Data protection policy

KLEY undertakes to respect the confidentiality of your data and has updated its policy in this respect in accordance with regulation no. 2016/679 of the 27 April 2016, called the general data protection regulation (GDPR).

This personal data protection policy sets out in detail the way that KLEY processes and protects your personal data and informs you of your rights. All data shall be processed and protected in accordance with the existing laws on data protection, this including the GDPR, data protection act no. 78-17 of the 6 January 1978, the guiding principles relating to the application of article 82 of the law of the 6 January 1978 on “cookies and other plotters”, as well as all guiding principles, recommendations and systems of reference published by the CNIL and the CEPD.

We may modify this data protection policy from time to time to comply with the new laws and regulations or the evolution of interpretations. We invite you to regularly consult this page to keep informed of the updates that we are likely to make.

The processing manager is the one that defines for what use and how your personal data are used.
The personal data collected on the KLEY website and mobile application are processed by:

• KLEY, a simplified joint stock company, registered with the Trade and companies register of Nanterre under the number 803 724 699, domiciled 38 rue Jacques Ibert, 92300 in LEVALLOIS-PERRET

Our data protection representative is Maître Pierre-Louis ROUYER, domiciled at 38 avenue Hoche in Paris (75008) and whose email address is the following [email protected].

To find out more about the data protection representative’s missions on the CNIL website.

KLEY collects personal data concerning users of the kley.fr website and the KLEY application (Android and IPhone), below the “Platform”

These data are necessary for concluding and correctly managing your rental agreement. Providing your personal data thus determines the supply of services proposed by KLEY among others.

• Data concerning the tenants
- surname and first names;
- Marital status;
- nationality;
- date of birth;
- place of birth;
- language of preference;
- login names;
- IP address;
- email address;
- postal address;
- URL referrer;
- the type of accommodation desired and chosen;
- telephone number;
- the start date desired;
- the length of stay desired;
- the training undertaken and the current year of study;
- if the tenant has a grant;
- if the tenant is an employee;
- if the tenant has a guarantor and how much does he/she have.

• Data concerning the guarantors
- surname and first names;
- Marital status;
- nationality;
- date of birth;
- telephone number;
- login names;
- IP address;
- email address;
- postal address;
- URL referrer;
- the professional situation (social-professional category);
- Name of the guarantor organisation.

Data concerning the end users, namely the users having made a reservation request, are collected on the basis of their consent.
In addition to data collected for Platform users, the subscription of a rental agreement imposes the collection of additional data, necessary for studying reservation requests:

• Data concerning the tenants;
- Bank data;
- Identification data;
- Data concerning the university education.

• Data concerning the guarantors;
- Identification data;
- Data relating to the professional situation and remuneration;
- Data relating to the land situation.

We use the information collected to give users an online experience best adapted to their student accommodation wishes and searches.

The exact purposes (or objectives for processing your data) for which we use your information are the following:
- to manage the website;
- to supply third parties with statistical information on our users (but this information will not be used to identify individual users);
- to process requests and complaints made by or about yourself in connection with the website.

- administrer le site ;
- fournir à des tiers des informations statistiques sur nos utilisateurs (mais ces informations ne seront pas utilisées pour identifier des utilisateurs individuels) ;
- traiter les demandes et les plaintes faites par ou sur vous-même en lien avec le site.

The types of cookies used on most website generally belong to one of the following categories: necessary, analytical, functional, advertising and social network cookies.
KLEY uses cookies from its different categories in order to provide users with the best browsing experience possible.
To consult all of our cookies, you can access them here.

The table below sets out in detail the cookies from each category that KLEY uses.

The saving of cookies used by KLEY on your browsing terminal is subject to your wishes: you can modify your choices involving the acceptance or refusal or the archiving of cookies on your terminal at any time, either on your browser or online with the different operators.
KLEY has put a tool in place so you can parameterise your choices depending on the pursued purposes.

Click here to modify your preferences regarding cookies.
Cliquez-ici pour modifier vos préférences en matière de cookies.

For more information relating to the management of cookies, we invite you to consult the page dedicated to this purpose.

1. Retention period

KLEY retains your personal data collected in the framework of carrying out the processing relating to the rental management. The retention period established differs according to the pursued purpose and the stage of the contractual relationship.
• Data processed for the purposes of prospecting are retained for three years from the last contact with KLEY.
• Data collected in the framework of the assessment of your solvency are retained for three months in an active database.
• KLEY also retains your personal data in an active database throughout the duration of the contractual relationship, and five years in the intermediary archives from the closing of your accounts.
• Data collective in the framework of the termination of the agreement are also likely to be consulted by us if needs be (reduction of the notice, solidarity).

2. Security

Your personal data are retained in accordance with the strictest security and encryption standards. In accordance with the GDPR, KLEY undertakes to retain the data collected from users only for the time needed to accomplish the purposes of the processing. At the end of the processing, the data collected will be destroyed or archived.

The processing carried out by KLEY is not intended to be the subject of a personal data transfer outside of the European Union.
However, if such was the case, KLEY undertakes to respect all of its obligations in the matter, including notably:
- ensuring that the transfer is carried out towards a third country subject to an adequacy decision;
- ensuring that the transfer is carried out by means of appropriate guarantees (including notably via data protection type clauses adopted by the Commission or by a supervisory authority approved by the Commission).

No sensitive data, namely any data revealing the racial or ethnic origin, political opinions, religious and philosophical beliefs, the belonging to a trade union, genetic, biometric data, concerning the health or sex life or sexual orientation of a natural person is processed by KLEY in the framework of the reservation request.

The filing of an online complaint is accessible here.

KLEY works with two subcontractors:

Salesforce et Ad Presence.