Before Locari evaluates an application with AI, it obtains the applicant's explicit consent. This page shows how the consent process works, what you can do, and what happens automatically. You find all consents in the relevant rental case, in the Consents tab.
What Locari does automatically: send the consent email, send reminders on day 1, 3, and 5, expire consent after 10 days without response and delete the data. What you decide: whether to send a manual reminder, whether to withdraw a granted consent, whether to delete applicant data early.
Common Tasks
- Check an applicant's consent status
- Send a manual reminder
- Understand consent for chatbot or manual entry
- Process a withdrawal
- Understand the burden of proof
- Understand consent email language
How To
View consent status
- Open the rental case and switch to the Consents tab.
- In the table you see the current status per applicant (Pending / Granted / Declined / Withdrawn / Expired).
- Clicking a row opens the detail view with all timestamps, channel, and — for granted consent — the Withdraw consent button.
- Example: Applicant Schmidt, status "Pending", 2 of 3 reminders sent.
Send manual reminder
- Open the Consents tab — the applicant must have status "Pending".
- Click the Send reminder button in the row.
- Locari sends an unscheduled reminder email; the automatic reminder schedule continues unchanged (the reminder count is not incremented by this).
What Locari does in the automatic reminder schedule: day 1, day 3, day 5 — maximum 3 reminders. If the applicant does not respond by day 10, consent is automatically marked as expired and data is deleted. What you decide: you can trigger an additional manual reminder at any time without changing the automatic schedule.
Views and Fields
"Consents" Tab in the Rental Case
The table is split into Pending and Completed and shows:
- Applicant: email address
- Status: Pending / Granted / Declined / Withdrawn / Expired
- Requested: timestamp of the first consent email
- Completed: timestamp of grant/decline/withdrawal/expiry
- Reminders: number of reminders sent (0–3)
- Method: email link / admin / web form / Locari
- IP address: stored only for consent via email link (Art. 7 GDPR documentation requirement)
- Actions: Send reminder (only when "Pending") and Delete data
Implicit Consent — Chatbot and Manual Entry
When you enter applicant data yourself via the Locari chatbot or a form, consent is treated as implicitly granted — you, as landlord, are acting as the controller and have actively entered the data. In this case no consent email is sent.
What Locari does for implicit consent: immediately create the consent record as "Granted" and generate a withdrawal token (so the right of withdrawal under Art. 7(3) GDPR is preserved). What you decide: whether to inform the applicant retrospectively about the data processing — this is recommended for the transparency obligation under Art. 13 GDPR.
Consent Email Language
The language of the consent email is determined by the country of the listing:
| Country of Listing | Language |
|---|---|
| Germany (DE), Austria (AT), Switzerland (CH) | German |
| France (FR) | French |
| United Kingdom (GB) | English |
| Other or not set | German (default) |
Revocation of Consent
By the Applicant
The withdrawal link in every consent email is permanently valid and never expires. Applicants can at any time:
- Click the withdrawal link in the email.
- Or write to you — then you withdraw it yourself from the consent detail view (Withdraw consent).
After withdrawal, data deletion runs automatically:
- Confirmation email to the applicant
- Complete deletion of all applicant data (profile, documents, communication, notes)
- Anonymization of the consent record — proof for supervisory authorities is retained (Art. 7(1) GDPR)
Data deletion after withdrawal is irreversible. The consent record itself is anonymized (no longer personally identifiable), but remains available as an audit record for authority requests.
When Consent is Declined
If the applicant declines consent, Locari immediately deletes the applicant data and sends a confirmation email to the applicant.
When Consent Expires
If an applicant does not respond after 10 days, consent is automatically marked as expired and data is deleted — the same deletion sequence as for a decline.
Burden of Proof
Locari documents for each consent:
- Timestamps (request, grant, decline, withdrawal, expiry)
- Status and channel (email link / admin / web form / Locari)
- IP address and browser identifier (for consent via email link)
- Number of reminders sent
- the consent text shown
You see these details per applicant in the detail view in the Consents tab. After a deletion, the anonymized record is retained as proof.