Privacy Policy

1. Data controller

RentASet, headquartered in Belgium, is responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679).

2. Data collected

We collect the following data:

• Identification data: name, first name, email address
• Connection data: IP address, browser, device
• Payment data: processed by Stripe (we do not store your banking details)
• Usage data: bookings, reviews, messages

3. Purposes of processing

Your data is processed for:

• Managing your user account
• Processing bookings and payments
• Communication between users (messaging)
• Improving our services
• Complying with our legal obligations

4. Legal basis

The processing of your data is based on the performance of the contract (ToS), your consent, our legitimate interests and our legal obligations.

5. Retention period

Your data is kept for the duration of your registration and for up to 3 years after the deletion of your account, except for longer legal retention obligations (particularly for financial data).

6. Your rights (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access : obtain a copy of your data
• Right of rectification : correct inaccurate data
• Right to erasure : request the deletion of your data
• Right to portability : receive your data in a structured format
• Right to object : object to the processing of your data
• Right to restriction : restrict the processing of your data

To exercise these rights, contact us at: privacy@rentaset.com

7. Subcontractors

We use the following subcontractors:

• Stripe : payment processing (USA, standard contractual clauses)
• Supabase Storage : image and document hosting (EU/USA, standard contractual clauses)
• Supabase : database hosting (EU)

8. Cookies

We use cookies that are strictly necessary for the operation of the site (authentication, session). No advertising tracking cookies are used.

9. Supervisory authority

If you consider that the processing of your data constitutes a violation of the GDPR, you may lodge a complaint with the Belgian Data Protection Authority (DPA): www.dataprotectionauthority.be