Data processing agreement · DPA · last updated 24 June 2026

Data processing agreement.

This is an English translation of the Dutch version, which prevails. This data processing agreement (art. 28 GDPR) forms part of your business subscription. Your business is the controller for the personal data of your buyers and interested parties; Hoobler BV (Puttestraat 111, 3130 Begijnendijk, Belgium) acts as processor and processes that data solely on your instructions.

§1 Subject matter & purpose

What we process, and why.

We process personal data solely to provide the service: managing your properties, dossiers, viewings, bids, messages and the handling through to the notary. This includes, among other things, identification and contact details of buyers/interested parties and the content of their requests. We do not process for our own purposes beyond what is stated here and in our privacy statement.

§2 Instructions

Processing solely on your instructions.

We process the data solely in accordance with your documented instructions (use of the platform counts as an instruction) and as required by law. If we consider that an instruction infringes the GDPR, we report it. Our staff are bound by confidentiality.

§3 Sub-processors

Whom we engage.

To provide the service, we rely on carefully selected sub-processors (including cloud hosting, e-mail delivery and payment/invoicing services), which are contractually bound by equivalent obligations. We provide an up-to-date overview on request via privacy@hoobler.be. Material changes we announce in advance, so that you can object.

§4 Location

Where the data is held.

The data is processed and stored within the European Economic Area. If a sub-processor exceptionally processes outside the EEA, this is done with appropriate safeguards (e.g. standard contractual clauses).

§5 Security

Appropriate technical and organisational measures.

We take appropriate measures to protect the data: encryption in transit, need-to-know access, separated environments, logging and backups. We support you where reasonable with your obligations regarding security, data protection impact assessments and requests from data subjects.

§6 Data breaches

Notification without undue delay.

In the event of a personal data breach, we notify you without undue delay, with the information you need to comply with your duty to notify (art. 33-34 GDPR).

§7 Retention & return

End of the processing.

At the end of the service, we delete the personal data or return it, at your choice, save for a statutory retention obligation. Retention periods are in line with our privacy statement.

§8 Audit & law

Verification and applicable law.

On reasonable request, we make available the information necessary to demonstrate compliance with this agreement, and we cooperate with an audit within reasonable limits. Belgian law applies to this agreement. Questions? privacy@hoobler.be.