1. Who we are
EasyR Catch is operated by EasyR ApS ("EasyR Catch", "we", "us"), a company registered in Denmark. We are the data controller for the personal data described in this policy, unless stated otherwise.
For any question about this policy or your personal data, contact us at info@easyrcatch.com.
2. What data we collect
App users (travelers and digital nomads). When you install the EasyR Catch app or create an account, we may collect:
- Account data: email address, display name, country of residence (optional) and password (stored hashed);
- Approximate location: only if you grant location permission. We request coarse location (city-level) to show discounts around you and to sort venues by distance on the map. You can decline and still use the app by searching or browsing by city;
- Redemption data: which venue you redeemed at, when, and the redemption code or QR scan used to confirm the redemption;
- Basic technical data: a short device descriptor (used-agent snippet, up to 60 characters) sent when you sign in, and the IP address of your session, kept for security and abuse prevention;
- Communications: any message you send us by email at info@easyrcatch.com and the response we send back.
We do not collect precise GPS coordinates in the background, and we do not embed any third-party analytics, advertising or crash-reporting SDKs in the app.
Website visitors. When you visit easyrcatch.com we collect basic analytics (pages viewed, referrer, approximate location from IP) and, if you submit a form (partner enquiry, vendor signup, removal request), the contact details you provide.
Vendors. When a business signs up to list on EasyR Catch, we collect the business name, address, contact person, contact email, phone, website, opening hours, discount details, images, and any documents needed to verify the listing.
Partners. When a travel insurer, telco or eSIM company bundles EasyR Catch into its product, we receive a limited set of end-user data needed to activate the benefit (typically an email or a signed token) under a separate data-sharing agreement.
3. Why we use your data (legal basis)
We only process personal data where we have a lawful basis under the EU General Data Protection Regulation (GDPR). Specifically:
- To provide the service — showing you nearby discounts, generating redemption codes, confirming redemptions with the vendor, keeping your account working. Legal basis: performance of a contract with you.
- To keep the platform safe — detecting fraud, abuse, duplicate accounts, discount farming, and enforcing our terms. Legal basis: our legitimate interest in a functioning marketplace.
- To improve the product — aggregated analytics on redemption patterns, popular venues and app performance. Legal basis: legitimate interest, and where required, your consent.
- To communicate with you — transactional emails (account confirmation, redemption receipts, removal requests, support replies) on the basis of contract; product news, tips and marketing only where you have opted in.
- To comply with law — responding to lawful requests from authorities, meeting tax and accounting obligations. Legal basis: legal obligation.
4. Who we share data with
We do not sell personal data. We share it only where necessary:
- Vendors see the minimum needed to confirm a redemption — typically a short-lived code, a first name, and, on request, whether you are a returning customer. Vendors are separately responsible for any personal data they collect at their point of sale (payments, loyalty cards, etc.).
- Partners (insurers, telcos, eSIM providers) whose product bundles EasyR Catch as a benefit receive activation-level data only, under a written data-sharing agreement.
- Processors acting on our instructions — hosting, email delivery, error monitoring, analytics, customer support tooling and payment processors where applicable. Each is bound by a data processing agreement and may only use the data to provide the service to us.
- Authorities where legally required (court order, valid subpoena, tax authority request).
- Acquirers in the event of a merger, acquisition or sale of assets. We will notify affected users in advance where required by law.
5. International transfers
EasyR Catch is based in Denmark and stores most data in the European Economic Area (EEA). Some processors we use may host or access data outside the EEA (for example, in the United States). Where they do, we rely on transfer mechanisms approved under GDPR — typically the European Commission's Standard Contractual Clauses — and, where relevant, additional safeguards.
6. How long we keep data
We keep personal data only for as long as we need it for the purpose it was collected, or as long as the law requires:
- Account data: while your account is active, and up to 24 months after deletion so we can respond to disputes and enforce our terms;
- Redemption records: up to 24 months, to power your redemption history and to detect abuse;
- Support communications: up to 24 months from the last message;
- Vendor records and invoices: 5 years, as required by Danish accounting law;
- Aggregated, non-identifiable analytics: indefinitely.
When a retention period ends, data is deleted or irreversibly anonymised.
7. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you;
- Correct data that is inaccurate or incomplete;
- Erase your data, subject to legal retention obligations;
- Restrict or object to certain processing, including direct marketing;
- Receive a portable copy of the data you provided to us;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with a supervisory authority. In Denmark this is Datatilsynet (datatilsynet.dk).
To exercise any of these rights, email info@easyrcatch.com or use our removal request form. We will respond within 30 days.
8. Cookies and similar technologies
Our website uses a small number of cookies and equivalent local-storage entries:
- Strictly necessary — keeping you signed in to the vendor dashboard, storing your language, protecting forms from abuse. These do not require consent.
- Analytics — understanding how the site is used in aggregate. Where required, we ask for consent before enabling these.
- Marketing — only if you explicitly opt in.
You can clear cookies and local storage at any time through your browser settings.
9. Children
EasyR Catch is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Security
We take reasonable technical and organisational measures to protect personal data — encryption in transit, hashed passwords, access controls, audit logging and regular reviews. No system is perfectly secure; if we become aware of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you.
11. Changes to this policy
We may update this policy from time to time. When we make material changes we will post the updated policy on this page and, where practical, notify you through the app or by email. Continued use of EasyR Catch after the effective date constitutes acceptance of the updated policy.
12. Contact
Data protection questions can be sent to info@easyrcatch.com. To have your account or listing removed, use our removal request form.