shares only what is needed for personal insight
Privacy & governance
Privacy boundaries in practice
Huursterk deliberately uses the term confidential towards the employer. The app is designed to keep identity, Housing Security Check content, expert access and employer reporting separate.
Data minimisation
Pseudonymous and data-minimised where possible
A name and email address are not substantively needed to complete the Housing Security Check, calculate personal feedback or prepare group insight. Identity, contact data and Housing Security Check content are therefore processed separately.
separates identity from signals
discusses uncertainty only with the employee
HR sees trends, no answers or files
Housing Security Check answers, scores and status are linked to a participant ID, not to a normal participant list with names.
Contact data is used only for access, automated messages and appointment confirmations. Operational screens do not show it by default.
An expert only receives the necessary Housing Security Check summary after explicit consent for a check-in. Support access to contact data is exceptional and purpose-bound.
Employer sees
- Aggregated domain scores, only from 20 unique participants.
- Top themes and trends per cohort or measurement round, only above threshold.
- With low response: reach diagnosis with process data and hypotheses, no substantive housing-stress data.
Employer never sees
- Individual answers, scores or risk categories.
- Names, email addresses, phone numbers or participation data.
- Conversation content, uploaded documents, free text or check-in request status.
- Below the reporting threshold, no exact counts or segment information either.
Roles
Roles are separated
Privacy is not just a written promise. Operational roles have different access paths.
Manages companies, pilots, settings and report snapshots. No route to individual Housing Security Check results.
Sees assigned check-ins only and only sees the necessary Housing Security Check summary after explicit ExpertConsent.
Sees only group insight for their own company, above threshold.
Sees their own Housing Security Check result, contact preferences and consent status.
GDPR compliance is an organisational process state. We describe concretely what is implemented technically and procedurally, which GDPR principles are applied and which responsibilities remain with the employer.