Listing photos and personal data after the sale: privacy in order
For a sale instruction the agency photographer shoots dozens of images of the property: exterior, living room, bedroom, children's room, bathroom, garden. After the transaction this imagery often lingers for years on servers, in CRM systems and in backups. Beyond that lies correspondence with sellers, buyers, viewers and notary. This article covers the privacy risks of imagery, the GDPR basis for marketing, and how to properly destroy imagery and personal data after a sale.
Why a listing photo can be personal data
A photo of an empty property for sale looks harmless, but in practice unintended personal data is often in the frame:
- Family photos on the wall.
- Name plates on doors or letterbox.
- Post on the kitchen table (with names and addresses).
- School timetables and children's crafts with names.
- Medical aids, medication boxes.
- Computer and phone screens showing apps or contacts.
A photo that shows family members identifiably is personal data within the meaning of the GDPR. Even without a face in view, a combination of address and detail (name plate, post, vehicle on the driveway) can be traceable to a natural person.
Basis for marketing
To publish photos on Funda, on the agency website and in brochures, a legal basis is required. Sale agreements typically record consent from the selling owner. That consent is specific to the sale period. After the transaction, the purpose falls away: the property is sold, no more advertising takes place.
What does the agent do with the photos after the transaction? May they still appear in the portfolio on the website? In the annual magazine? In training materials? Every reuse requires a valid basis, and once the purpose has elapsed the photo should really go.
Withdrawal of the basis
The seller has the right to withdraw consent. Some agents receive a request to remove photos months or years after the transaction. You then need to clean up not only the website and Funda, but also:
- Local copies on the photographer's workstations.
- RAW files on external drives.
- Cloud backups.
- Prints in brochures and portfolio folders.
The last item, physical material, is often forgotten. Print runs of sale brochures, open-house flyers and reference lists with listing photos that lie in some cupboard fall under the same withdrawal.
What do you destroy after the sale?
Physical material
- Leftover stock of sale brochures.
- Contact sheets and viewing lists.
- Buyer-seller correspondence on paper after the period ends.
- Notes from viewings.
- Photo prints for the window display or office presentation.
Digital material (on media)
- External SSDs of photographers at end of lease.
- Old NAS systems with photo archive.
- USB sticks with viewing route plans.
Digital files on servers are deleted via the internal procedure; on replacement of the medium itself, physical destruction follows under DIN 66399 E-4.
Buyer and seller correspondence
After the transaction there is often a tail of correspondence: complaints about the handover state, questions about moving date, queries about contact details of previous occupants. These letters and emails contain personal data and must, like the rest of the file, be properly destroyed after the retention period (see our article office move: what to destroy).
Destruction standard
For paper material with personal data, DIN 66399 P-5 is the accepted standard. The same applies to photo prints: a photo print with a name plate or face in view is personal data on paper. For data media (SSDs, HDDs) the standard is E-4 and H-4 respectively.
Mobile approach for the estate agency
DeSnipperaar comes with a shredder truck to your office in the Amsterdam-Noord region. Paper and photo prints go straight through the shredder, data media in the same session. The office manager or DPO watches; after the run you receive a certificate that you attach to the processing register. Ideal frequency for most offices: every six months or annually.
Privacy in order after the sales season?
We destroy paper, photo prints and data media on site. DIN 66399 P-5 for paper, E-4 for SSDs. Certificate per job.
Request a quoteDocumentation for the DPA and clients
Include in the processing register: which categories of imagery, which retention, which basis (consent, performance of contract), which destruction route. Keep certificates linked to clean-up rounds. In the event of a GDPR complaint or a seller asking for evidence that files have been deleted, you have something to show.
Sector page
More on privacy and destruction practice for estate agents on Estate agents & valuers. Also read about the retention period for NVM files after the transaction.
Time to close off the sales season? Request a no-obligation quote. We come by, look on and make sure the past truly becomes past.