof of identity: we retain it only for the time necessary to verify your identity. Once the verification is complete, the proof of identity is deleted. As a professional, if you exercise your right to object to receiving prospecting: we retain this information for 3 years. |
4. Who are the recipients of your data?
The following will have access to your personal data:
(i) The personnel of our company and the parent company HousingAnywhere B.V.;
(ii) Our processors within the meaning of Art. 28 GDPR: hosting provider, newsletter delivery provider, audience measurement and analysis provider, email service provider, secure payment provider, generative artificial intelligence and predictive statistics tools (notably to analyze Platform usage data in order to optimize the management of housing availability and rental periods, as well as to ensure platform security and prevent and avoid fraud), billing tool, customer relationship management (CRM) tool (notably to provide technical support), internal project management tool, cookie management tool, commercial prospecting tool, and external consultants;
(iii) Our partners acting as independent data controllers. We decline any responsibility regarding the processing of personal data carried out by our partners and invite you to consult their general terms and conditions of use as well as their privacy policy;
(iv) Any authority legally entitled to access such data, in particular judicial, police, or administrative authorities, if they so request.
5. Is your data likely to be transferred outside the European Union?
Your data is kept and stored for the entire duration of the processing on Google's servers, located within the European Union.
Within the framework of the tools we use (see the article on recipients regarding our processors), your data may be subject to transfers outside the European Union. The transfer of your data in this context is secured by means of the following tools:
Either the data is transferred to a country that is the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, this country ensures a level of protection deemed sufficient and adequate to the provisions of the GDPR;
Or the data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards as indicated in Article 46 of the GDPR, adapted to each provider, including but not limited to the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules, or under an approved certification mechanism;
Or the data is transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.
You can obtain a copy of the tools allowing the transfer of your data outside the European Union by contacting us at the contact details indicated in the article "What are your rights regarding your data?" below.
6. What are your rights regarding your data?
You have the following rights regarding your personal data:
Right to information: This is exactly why we have drafted this Privacy Policy. This right is provided for in Articles 13 and 14 of the GDPR.
Right of access: You have the right to access all your personal data at any time, pursuant to Article 15 of the GDPR.
Right to rectification: You have the right to rectify inaccurate, incomplete, or obsolete personal data at any time in accordance with Article 16 of the GDPR.
Right to restriction of processing: You have the right to obtain the restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
Right to erasure (Right to be forgotten): You have the right to demand that your personal data be erased, and to prohibit any future collection for the reasons set out in Article 17 of the GDPR.
Right to define directives relating to the storage, erasure, and communication of your personal data after your death.
Right to withdraw your consent at any time: For purposes based on consent, Article 7 of the GDPR states that you may withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
Right to portability: Under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request its transfer to the recipient of your choice.
Right to object: Pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue processing despite this objection for legitimate reasons or the defense of legal claims.
You can exercise these rights by writing to us at the following addresses:
By email: DPO@studapart.com
By post: STUDAPART, 251 Rue Saint-Martin – 75003 PARIS
On this occasion, we may ask you to provide additional information in case of reasonable doubt, or even any document capable of proving your identity if the doubt persists.
We will respond to you within a maximum of one month from the date of receipt of your request. This period may, however, be extended by two months due to the complexity and number of requests received. In this case, we will inform you within one month of receipt of the request, specifying the reasons for the extension.
For any question or request that remains unsuccessful, you have the right to lodge a complaint with the competent supervisory authority, in France, the Commission Nationale de l'Informatique et des Libertés ("CNIL"), located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
7. Modifications
We may modify this Privacy Policy at any time, in particular to comply with any regulatory, jurisprudential, editorial, or technical developments. These modifications will apply as of the effective date of the modified version. You are therefore invited to regularly consult the latest version of this policy. Nevertheless, we will keep you informed of any significant changes to this Privacy Policy.
Effective date: May 18, 2026.
Cookies Policy
When using the website https://www.studapart.com/en (the "Site") or our STUDAPART platform accessible at http://reservation.studapart.com (the "Platform"), cookies, pixels, and other trackers (hereinafter collectively referred to as the "Cookie" or "Cookies") are placed on your browser or your device.
1. What is a Cookie?
A Cookie is a small, often encrypted file stored in your browser or device and identified by a name. It is placed when consulting a website or an application. Each time you return to the site or application in question, the Cookie is retrieved from your browser or device. Thus, each time you consult the site or application, the browser is recognized.
The placement of these Cookies may allow us to access your browsing data and personal data concerning you.
2. Identification of Cookies
We use different types of Cookies listed below, whose characteristics and purposes are detailed in the table below.
> Technical and functional Cookies
Technical and functional Cookies are necessary for the proper functioning of the Site and the Platform and to provide you with our services. They are used throughout your navigation to facilitate and execute certain functions.
A technical Cookie can, for example, be used to remember your responses filled in a form or your preferences regarding the language or presentation of the Site and the Platform, when such options are available.
> Advertising Cookies
Advertising Cookies may be created not only by our Site and our Platform but also by other websites and applications displaying advertisements, announcements, widgets, or other elements on the displayed page.
These Cookies can notably be used to personalize and measure the effectiveness of advertising or to carry out advertising targeting.
> Content Personalization Cookies
Content personalization Cookies allow us to offer you the content most likely to correspond to your interests based on your browsing profile.
> Social Media Cookies
Social media Cookies allow you to share content from our Site and our Platform on social networks and to make your opinion or your consultation of our services known on these networks, notably by clicking on "like" and "share" links.
These Cookies may also allow for the tracking of users' navigation on the Site and the Platform.
We invite you to consult the privacy policies of the social networks that originate these Cookies to learn about the purposes of use of the navigation information they may collect through these Cookies and the methods for exercising your rights with these social networks.
> Audience Measurement Cookies
These Cookies, also called "analytical cookies," allow us to measure the number of visits, the number of page views, and user activity. They may, if necessary, collect your IP address to determine the city from which you are connecting. Audience measurement Cookies allow us to generate attendance and navigation statistics for our Site and our Platform in order to improve our performance. The Cookies used also make it possible to identify navigation problems and, ultimately, to resolve them.
List of Cookies used:
Cookie name | Readable Name | Vendor | Purpose | Retention period |
ga# | Google Analytics Identifier | Audience measurement (GA4 - 13 months GDPR) | 13 months | |
fstrz_vary | Fasterize Cookie (performance optimization) | Technical | 1 year | |
event_id | GA4 Event Identifier | Audience measurement | Session only | |
_gcl_au | Google Ads Conversion Cookie | Advertising | 3 months | |
_schn1 | Snapchat Pixel Identifier | Technical | 3 minutes | |
_scid_r | Technical cookie _scid_r | Audience measurement | 13 months | |
u_sclid_r | Technical cookie u_sclid_r | Technical | Session only | |
u_scsid_r | Technical cookie u_scsid_r | Technical | Session only | |
_rdt_uuid | Technical cookie _rdt_uuid | Technical | Session only | |
_ga | Google Analytics Identifier | Audience measurement (GA4 - 13 months GDPR) | 13 months | |
_uetsid | Technical cookie _uetsid | Technical | Session only | |
_uetsid_exp | Technical cookie _uetsid_exp | Technical | Session only | |
_uetvid | Technical cookie _uetvid | Technical | Session only | |
_uetvid_exp | Technical cookie _uetvid_exp | Technical | Session only | |
alb.reddit.com_/rp.gif | Reddit technical cookie | Social networks | Session only | |
hjSessionUser# | Hotjar Cookie (UX) | Audience measurement | 1 year | |
_screload | Technical cookie _screload | Technical | Session only | |
tt_pixel_session_index | TikTok Pixel Identifier | Technical | Session only | |
Google technical cookie | Google Advertising Products | Advertising | Session only | |
_tt_enable_cookie | TikTok technical cookie | Advertising | 3 months | |
Google technical cookie | Google Advertising Products | Advertising | Session only | |
_ttp | TikTok technical cookie | Advertising | 3 months | |
ttcsid_C19M0K3QIA5GK7IN1T7G | TikTok technical cookie | Advertising | 3 months | |
ttcsid | TikTok technical cookie | Advertising | 3 months | |
FPID | FreshPaint Analytics Cookie | Technical | 2 years | |
bcookie | LinkedIn technical cookie | LinkedIn Ireland Unlimited Company | Social networks | 1 year |
FPAU | FreshPaint Analytics Cookie | Technical | 3 months | |
_scid | Snapchat technical cookie | Audience measurement | 1 year | |
_fbp | Meta Identifier (Facebook Pixel) | Advertising | 3 months | |
isConnected | Technical cookie isConnected | Technical | Session only | |
frz_referrer_unique_id | Fasterize technical cookie | Technical | 20 seconds | |
NRBA_SESSION | Technical cookie NRBA_SESSION | Technical | Session only | |
intercom-test | Intercom technical cookie | Technical | Session only | |
intercom.intercom-state-eb7u8dz1 | Intercom technical cookie | Technical | Session only | |
intercom-id-eb7u8dz1 | Intercom technical identifier | Technical | 9 months | |
intercom-session-eb7u8dz1 | Intercom session cookie | Technical | 7 days | |
intercom-device-id-eb7u8dz1 | Intercom device identifier | Technical | 9 months | |
jL58b2Ld2Fedxaln | Technical cookie jL58b2Ld2Fedxaln | Technical | Session only | |
studa_iab | Technical cookie studa_iab | Technical | 1 year | |
studa | Technical cookie studa | Technical | 1 year | |
u_sclid | Technical cookie u_sclid | Technical | Session only | |
u_scsid | Technical cookie u_scsid | Technical | Session only | |
hjSession# | Hotjar Cookie (UX) | Audience measurement | 30 minutes | |
tt_sessionId | TikTok Pixel Identifier | Technical | Session only | |
tt_appInfo | TikTok Pixel Identifier | Technical | Session only | |
_ScCbts | Technical cookie _ScCbts | Technical | 7 days | |
tt_pixel_is_enrich_ipv6_triggered_by | TikTok Pixel Identifier | Technical | Session only | |
_gcl_ls | Google Ads Conversion Cookie | Advertising | Session only | |
PHPSESSID | Technical cookie PHPSESSID | Technical | 15 days | |
X-AB | Technical cookie X-AB | Technical | 1 day | |
sc_at | Snapchat Pixel Identifier | Social networks | 13 months | |
li_gc | LinkedIn technical cookie | LinkedIn Ireland Unlimited Company | Social networks | 6 months |
lidc | LinkedIn technical cookie | LinkedIn Ireland Unlimited Company | Social networks | 1 day |
MUID | Microsoft Ads Identifier | Microsoft Advertising | Advertising | 13 months |
MSPTC | Microsoft Ads Identifier | Microsoft Advertising | Advertising | 13 months |
test_cookie | Google DoubleClick Advertising Cookie | Google Advertising Products | Advertising | 15 minutes |
FPLC | FreshPaint Analytics Cookie | Technical | 20 hours | |
IDE | Google DoubleClick Advertising Cookie | Google Advertising Products | Advertising | 13 months |
3. Your Cookie Preferences
> Cookies that can be deposited without consent
Certain Cookies do not require your consent, specifically:
Technical and functional Cookies that are necessary for the operation of the Site and the Platform;
Certain audience measurement Cookies or Cookies that allow for testing different versions of the Site and the Platform for the purpose of optimizing editorial choices.
> Acceptance or refusal of Cookies subject to your express consent
All other Cookies require your consent. These include advertising, social media, content personalization Cookies, and certain audience measurement Cookies. You can freely choose to accept or refuse the use of these Cookies.
You can accept or refuse these Cookies during your first visit to the Site or your first consultation of the Platform.
Your choices to accept or refuse Cookies will be stored for a period of six (6) months.
You are free to withdraw your consent and, more generally, to modify your preferences at any time via the following link.
> Your browser settings
It is also possible to configure your browser to accept or refuse certain Cookies.
Each browser offers different configuration methods.