Privacy Statement – Ease2pay Merchant Portal

This privacy statement applies to the use of the Ease2pay Merchant Portal, offered by Ease2pay Services B.V. (“Ease2pay”). Through this portal, operators and managers of locations can manage transactions, customer bookings, and payments.

Ease2pay values the protection of personal data and processes personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.

Who is responsible for data processing?

Ease2pay Services B.V., with its registered office at Burgemeester Oudlaan 50 – Enterprise Building EUR, Rotterdam, the Netherlands, is the data controller for the processing of personal data as described in this statement, insofar as such data is processed in connection with managing merchant accounts and operating the portal itself.

Operators using the portal may also process personal data of their own customers via the portal. For such data, operators are generally considered independent data controllers or joint controllers with Ease2pay, depending on the specific circumstances. Ease2pay may, in some cases, act as a data processor on behalf of operators. In such cases, the arrangements are set out in a separate data processing agreement.

What personal data do we process?

Ease2pay processes the following categories of personal data through the Merchant Portal:

Data of operators and managers (users of the portal):

• Name, address, company name, and contact details
• Username and password
• Role and permissions within the portal
• Communication data (e.g. emails or messages sent to support)
• Log files and usage data from the portal (e.g. logins, actions performed within the portal)

Data of end customers (e.g. boat owners, campervan owners, market stallholders) visible in the portal:

• Name or alias (if provided)
• Booking and transaction data
• Usage data (e.g. electricity consumption, stay sessions, water consumption)
• Payment data (e.g. payment status, payment methods)
• Time and location data related to transactions
• Customer numbers or references

Note: The operator is solely responsible for the lawful processing of personal data of their own customers. Ease2pay processes such data only to the extent necessary for providing services to operators.

For what purposes do we process personal data?

Ease2pay processes personal data through the Merchant Portal for the following purposes:

• Registration and management of merchant accounts
• Providing access to the Merchant Portal
• Technical and functional operation of the portal
• Management of user roles and permissions
• Enabling insight into transactions, customer bookings, and financial overviews
• Supporting operators in their business operations (e.g. reports, fault tracking)
• Providing support and responding to inquiries
• Complying with legal obligations (e.g. tax retention requirements)
• Securing the portal and detecting misuse
• Improving our services and developing new functionalities

On what legal bases do we process data?

Ease2pay processes personal data based on:

• Performance of a contract
• Legal obligations
• Legitimate interests, such as securing the portal and improving services
• Consent (where necessary, e.g. for marketing)

Sharing personal data

Ease2pay only shares personal data with third parties if:

• This is necessary for the performance of our services (e.g. IT service providers, hosting providers)
• There is a legal obligation to do so
• You have given your consent

We enter into data processing agreements with parties who process data on our behalf to ensure an appropriate level of security and confidentiality.

International transfers

If Ease2pay transfers personal data outside the European Economic Area (EEA), this will only occur if appropriate safeguards have been implemented, such as the use of standard contractual clauses approved by the European Commission.

Data security

Ease2pay takes appropriate technical and organizational measures to protect personal data against loss, unauthorized access, and any form of unlawful processing. In doing so, we consider the state of the art, implementation costs, and the nature of the processing.

Retention periods

Ease2pay does not retain personal data longer than necessary for the purposes for which it was collected or to comply with legal obligations, such as statutory tax retention periods.

Your rights

Users of the Merchant Portal have the following rights under the GDPR:

• Right of access to your personal data
• Right to rectification or erasure of your data
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

You may submit a request via our contact form, mentioning “privacy.” Ease2pay will respond to your request within four weeks. To verify your identity, we may request additional information.

Questions or complaints

If you have any questions or complaints about this privacy statement or the processing of personal data through the Merchant Portal, please contact us via our contact form, mentioning “privacy.” You can also file a complaint with the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl.

Changes

Ease2pay reserves the right to amend this privacy statement. We recommend that you review this statement regularly to stay informed of any changes.