Privacy Policy

Who we are

EasyTap is a Belgian power bank rental service. This privacy policy explains how we process personal data when you visit easytap.be, contact us, or use an EasyTap station.

The data controller is EasyTap, a Belgian sole proprietorship (VAT BE 1030 526 119). You can contact us at [email protected]. The registered office will be added on this page as soon as it is available.

What data we process

The data we process depends on how you interact with EasyTap. We do not collect more than we need for the relevant purpose.

• Contact form information: name, email address, phone number if you provide one, reason for contact, and your message.
• Email correspondence sent to [email protected], [email protected] or [email protected].
• Technical logs that may include IP address, browser type, device information, pages visited and timestamps, used for security and to keep the website working.
• Cookie preferences stored on your device after you make a choice in the cookie banner.
• If analytics cookies are later enabled and you consent, aggregated usage data about how the website is used.
• For rentals at a station, payment-related identifiers handled by the payment provider, such as a transaction reference, masked card details (for example last four digits), payment method type, rental start and return information, and station identifier.

Payment data

EasyTap does not store full credit card or debit card numbers on this website or in EasyTap systems as a substitute for a payment provider.

Payment data can be handled by external payment providers that process the tap, pre-authorisation, rental charge and, where relevant, replacement fee. Those providers act as processors or independent controllers according to their own terms and privacy notices.

Why we process it

We process personal data to:

• Answer questions and partnership requests.
• Provide support if a rental does not work as expected.
• Operate, secure and improve the website.
• Remember your cookie choices.
• Perform a rental, including payment authorisation, charging rental fees, and charging a replacement fee if a power bank is not returned according to the terms.
• Comply with legal obligations, including accounting and responding to lawful requests.

Legal basis

Under the GDPR, our legal bases include:

• Contract and pre-contractual steps: responding to a request, performing a rental, processing payment and return.
• Legitimate interests: keeping the website secure, preventing fraud or misuse, improving the service in a way that does not override your rights.
• Consent: optional analytics or marketing cookies, if they are ever enabled and you accept them. You can withdraw consent at any time through Cookie settings.
• Legal obligation: record-keeping, tax and other duties that apply in Belgium.

Retention periods

We keep personal data only for as long as needed for the purpose, including any legal retention period.

Contact messages are typically kept for up to 24 months after the last meaningful correspondence, unless a longer period is required for an ongoing issue.

Rental and payment records are kept for the period required by Belgian accounting and tax rules, and for as long as needed to handle returns, disputes or replacement fees.

Technical security logs are kept for a limited period, generally up to 12 months, unless needed longer to investigate an incident.

Cookie preferences remain on your device until you clear them or update your choice.

Processors and service providers

We may use service providers to host the website, send or receive email, provide security, and process payments at stations.

This website is intended to be hosted via Cloudflare. Payment providers for station rentals will be named here once they are confirmed. We do not currently load analytics or marketing scripts unless you later consent and a provider is connected.

International transfers

Some providers may process data outside the European Economic Area. Where that happens, we will use an appropriate safeguard such as an adequacy decision or Standard Contractual Clauses, together with any supplementary measures required.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No online service can be guaranteed completely secure, but we work to reduce risk in a way that is proportionate to the data we handle.

Your rights

If GDPR applies to you, you may have the right to access your data, rectify it, erase it, restrict processing, object to processing based on legitimate interests, and receive your data in a portable format where that right applies. You may also withdraw consent where processing is based on consent.

To exercise these rights, email [email protected]. We may need to verify your identity before fulfilling a request.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. In Belgium this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données):

Drukpersstraat 35, 1000 Brussels, Belgium. Website: https://www.dataprotectionauthority.be

Contact

For privacy questions, contact [email protected]. VAT BE 1030 526 119. Please do not send payment card numbers by email.