The GDPR reinforces the established principles governing data protection. These principles include processing data lawfully, obtaining valid consent from individuals you are collecting data from, and making sure the rights of individuals are protected.
When collecting personal data, we will make sure the data is:
used fairly and lawfully
used for limited, specifically stated purposes
used in a way that is adequate, relevant and not excessive
kept for no longer than is necessary
kept safe and secure
not transferred outside the UK or European Economic Area (EEA) without adequate protection
Below is a link to a sample contract. The contract that you will be asked to sign is the same as this but will be specific to the property that you are looking to take and also the rent/deposit for it.