Privacy policy

Last updated: 08-08-202

1. Who We Are

Item	Details
Controller (for this service)	Reesure Operations B.V. (KvK 96207094, VAT NL 867513378 B01)
Address	Singel 542, 1017 AZ Amsterdam, Netherlands
Privacy e-mail	[email protected] (no formal DPO appointed; handled by the founding team, re-evaluated annually)

Reesure (“we”, “us”) provides cloud software that automates property-rent collection, payment initiation and reporting for landlords and professional property managers (together, “Property Managers”).

Startup note. We’re a growing company. Core safeguards listed below are in place; some advanced controls are rolling out on a documented roadmap. See §7a.

2. Our Role Under GDPR

Property Manager = Data Controller (determines purpose and means of tenant processing).
Reesure = Data Processor (processes on the Controller’s instructions).
Tenant = end-user who pays rent via the Platform; Tenants contract with the Property Manager, not Reesure.

3. Personal-Data Inventory & Legal Bases

Data category	Elements	Source	Purpose	Legal basis (Art. 6)	Retention
Tenant details	Name, e-mail, phone, address, payment method token/IBAN, payment status	Controller / Tenant	Invoicing, payment initiation, reminders, dashboards	(b) Contract performance (via Controller), (f) legitimate interest for fraud prevention	Up to 7 years where needed for bookkeeping, otherwise anonymise after 12 months post-lease (§12 & §12a).
Property-manager details	Company name, KvK, VAT, contact name, e-mail, phone	Controller	Account setup, billing, support	(b) Contract performance	7 years (business records)
UBO/KYC routing	UBO identity data collected by Stripe	Controller → Stripe	KYC/payouts handled by Stripe	(f) Legitimate interest to pass to Stripe; Stripe acts as its own controller for KYC	Per Stripe policy (Reesure does not store copies).
Payment metadata	Amount, currency, mandate ID, Stripe charge ID, refunds/returns	Stripe API	Reconciliation, dispute handling, audit	(b) Contract performance; legal retention (see §12a)	7 years (or 10 years for immovable-property VAT records).
Technical logs	IP, device/browser, API events, error traces	Automatic	Security, fraud prevention, abuse control, analytics	(f) Legitimate interest	5 years (operational security)
PM marketing preferences	Name, e-mail, opt-out flag	Controller	Product updates & service notices to PMs	(f) Legitimate interest with easy opt-out	Until opt-out

We

never

4. What We Use Data For

Payments. Initiate SEPA Direct Debit and Pay-by-Link collections via Stripe Payments Europe Ltd.
Messaging. Send invoices, reminders and dunning notices via MessageBird (e-mail/SMS/WhatsApp).
Dashboards & BI. Show real-time metrics in-app and optionally feed Power BI.
Support & security. Investigate issues, prevent fraud, maintain uptime.