Data Protection Policy | Urban Campus

Website personal data protection policy

Last updated: 14 September 2026

URBAN CAMPUS GROUP (whose registered office is located at 25 rue du Mail, 75002 Paris, France, registered with the Paris Trade and Companies Register under number 840172670), trading under the trade name Urban Campus (hereinafter, “Urban Campus“, “we” or “us“) attaches great importance to the protection and respect of your privacy and personal data.

The purpose of this Personal Data Protection Policy (hereinafter, the “Policy“) is to explain to you how Urban Campus, the data controller, collects, processes and protects your personal data when you use our website https://urbancampus.com, including its extensions https://booking.urbancampus.com and https://member.urbancampus.com (hereinafter, the “Site“), allow you to book spaces within the residences managed by Urban Campus and to access various services from your member area (the “Services“).

The personal data collected will be processed in accordance with the applicable regulations, and in particular European Regulation 2016/679 of 27 April 2016 (hereinafter, the “GDPR”) and the French law n°78-17 of 6 January 1978 known as the Data Protection Act (together, hereinafter, the “Applicable Regulations“).

1. What is meant by?

“Collect“: refers to the collection of personal data.
“Personal Data“: refers to any information relating to a person who can be identified, directly or indirectly, by reference to one or more elements specific to that person, such as his or her surname, first name, postal or e-mail address, or by reference to an identification number such as a telephone number, an order number or an IP address, etc.
“Data Subject“: refers to the natural person whose personal data is being processed.
“Data Controller“: refers to the natural or legal person, or body which, alone or jointly, determines the purposes and methods of processing.
“Processing“: means any operation or set of operations applied to personal data or sets of personal data, regardless of the process used.
“Processor“: refers to the natural or legal person, or the body that processes personal data on behalf of the Data Controller.

2. What personal data do we process?

Urban Campus may process different categories of personal data about you, depending on your interaction with us (account creation, booking a space, subscribing to a paid subscription, browsing the Sites, contact, etc.).

The personal data collected by Urban Campus includes, in particular:

The data provided when you create your user account: surname, first name, email address, password, date of birth, telephone number, postal address, as well as, optionally, your preferred language of communication, your profession, your interests, your country of origin, the pronouns you identify with, your profile picture, your biography, Instagram handles, LinkedIn, WhatsApp;
Data collected when you take out a subscription and book a space: unique account identifier assigned at the time of booking, information about your user account (described above), profession, school (where applicable), marital status, supporting documents requested at the time of registration, annual income, name of your guarantor and their annual income, information relating to your reservation (room/apartment, services, duration, changes, contracts relating to your previous stays), payment details such as the payment method used, the amount, the date, the invoice number;
Data provided when you create your tenant profile: social networks, biography, photo, gender, preferred name;
Data collected via the contact form, depending on the category of person making the request: name, email address, telephone number, date of birth, profession and marital status;
Data collected when you apply for our job offers from the website of our partner Welcome to the Jungle: surname, first name, email address, postal address, telephone number, professional background, diplomas, certifications, professional experience;
Browsing data collected via the cookies placed on the Sites: IP address, browser type and version, type of device used, networks from which you connect, pages visited, content viewed, time spent on each page, language and country of connection; and
Data collected during third-party evaluations (suppliers, subcontractors, service providers): information relating to the identity of the third party and its representatives, corporate and legal documents, financial information, business references, certifications, results of compliance and reputation checks, evaluation history.

Some Sensitive Data, such as the declaration of a disability, may also be collected, but only when it is necessary to book a space or to adapt the position offered or to comply with a legal obligation. Urban Campus undertakes never to collect Sensitive Data without appropriate justification and without the express consent of the Applicant when this is required.

In any case, we ensure that we collect and process your personal data in a manner that is relevant, adequate, not excessive and strictly necessary to achieve the purposes previously determined.

The processing of employees’ personal data carried out by Urban Campus is described in a separate document.

3. In what contexts do we collect your personal data?

We collect and process some of your personal data when you use our Site. As such, your personal data is collected when you browse the Site, create a user account, complete your profile, book a space, subscribe to a paid subscription, use the Services, contact us via the features provided for this purpose on the Site, or apply for a job offer.

In addition, as part of our commercial relations and, more generally, as part of our activities, we are required to collect and process personal data of our Users, prospects, partners and other external contacts, as well as their representatives, service providers and/or managers, in particular the owners of the buildings in which the spaces we manage are located.

This data may also be transmitted directly to Urban Campus by the data subjects or collected from third parties.

4. Why do we collect and process your personal data?

Urban Campus may process your personal data for various purposes depending on your interaction with us.

If you are a user of the Site, your personal data is collected to:

creating, managing, and authenticating your user account;
Sharing your profile with other users of the Site (by default, your name and apartment number are displayed);
Access to the Services and features offered on the Sites; booking and payment for spaces;
Facilitate the re-entry of residents and the change of rooms/apartments;
Sending confirmations relating to subscriptions or bookings of spaces;
Granting access to the building concerned by your reservation;
Managing your subscriptions, sending payment notifications and maintaining invoices;
Sending notifications and reminders about the steps before and after your move-in;
Sending newsletters relating to Urban Campus’ Services and news, unless you object;
Sending, subject to your prior consent, commercial communications on behalf of Urban Campus or its partners;
Compliance with applicable law, our Terms and Conditions and this Policy;
Information about changes to the Site or Services;
Carrying out analyses and statistics relating to your browsing on the Site (in accordance with our Cookie Policy), or to bookings of spaces;
The management and selection of the applications submitted;
Adapting and improving the Sites according to the devices and browsers used;
Carrying out analyses and statistics on the use of the common areas of residences in order to improve our spaces; as well as the management and selection of the applications submitted.

If you are a customer, a prospect, a partner (in particular a building owner) or an external contact, your personal data is mainly collected for the management of the contractual relationship, the performance of the services entrusted to you, accounting and invoicing, commercial prospecting, and the performance of analyses and statistics. This processing is based on the performance of the contract, compliance with our legal and regulatory obligations, as well as on the legitimate economic interest of Urban Campus.

For this processing, Urban Campus ensures that it only collects the personal data that is strictly necessary for the purpose of the processing in question (principle of data collection minimisation).

5. On what legal basis do we collect and process your personal data?

If you are a user of the Site, the processing of your personal data is based either on your express consent when required (checkbox, click, etc.), the need to perform a contract with you, the execution of pre-contractual measures, compliance with our legal and regulatory obligations and/or our legitimate interest prevailing depending on the purpose of the processing.

If you are a customer, a prospect, a partner (in particular a building owner) or an external contact, the processing of your personal data is based on either the performance of the contract, compliance with our legal and regulatory obligations, as well as on the legitimate economic interest of Urban Campus.

6. Who can access your personal data?

Your personal data is processed by Urban Campus and accessible to our internal teams authorised to process this data for the purposes mentioned above.

In specific cases and to the extent permitted by the Applicable Regulations and where it is necessary depending on the purpose of the processing, we may share your personal data with:

Public authorities, when Urban Campus is required to disclose some of your data in accordance with the Applicable Regulations;
Our technical service providers acting in our name and on our behalf for the purpose of performing the Services offered on the Sites, in particular our payment service provider STRIPE (whose use of data is governed by its own privacy policy accessible at https://stripe.com/fr/privacy), our hosting provider (Google Cloud), as well as our maintenance, database management, accounting, or CRM tools (Hubspot) providers, which are subject to the same security and confidentiality obligations as Urban Campus;
Our subsidiaries to the extent necessary for internal management, administration and provision of services purposes;
Our partner Welcome to the Jungle for job applications;
The owner of the building in which the space you have booked is located;
Other Users of the Sites, who may access certain information in your profile (by default, your name and apartment number); and
Any third party acquiring all or a portion of Urban Campus’ assets in connection with a merger or acquisition and/or a change of control or equity investment by a third party.

In such a case, Urban Campus ensures that the sharing is necessary for the performance of the tasks entrusted by Urban Campus and carried out within the limits of these purposes, providing all appropriate guarantees for the protection of personal data.

7. Transfer of personal data outside the European Economic Area

Given the use by URBAN CAMPUS of certain technical service providers and subcontractors for its activities, some of your personal data may be collected, accessed or stored outside the European Economic Area (hereinafter, the “EEA“).

In all cases, URBAN CAMPUS ensures that the sharing is compliant with the Applicable Regulations, and provides all appropriate guarantees for the protection of personal data, in particular by concluding subcontracting agreements in accordance with Article 46.2(c) of the GDPR.

For any questions regarding transfers of data outside the EEA, or to obtain an extract of the standard contractual clauses we use, please contact us by email at dpo@urbancampus.com.

8. How long do we keep your personal data?

The retention period is variable, it depends on the purposes pursued, the legitimate interests of Urban Campus, and the legal and regulatory obligations applicable to Urban Campus. Urban Campus therefore keeps your personal data for the following periods:

Users’ personal data is kept for the duration of use of the user account and, in any case, for 3 years from the last contact with Urban Campus. Personal data necessary for accounting and invoicing are kept for a total of 10 years to comply with applicable accounting and tax obligations;
Personal data relating to bookings for spaces is kept for the duration of the booking and, in any event, for 3 years from the end of your last booking, in the event that you have taken out a paid subscription on the Site;
The personal data of your personal account in the recruitment area are kept for a period of 2 years from the date of registration;
Personal contact data and response to a job offer are kept for a period of 2 years from the date of receipt by Urban Campus;
The personal data relating to identity documents communicated in the context of the exercise of your rights are kept for a period of 1 year from the date of receipt by Urban Campus;
Personal data relating to third-party evaluations (suppliers, subcontractors, service providers) collected during compliance and reputation checks are retained for a period of 10 years after the termination of the relationship with these third parties;
The bank details you transmit during a payment are deleted once the transaction has been completed and archived by our service provider STRIPE for a maximum period of 13 months from the date of account debit, for evidentiary purposes in the event of a dispute over the payment;
When cookies or other trackers that are not essential to the operation of the Sites are deposited on your device, they are kept for the period indicated in the Cookie Policy.

In any case, we keep your personal data for a period that does not exceed the time necessary for the purposes for which it was collected.

9. What security measures have we adopted?

We make every effort to protect your personal data from damage, loss, misappropriation, intrusion, disclosure, alteration or destruction.

Urban Campus’ IT systems are subject to state-of-the-art physical and software protection. Physical and electronic backup procedures for the data collected on the Site are implemented, in accordance with the French legislation in force relating to the protection of personal data.

Urban Campus employees who, by virtue of their position, have access to your personal data undertake to maintain the utmost confidentiality in this regard.

10. What are your rights?

You have the following rights:

The right of access: You have the right to obtain (i) confirmation as to whether or not personal data concerning you is being processed and, where it is, to obtain (ii) access to such personal data and a copy thereof.
The right to rectification: you have the right to obtain the rectification of your personal data that is inaccurate. You also have the right to have your incomplete personal data completed, including by providing a supplementary statement.
The right to erasure: In some cases, you have the right to obtain the erasure of your personal data. This right is not, however, an absolute right and Urban Campus may have legal or legitimate reasons to retain such personal data.
The right to restriction of processing: in certain cases, you have the right to obtain the restriction of the processing of your personal data.
The right to portability: you have the right to receive the personal data you have provided to Urban Campus in a structured, commonly used and machine-readable format, and you have the right to transmit such personal data to another data controller without hindrance from Urban Campus. This right only applies if the processing of your personal data is based on your consent or on the performance of a contract and such processing is carried out by automated means.
The right to object: you have the right to object at any time, for reasons relating to your particular situation, to the processing of your personal data when such processing is based on the legitimate interest of Urban Campus. Urban Campus may, however, invoke legitimate and compelling reasons requiring the continuation of the processing. If your personal data is processed for direct marketing purposes, you have the right to object to the processing of such personal data at any time.
The right to lodge a complaint with a supervisory authority: you have the right to contact the CNIL in order to lodge a complaint concerning Urban Campus’ practices relating to the protection of personal data.
The right to provide instructions regarding the use of your personal data after your death: You have the right to give Urban Campus instructions regarding the use of your personal data after your death.

To exercise these rights, you can send your request by post to URBAN CAMPUS GROUP, 25 rue du Mail, 75002 Paris, France, or by email to dpo@urbancampus.com.

11. Changes to this Policy

If we decide to change this Policy, we will post the changes on this page and/or update the date the Policy was modified above.