Privacy policy

Last updated: October 7, 2026

1. Owner and scope

EasyManager is management software used by leisure companies, camps, schools, parents' associations, clubs and other organisations (hereinafter, “the organisation”) to manage registrations, bookings, payments and communications with their clients and participants. EasyManager is a service of UsinaSites OÜ (registration number 16062121), whose contact address is info@easymanager.app.

This policy applies to the EasyManager platform, that is, to each organisation's registration, booking and account access pages. The data provided when registering with an organisation are processed on behalf of that organisation: the organisation is the data controller and UsinaSites OÜ acts as the data processor. Data processing on this website is described on the Legal information page.

2. Data processed

Account data: the email address and the password, which is stored encrypted. If a Google or Facebook account is used to sign in, the identifier of that account is also processed (as described in section 3).

Registration and booking data: the data requested by the organisation in its forms, such as first and last name, date of birth, address, phone number, identity document, a photograph, billing details, the people authorised to pick up participants and the answers to the questions included by the organisation. Anyone who provides data about a minor must be the minor's parent or legal guardian, or be authorised by them.

Payment data: amounts, receipts, payment history and, for direct debit payments, the IBAN. Card payments are made through the organisation's payment gateway: EasyManager does not store the full card number or its security code. If the organisation offers recurring payments, only the reference provided by the gateway and the card's brand, last four digits and expiry date are stored.

Signatures: when a document is signed on the platform, the signature is stored together with the date, IP address and browser used, as proof of the signature.

Technical data: the date and IP address of sign-ins, for security reasons.

3. Sign-in with Google or Facebook

If the organisation has enabled this option, the user can create an account or sign in with their Google or Facebook account. In that case:

Data received: from Google, the email address, name, profile picture and Google Account identifier (“email” and “profile” scopes); from Facebook, the email address, name and Facebook account identifier.

Data retained: only the email address and the account identifier, in order to link the Google or Facebook account to the EasyManager account. Neither the name nor the profile picture is stored.

Use: only to create the account, check that the email address is verified and sign the user in. These data are not used for advertising purposes, are not sold and are not used to train artificial intelligence models.

Recipients: these data are not shared with third parties. Only the organisation where the account is created can see the email address, as part of the client account.

Revoking access: EasyManager's access can be revoked at any time from the Google Account permissions page or from the Facebook apps and websites settings. The EasyManager account remains active and can still be accessed with the email address by resetting the password.

EasyManager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Purposes and legal basis

The data are processed to manage the account and the registrations, bookings and payments with the organisation, to send the communications related to them (as described in the Communications to participants section) and to ensure the security of the platform. The legal basis is the performance of the contract or of the requested registration, compliance with legal obligations and, where applicable, the data subject's consent.

5. Recipients

The data are not sold or shared with third parties, except where legally required. The organisation with which the user registers has access to the user's account and registration data. To provide the service, UsinaSites OÜ uses providers that process data on its behalf as processors (hosting, file storage, email, SMS and WhatsApp message delivery, and the payment gateways chosen by the organisation), bound by the corresponding data-processing agreements. If any of them is located outside the European Economic Area, the transfer is carried out with the appropriate safeguards provided for in the GDPR.

6. Security

Communications with the platform are encrypted (HTTPS), passwords are stored encrypted and each organisation's data are kept in a separate database. Access to the data is limited to authorised persons within the organisation and, when necessary to provide technical support, to the UsinaSites OÜ team.

7. Retention and deletion

The data are kept for as long as the organisation maintains the account and, afterwards, for the applicable legal periods (for example, the tax retention periods for invoices). Any person can request the deletion of their account and the associated data, including the data received from Google or Facebook, by contacting the organisation or by writing to info@easymanager.app. The request is handled within a maximum of one month, except for data whose retention is legally required.

8. Rights

Any person can exercise their rights of access, rectification, erasure, objection, restriction of processing and portability by contacting the organisation or by writing to info@easymanager.app. If they believe their request has not been handled properly, they may lodge a complaint with the competent data protection supervisory authority.

9. Changes to this policy

This policy may be updated to reflect changes to the service or to the regulations. The date of the last update is shown at the top of this page.