Ask for useful evidence and handle it with care

Checking an applicant should help establish the proposed letting and whether its practical commitments are workable. It should not become an unlimited request for identity, financial and personal information. The questions, evidence and people receiving it need a clear purpose.

This guide helps owners, applicants and managers organise a proportionate process for a Spanish rental. It does not assess an individual's application, prescribe an income multiple or provide a complete data-protection policy. Obtain appropriate advice about the actual processing, legal basis and circumstances rather than collecting everything just in case.

Explain the proposed arrangement first

Identify the home, intended occupation, relevant dates, rent and other understood obligations. An applicant needs enough accurate information to decide whether to proceed, while the owner needs a truthful account of the proposed use.

Use the tenancy-agreement guide and temporary-rental guide where relevant. A temporary cause or other important fact should be real and appropriately evidenced rather than created to fit a preferred form.

Keep legal classification separate from a screening score. A commercial approval process does not determine which tenancy protections apply or establish that every requested document is necessary.

Identify who is requesting the information

Ask for the landlord, manager or business receiving the application and their role. Establish the relevant contact and privacy information before submitting sensitive records. A person arranging a viewing is not automatically entitled to a full financial file.

The rental-scams guide explains why convincing advertisements and contact details need checking. Identity theft can matter even where no rent or deposit has yet been paid.

If several intermediaries are involved, ask who needs which information and why. Avoid forwarding the same complete document set to every contact merely because all are involved in finding a home.

Apply data minimisation to the actual purpose

Article 5 of the GDPR on EUR-Lex states that data should be:

“adequate, relevant and limited to what is necessary” — GDPR, article 5(1)(c).

Use that principle to ask what a document is meant to establish and whether a less intrusive approach is suitable. Identification, evidence of financial capacity and administration of an agreed tenancy are different purposes that should be explained.

Do not assume a blanket consent form makes every collection lawful. The appropriate basis, transparency, recipients and safeguards need assessment for the actual process and the organisation handling it.

Stage the checks instead of collecting everything immediately

Ask what is needed for an initial enquiry, a serious application and the final agreement. A staged process can avoid unnecessary circulation of detailed records where an applicant is only checking availability.

Where evidence is requested, clarify the relevant period and fields. Ask about a suitable way to obscure unrelated information if appropriate, while ensuring the evidence supplied remains truthful and adequate for the stated purpose.

Do not alter a document in a misleading way or submit false information. An applicant can question the need for a request and seek a proportionate alternative without fabricating the facts a landlord is legitimately trying to establish.

Assess financial information fairly and carefully

Explain the actual rent and other commitments before discussing evidence of affordability. Income can come from different sources and circumstances, so do not assume one standard employment document describes every suitable applicant.

This guide provides no universal income-to-rent ratio or guaranteed screening result. A reference or commercial score is one input whose scope, accuracy and limitations need understanding, not proof that future rent will always be paid.

Keep the process relevant to legitimate tenancy considerations and applicable law. If a proposed selection criterion raises discrimination or other legal concerns, obtain appropriate advice rather than treating a common market practice as automatically acceptable.

Check references through an appropriate route

Ask what a reference is intended to confirm and how contact will be made. Keep the enquiry proportionate and accurate. A familiar logo or an email supplied by an applicant should not be treated as independently verified evidence without suitable checks.

If using a screening or management service, establish its role, information sources and reporting. Ask how an applicant can raise an error and how the owner distinguishes confirmed facts from an unresolved concern.

Read choosing a property manager when another business runs the process. Outsourcing administration does not make the purpose, recipients or responsibility for personal information disappear.

Use secure channels and controlled access

Agree a verified submission route rather than collecting sensitive records through widely shared groups. Limit access to people who need the information for their defined role and keep a clear record of significant disclosures.

If a request changes unexpectedly, verify it using known contact details. Do not send a passport or financial file merely because a message contains the correct property address or appears in an existing conversation.

Ask the organisation about its practical security arrangements. A privacy notice is useful information, but the handling process also needs to match what it says about storage, access and sharing.

Do not confuse tenancy checks with guest reporting

A tourism operator's separate reporting obligations should not be copied into an ordinary tenancy application without considering whether they apply. Different activities can have different lawful purposes and information requirements.

The holiday-rental guide identifies the wider operational questions. Obtain advice about the actual use before assuming a guest-registration checklist justifies every document request from a prospective residential tenant.

Likewise, evidence supporting a genuine temporary housing cause should be matched to that purpose. It should not become a reason to collect unrelated personal history or retain an applicant's records indefinitely.

Respect privacy after the person moves in

The Spanish Data Protection Agency's rented-home camera guidance rejects indoor camera monitoring by an owner in the circumstances it addresses. Rented space forms part of the occupant's private life.

Do not treat a signed tenancy as unlimited consent to monitoring, photography or entry. Arrange inspections and maintenance through appropriate, lawful processes and record the actual need for access.

The inventory guide and repair guide show how evidence can be collected for a defined task without turning ordinary management into unrestricted observation.

Decide retention and deletion deliberately

Identify which records are needed for unsuccessful applications, an active tenancy, legal duties or an actual dispute. Different purposes can justify different handling and retention, so avoid a single rule that everything is kept forever.

The GDPR principles include purpose, storage limitation and security. Ask advisers to define an appropriate policy and safeguards for the actual file. This guide does not invent a universal number of years for every document.

If information is retained for a legitimate continuing reason, restrict its use accordingly. An ended application should not silently become a marketing list or a widely shared database of personal details.

Give applicants a clear contact for questions

Explain whom to contact about the request, an alleged error or a data-protection concern. If another provider handles the information, identify the relevant route rather than sending the applicant between businesses with no clear responsibility.

Keep requests and responses accurate and avoid disclosing one applicant's information to another. Where a complaint or rights request arises, use the applicable process and obtain advice about the required response.

Use the landlord-records guide to keep administrative evidence secure. The strongest application process collects the information genuinely needed, explains its purpose and handles it in a way the parties can understand and check.