Personal data you can account for

Managing a building means managing personal data: member names, email addresses, visitors, access logs. Doory supports this with versioned privacy statements, consent records, access and erasure requests (DSAR) and an automatic retention policy.

Why this is more than a statement on your website

The GDPR (AVG in Dutch) doesn't only ask you to explain what you do. It also asks you to be able to demonstrate it, and not to keep data longer than necessary. In practice, that is where things get stuck. The privacy statement sits on the website as a PDF, consents are recorded nowhere, and data from 2019 is still there because nobody cleans up.

What Doory supports

Versioned privacy statements. As with the terms and conditions, each version gets an effective date, and Doory records who saw which version.

Consent records. Wherever someone gives consent, for example when invited as a member or at a public checkout, Doory records what was accepted and when.

Access and erasure requests. If someone asks which data you hold about them, or asks for it to be deleted, there is a route for handling that. It is an obligation with a deadline, and without a tool it means searching four systems by hand.

Automatic retention policy. You set how long you keep data, for example visitor registrations and access logs, and Doory cleans up after that.

What you need to decide yourself

The retention periods and the legal bases. How long you keep access data and why, how long you keep visitor data, and what you do with the email correspondence from the mailbox sync. Those are choices for your organisation, and they are exactly the choices you will be asked about during an audit.

Discuss access logs and mail sync with your team and with your tenants. A lot is technically possible, and that is exactly why it is better to agree in advance what you will and won't use.

Where the product stops

Doory is not a lawyer and not a data protection officer. It does not draft a privacy statement for you, and it does not assess whether your legal bases are correct. What Doory does is make it possible to record, demonstrate and clean up.