Privacy Policy
Last updated: August 2026
DIGIRENT SOLUTIONS, S.L. (“EasyRent”) is committed to protecting the privacy of the individuals whose data it processes. This Policy explains what data we collect, what we use it for, on what legal basis, who we share it with and what rights you have.
Please read it carefully, particularly sections 3 and 5 if you are a prospective tenant, since in that case we process information about your financial situation.
1. Data controller
- Controller
- DIGIRENT SOLUTIONS, S.L.
- Trading name
- EasyRent
- Tax ID (CIF)
- B22547483
- Address
- Calle Salvá 8, 1º, 2B — 46002 Valencia (Spain)
- info@easyrent.es
- Telephone
- +34 644 27 42 39
2. Applicable law
We process your data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
3. Categories of data we process
Depending on your relationship with us, we may process:
a) Website visitors and people who contact us
- Identification and contact details: first name, surname, email address, telephone number.
- The content of your enquiry or message.
- Browsing data: IP address, device and browser type, pages visited (see Cookie Policy).
b) Prospective tenants (applicants)
- Identification data: first name, surname, national ID / residence permit / passport number, nationality, date of birth.
- Contact details: address, email address, telephone number.
- Socio-economic and employment data: employment status, employer, type of contract, length of service, income.
- Documentary evidence of financial standing: payslips, employment contract, tax returns, employment history records, bank statements or equivalent documentation for self-employed applicants.
- Information about co-tenants or household members, where necessary to assess the tenancy.
- Data obtained from credit information systems (financial solvency files), as described in section 5.
- References from previous tenancies, where provided by the applicant.
c) Tenants with a current contract
- The above, plus bank details for the collection of rent, incidents, communications and contractual documentation.
d) People making payments or reservations through the Website
- Identification and contact details of the person making the payment.
- Billing data: name or company name, tax ID, tax address.
- Transaction data: amount, date, description, property reference, payment status.
- Technical data associated with the transaction: IP address, device and country of issue, used by the payment provider for fraud prevention.
Important: EasyRent does not store or have access to your full card details. Card data is entered and processed directly within the secure environment of our payment provider, Stripe Payments Europe, Ltd. EasyRent retains only the last four digits, the card brand and the transaction identifier, for accounting reconciliation and incident management.
e) Property owners and management clients
- Identification and contact details, bank details, land registry and cadastral data of the property, proof of ownership, energy performance certificate and certificate of occupancy.
f) Job applicants
- The data contained in the CV and any data provided during the selection process.
We do not request special categories of data (health, ethnic origin, trade union membership, religious or philosophical beliefs). Please do not include such information in the documents you send us. If we receive it incidentally, we will delete it unless there is a legal obligation to retain it.
4. Purposes and legal bases
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries received by form, email or telephone | Consent (Art. 6.1.a GDPR) and pre-contractual measures (Art. 6.1.b) | 1 year from last contact |
| Managing a tenancy application and assessing financial standing | Pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR) and the legitimate interest of the landlord in securing performance of the contract (Art. 6.1.f) | 6 months from the conclusion of the process, unless a contract is signed |
| Entering into and performing the tenancy agreement | Performance of a contract (Art. 6.1.b GDPR) | Duration of the contract plus 5 years (Art. 1,964 Spanish Civil Code) |
| Providing rental management services to property owners | Performance of a contract (Art. 6.1.b GDPR) | Duration of the contract plus 5 years |
| Managing reservations and payments made through the Website | Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) | Duration of the relationship plus 6 years from the invoice date (Art. 30 Spanish Commercial Code) |
| Payment fraud prevention | Legitimate interest of EasyRent and the payment provider in preventing fraudulent transactions (Art. 6.1.f GDPR) and legal obligation under payment services legislation | 6 years |
| Issuing and retaining invoices | Legal obligation (Art. 6.1.c GDPR) | 6 years (Commercial Code) and 4 years for tax purposes (General Tax Law) |
| Complying with tax, accounting and anti-money-laundering obligations | Legal obligation (Art. 6.1.c GDPR) | 6 years (Commercial Code) and 10 years (Law 10/2010) as applicable |
| Sending commercial communications about properties and services | Consent (Art. 6.1.a GDPR) or legitimate interest in respect of existing clients (Art. 21.2 LSSI) | Until consent is withdrawn or an objection is raised |
| Analysing use of the website and improving the service | Consent via the cookie banner (Art. 6.1.a GDPR) | See Cookie Policy |
| Managing recruitment processes | Consent (Art. 6.1.a GDPR) | 1 year from receipt of the application |
Once these periods have elapsed, data will be kept duly blocked for the limitation periods of any actions that may arise, and will then be deleted.
5. Assessment of financial standing and consultation of credit files
This section is particularly relevant if you are a prospective tenant.
What we do. In order to recommend your application to the property owner, we assess your financial capacity to meet the rent. To do so we analyse the documentation you provide and, where necessary, we consult common credit information systems (financial solvency and credit files, such as ASNEF or equivalent).
Legal basis. This consultation is based on the legitimate interest of the landlord and of EasyRent in verifying the financial standing of the prospective tenant, under Article 6.1.f GDPR and Article 20 LOPDGDD, as well as on pre-contractual measures requested by you.
Prior information. We will inform you expressly, before carrying out the consultation, of the entity operating the file we intend to consult.
Automated decision-making. The assessment of your application is not based solely on automated processing. The final decision always rests with the property owner, following human assessment by our team.
Your right to object. You may object to this processing at any time by writing to info@easyrent.es. Please note that if you object, we may not be able to continue assessing your application, since evidence of financial standing is a requirement commonly imposed by property owners.
6. Recipients of the data
Your data may be disclosed to:
- Property owners, where necessary to assess and decide on your application, or to enter into and perform the tenancy agreement. Disclosure is limited to strictly necessary data.
- Insurance companies providing rent guarantee or legal protection cover, where the tenancy is to be covered by such a policy.
- Common credit information systems, as described in section 5.
- Financial institutions, for the management of collections and payments.
- Tax, accounting and legal advisers and professional firms, where necessary.
- Public authorities and the Courts, where there is a legal obligation.
- Payment service provider: Stripe Payments Europe, Ltd. (Ireland), acting as a processor in respect of payment collection and as an independent controller in respect of fraud prevention and compliance with payment services legislation. Its privacy policy is available at https://stripe.com/en-ie/privacy
- Technology service providers, acting as processors under a contract signed in accordance with Article 28 GDPR:
- Vercel Inc. — website hosting
- Supabase Inc. — database and image storage
International transfers. Some of our technology providers may be located outside the European Economic Area. In such cases, transfers are made under European Commission adequacy decisions or by means of Standard Contractual Clauses, with any additional safeguards required. You may request information about these safeguards by writing to info@easyrent.es.
7. Your rights
You may exercise the following rights:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request deletion of your data where it is no longer necessary.
- Objection: to object to processing based on legitimate interest, including the assessment of financial standing.
- Restriction: to request that we suspend processing in certain circumstances.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out beforehand.
How to exercise them. Write to info@easyrent.es or to Calle Salvá 8, 1º, 2B, 46002 Valencia, stating the right you wish to exercise and enclosing a copy of a document proving your identity. We will respond within a maximum of one month, extendable by a further two months in particularly complex cases.
Complaints to the supervisory authority. If you consider that the processing does not comply with the applicable rules, or if you have not received a satisfactory response to the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
8. Minors
EasyRent’s services are intended for adults. We do not knowingly collect data from children under 14. If you become aware that a minor has provided us with data, please notify us at info@easyrent.es so that we can delete it.
9. Security
We have adopted appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, taking into account the sensitivity of the financial documentation we process. Access to data is limited to staff who need it to perform their duties and who are bound by a duty of confidentiality.
In the event of a personal data breach involving a high risk to your rights and freedoms, we will notify you without undue delay.
10. Accuracy of data
You warrant that the data you provide is truthful, accurate and up to date, and undertake to notify us of any changes. If you provide us with third-party data (for example, of co-tenants or guarantors), you must have informed them beforehand of the content of this Policy and obtained their consent.
11. Amendments
We may update this Policy to reflect changes in legislation or in our services. The version in force will always be the one published on this page, with its date of update indicated.
12. Language
This document is a translation of the Spanish original. In the event of any discrepancy between the two versions, the Spanish version shall prevail.