GDPR and data rights
A plain-English summary of how EazyRoom users can ask about, access, correct, or delete personal data.
Who's responsible for your data
EazyRoom is the Data Controller for the personal data we process, under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Acts 1988–2018. This page is a summary in plain English — our full Privacy Policy sets out complete detail and takes precedence over this page.
Your data rights
Right of access
Ask what personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Ask us to delete your data, subject to our legal retention obligations below.
Right to restriction
Ask us to limit how we use your data in certain circumstances.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent
Withdraw any consent at any time, without affecting processing already carried out.
How to make a request
Email dpo@eazyroom.ie describing the request you want to make. We'll respond within one month, as required under GDPR Article 12, and we don't charge a fee for exercising these rights. We may need to verify your identity first, so we're not disclosing your data to someone else.
Why we process your data
Account setup, identity verification, and facilitating bookings between Hosts and Tenants; processing the EazyRoom Service Fee securely through Stripe; preventing fraud and keeping the platform secure; and complying with our legal obligations, including anti-money laundering and tax law. Full detail on our lawful basis for each type of processing is in the Privacy Policy, section 4.
How long we keep your data
Account and booking records
Life of your account plus 7 years, for Irish tax and legal obligations.
Identity verification documents
3 years after account closure, then securely and permanently deleted.
Marketing data
Until you opt out or withdraw consent.
These periods reflect real legal retention obligations, so an erasure request may only be partially actionable while they apply — we'll always explain why if that's the case.
Identity verification and your data
All identity documents are reviewed manually by trained EazyRoom staff — we do not use automated decision-making or third-party automated verification tools. Documents are accessed on a need-to-know basis and stored securely on EEA infrastructure. We carry out a Data Protection Impact Assessment for this process, as required under GDPR Article 35.
Who we share data with
We never sell personal data. It's shared only where necessary — with Stripe Payments Europe Limited for processing the Service Fee, with Vercel Inc. for secure EEA-based hosting, between a Host and Tenant once a booking is confirmed (limited to what's needed to arrange the stay), or where required by law.
Lodging a complaint
If you're unhappy with how we've handled your data, contact dpo@eazyroom.ie first — we'll do our best to resolve it. You also have the right to complain directly to the Irish Data Protection Commission at www.dataprotection.ie, or by phone at +353 (0)761 104 800.
This page is a summary. See the full Privacy Policy and Cookie Policy for complete detail on what we collect, our lawful basis, retention periods, and international transfers.