Privacy Policy

What personal data do we collect, and how?

Personal data needed to use the housing matching functionalities of the PATHS Platform

IOM may collect personal information about you when you use the PATHS Platform to register (for) a housing listing. The following categories of personal data are required:

For individuals seeking housing: 

1. Profiles of tenants

   • Name and contact details (email address, phone number) 

   • Demographic information relevant to housing: household size, age, gender composition 

   • Household composition 

   • Financial/professional situation (for the household’s primary contact) 

   • Languages spoken (to support communication and appropriate matching) 

   • Information related to current housing situation 

   • Presence of a disability (at household level, without specifying which member is concerned) 

   • City of residence 

   • Housing preferences: location, size

2. Partner organization and referring professional

   • Name and description of the organization

   • Contact details of the referring professional (name, role, email, phone number)

3. Tenant file

   • Tenant file URL on Dossier Facile, providing indirect access to the tenant’s file (hosted on the Dossier Facile platform)

4. As a result of the matching/application process:

   • Details of the future landlord and/or property manager, as well as information on the future housing unit (see sections below)

      

For property owners or housing providers:

• Name and contact details (email address, phone number) 
• Property ownership or management information (identity document, proof of ownership, or management mandate, and supporting documents for rental charges) 
• Property details: address, size, type, characteristics, rental conditions, EPC/energy performance profile 
• Photos of each room of the housing unit Availability details and rental preferences
• As a result of the matching/application process:

• Details of the future tenant (see section above)

   

For intermediary non-profit organizations providing support:

• Organization name and contact details (email address, phone number) 
• Profiles of beneficiaries registered by each contact person 

• Contact person details (name, role, email, phone number)

   

For all types of users:

• User account information (login credentials, language preference) 

• Communication records related to the housing application/matching process: messages, notifications, status of the application and/or housing listing

   

Information you choose to give us

You can choose to provide us with additional personal information, including:

• Additional Profile Information such as gender, preferred language(s), city, personal description, and any additional profile information you may want to provide.

• User-generated content such as any photoor other content you choose to provide

   

Information automatically collected

When you use the PATHS Platform, IOM automatically collects certain information to help administer, protect, and improve the platform’s services. This information may include:

• Usage information such as searches for housings you have made, files downloaded, access dates and times and other actions on the PATHS Platform including the pages or content you view and links you click to third-party applications
• Device information such as IP address, hardware and software information, device information, and operating system.
• Cookies as described in IOM’s Cookie Policy for the PATHS platform

Why does IOM collect your personal data on the platform?

IOM collects personal data for one or more of the following purposes:

1. Enable users to register and access the platform
2. Verify eligibility and authenticity of users, listings, and intermediary organizations to ensure the integrity and security of the platform.
3. Enable housing matching between individuals seeking housing and property owners or managers, based on relevant criteria such as location, size, budget, accessibility needs, and language compatibility.
4. Allow intermediary non-profit organizations to assist users throughout the matching process, including by sharing verified information with relevant partners (with consent where required).
5. Facilitate communication and collaboration among users (individuals, housing providers, and intermediary non-profit organizations) to support the housing search, application, and rental process.
6. Provide personalized user experiences, such as displaying suitable listings or tenant profiles in the user’s preferred language and region.
7. Support social inclusion and integration, for instance by taking into account languages spoken and specific support needs.
8. Monitor and improve platform performance through aggregated, anonymized data analysis to enhance functionality and user support services.

Personal data are used solely for these purposes and are not shared with third parties for commercial or unrelated objectives.

Who processes your personal data and with whom are they shared?

IOM may share users’ personal data with: 

• Other registered and validated users of the platform including property owners and intermediary organisations: in order to provide the requested services, including matching registered individuals to the housing listing, provide support during matching, facilitate communication with landlords and provide support with rental agreements.
• Service Providers: IOM may need to share some information you shared with us with the external service provider Assist Asia to ensure the improvement and/or maintenance of the platform and provide any required technical support. 

Security of personally identifiable information 

The PATHS Platform implements a series of technologies and security measures, such as encryption and/or authentication tools, in order to safeguard the information maintained on our systems from misuse, unauthorized access or disclosure, alteration, or loss.  

Although IOM applies all reasonable means to ensure that the information you provide us is not used by third parties for purposes other than those described in this Privacy Notice, IOM cannot guarantee that unauthorized third parties will never be able to defeat those measures or use your personal information for improper purposes. You should be aware that no transmission of information via the Internet is ever totally secure. Transmission is therefore at your own risk, and IOM assumes no responsibility for the security of the information. IOM shall not be liable for any loss or damage arising from your use of the PATHS Platform (including any liability arising from any interruptions, delays, errors or lost data that may occur).  

Bugs, Virus, Malicious Code, etc. : 

While IOM makes every effort to ensure the materials available on its websites are free of any software virus, it cannot guarantee that the materials are free from any or all software viruses. IOM is not responsible for any loss or damage caused by software and related codes, including viruses and worms.

Changes to this Privacy Notice

Please note that this Privacy Notice can change from time to time. If you return to this website after a period of more than one month, please check this Privacy Notice to confirm that you are aware of the details of the most recent update. The updated notice will be posted on this page and, if changes from the previous version are significant, a more prominent notice will be provided.  

Your continued use of this Platform after we post a new Privacy Notice will constitute your acceptance of the new terms and the use of your personal information, including information previously given to us, under the conditions described in the updated Privacy Notice.

Rights and contact information

You can request IOM to (a) have information about the processing of your personal data by IOM, (b) access your personal data, (c) correct your personal data, and (d) delete your personal data.  You may also object to the further processing of your personal data and/or withdraw your consent. IOM will need to verify your identity to be able to assess your request, and it may not always be able to comply, for example, due to safety and security considerations. IOM will assess this on a case-by-case basis and if a restriction is found to be applicable, you will be informed of our reasoning related to this. You can also submit complaints concerning the processing of your personal data by IOM.  

You may exercise any of the above rights, submit complaints or obtain further information by contacting IOM at iomfrancepaths@iom.int.

Privileges and Immunities and applicable law

Nothing in this Privacy Notice shall be construed as constituting a waiver of the privileges or immunities of IOM, nor as its acceptance of the jurisdiction of the courts of any country over disputes arising out of this Privacy Notice. You understand that IOM’s processing of your personal data is governed by IOM’s regulations, rules and policies, to the exclusion of any national or regional system of law. 

Data Sharing Agreement

This Data Transfer Agreement is entered into by the International Organization for Migration, hereinafter referred to as “IOM”, a related organization of the United Nations, acting through its French country office in Paris, 31 Rue Du Faubourg Poissonnière 75009 Paris, represented by Sara Abbas, Chief of Mission, and [Name of the Other Party], [Address], represented by [Name, Title of the representative of the Other Party], hereinafter referred to as the “Receiving Party.” IOM and the Receiving Party are also referred to individually as a “Party” and collectively as the “Parties”

1. SCOPE
   1. This Agreement is to govern the sharing of personal data of beneficiaries, whether such data has been provided directly by them directly or transmitted through partner organizations assisting them on the PATHS platform, with landlords (including private landlords and real estate agencies), for the purpose of facilitating access to housing through the dedicated platform.
   2. The sharing of personal data is limited to what is strictly necessary to achieve the following objectives: 
      • Facilitate rental applications and matching processes between beneficiaries and landlords
      • Enable landlords to assess suitability of applicants for rental properties
      • Enable IOM to analyze collected data for policy development and programmatic improvement, including the identification of housing barriers and enhancement of housing pathways, based exclusively on aggregated and/or anonymized data
      • Enable performance monitoring and service improvement through the analysis of aggregated and anonymized platform usage data, with the objective of improving user experience, accessibility, and operational effectiveness
      • Enable IOM to provide personalized and relevant housing options to beneficiaries, and accurate applications for landlords 
      • Ensure the integrity, security, and proper functioning of the platform including verification of the authenticity and eligibility of users, property listings
      • Support conclusion, administration and performance of rental agreements

3. Parties acknowledge that in respect of the selected Personal Data that is processed pursuant to the terms of this Agreement, each Party acts as a Data Controller and at no point do either Party intend to act as a Data Processor on behalf of the other Party or as joint Data Controllers. 

2. DATA TRANSFER
   1. IOM shall, in accordance with its Data Protection Principles and the provisions of this Agreement, transfer to the Receiving Party the following Personal Data of applicants (hereinafter “the selected Personal Data”):
      1. Contacts details: 
         • first name (of each household member)
         • last name (of each household member)
         • Email address (of head of household)
         • Phone number (of head of household)
         • Gender (of each household member)
         • Age (of each household member)
         • Family composition
         • Spoken languages (of head of household)
         • Presence of disability (at level of household, does not specify which member has a disability)
         • City of residence
         • Housing preferences
      2. Partner organization and referring professional
         • Name of organization
         • First name (of professional)
         • Last name (of professional)
         • Email address (of professional)

      3. Dossier Facile  : providing indirect access to the tenant file (hosted on Dossier Facile website)

          

   2. The specified purpose of the data transfer of the selected Personal Data is the following IOM transfers these Personal Data in order to 
      • Present three preselected rental applicants to the landlord to allow them to organize the corresponding property visits

      • Enable an appropriate matching between the preselected applicants and the landlord, which is intended to lead to the conclusion of a rental agreement with a minimum duration of one year.

        No personal data shall be transferred or processed beyond what is necessary to achieve the purposes defined in this Agreement.

   3. The method of transfer of the selected Personal Data will be the following Personal Data will be shared electronically through the dedicated online platform:

      • Data will be provided by the partner organizations’ support professionals via the “Create Refugee Profile” form, and by the beneficiaries directly via the “Tenant File Form”, once they are registered on the platform. Once the applicants’ profiles and applications have been validated by IOM, the Landlord will be able to access and view the three preselected candidates associated with each housing listing directly via the website. 

      • Only necessary data mentioned above will be shared with the receiving party within the platform through secure internal functionalities

      • Personal data may be transferred to technical service providers exclusively for platform maintenance, hosting, or technical support purposes.

      • Such transfers are limited to data strictly necessary for these activities and are subject to appropriate confidentiality and security obligations.

         

3. OBLIGATIONS

Each Party warrants that it shall process personal data in accordance with its applicable data protection framework.

Obligations of the Receiving Party

1. The Receiving Party warrants that it shall comply with the data protection safeguards outlined in this Agreement. In particular, the Receiving Party undertakes to:
2. Use the selected Personal Data it receives from IOM exclusively for the specified purpose of transfer mentioned in Article 2.2. The Receiving Party shall make no other use of the selected Personal Data under the Agreement without IOM’s prior written consent.
3. Implement and maintain technical and organizational measures to safeguard the security of the selected Personal Data and protect its confidentiality, integrity, and availability. Such measures must be proportionate to the sensitivity of the selected Personal Data. 
4. Maintain strict standards of confidentiality, employ appropriate access control measures and ensure that all transmissions of the selected Personal Data are encrypted.
5. Take all reasonable steps to limit the access to the selected Personal Data on a strictly applied “need to know” basis to its authorized employees and agents.  
6. Take all reasonable steps to ensure that all its employees, agents and subcontractors abide by the confidentiality obligations under this Agreement.
7. Prohibit any processing of the selected Personal Data which is not in accordance with the terms of this Agreement. 
8. Not further process, disclose, publish or transmit the selected Personal Data to any third party, without the prior written permission of IOM. 
9. Retain the selected Personal Data only to the extent, and in such a manner, that is necessary to fulfill the specified purpose(s) of transfer. 
10. Respect the rights of Data Subjects to access, correction, deletion, objection, and information regarding the processing of their Personal Data as per the obligations set out in the Receiving Party’s applicable data protection framework.
11. Immediately notify IOM in writing upon becoming aware of any actual or suspected Personal Data Breach in respect of the selected Personal Data, in particular if the data breach is likely to result in personal injury or harm to the Data Subjects. 

4. Dispute resolution

   1. Any dispute, controversy or claim arising out of or in relation to this Agreement, or the breach, termination or invalidity thereof, shall be settled amicably by negotiation between the Parties.
   2. In the event that the dispute, controversy or claim is not resolved by negotiation within 3 (three) months of receipt of the notice from one Party of the existence of such dispute, controversy or claim, either Party may request that it be submitted to mediation in accordance with the UNCITRAL Mediation Rules in effect at the time of the dispute.
   3. In the event that mediation is not successful, either Party may submit the dispute, controversy or claim to arbitration in accordance with the UNCITRAL Arbitration Rules in effect at the time of the dispute no later than 3 (three) months following the date of termination of the mediation as per Article 9 of the UNCITRAL Mediation Rules. The number of arbitrators shall be one and the language to be used in the arbitral proceedings shall be English. The appointing authority shall be the Secretary General of the Permanent Court of Arbitration. The arbitral tribunal shall have no authority to award punitive damages.  The seat of the arbitration shall be Geneva, Switzerland.
   4. All aspects of the dispute resolution as per paragraphs 1 to 3 of this Article shall be treated as confidential by the Parties and all others involved. 
   5. The present Agreement as well as the arbitration agreement above shall be governed by the terms of the present Agreement and supplemented by internationally accepted general principles of law (including the UNIDROIT Principles of International Commercial Contracts) for issues not covered by the Agreement, to the exclusion of any single national system of law that would defer the Agreement to the laws of any given jurisdiction.  
   6. This Article survives the expiration or termination of the present Agreement.

    

5. Use of IOM Name 

   The official logo and name of IOM may only be used by the Receiving Party in connection with this Agreement and with the prior written approval of IOM.

6. Status of IOM

   Nothing in or relating to the Agreement shall be deemed a waiver, express or implied, of any of the privileges and immunities of the International Organization for Migration as an intergovernmental organization.

7. Breach of Agreement

   The Parties acknowledge and agree that any breach of confidentiality obligations under this Agreement shall cause IOM and IOM beneficiaries substantial and irreparable damage.  If the Receiving Party makes or threatens such breach in violation of this Agreement, IOM shall be entitled to immediate injunctive relief, or any other remedy available.

8. Assignment

   The Receiving Party shall not assign any rights or obligations arising under this Agreement in part or all, unless specifically authorized by IOM in writing in advance.  

9. Term and Termination

   This Agreement may be terminated by one (1) month’s written notice to the other Party. However, where the Receiving Party is in breach of any of the terms and conditions of This Agreement, IOM may terminate the Agreement with immediate effect.

10. Severability

    If any part of this Agreement is found to be invalid or unenforceable, that part will be severed from this Agreement and the remainder of the Agreement shall remain in full force.

11. Entirety

    This Agreement embodies the entire agreement between the Parties and supersedes all prior agreements and understandings, if any, relating to the subject matter of this Agreement.

Update effective date 

This Privacy Notice is effective as of April 13th 2026.