Privacy
Runspace B.V. ("Runspace", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This statement explains how we process personal data and describes your rights under the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG, UAVG).
Runspace B.V. is a private limited company incorporated in the Netherlands. We build AI-driven back-office automation software for regulated industries, primarily financial services and insurance.
- As a controller, we determine the purposes and means of processing personal data relating to our website visitors, prospects and business contacts, job applicants and our own personnel. This Privacy Statement covers that processing.
- As a processor, we process personal data on behalf of our business customers when they use our products. That processing is governed by a Data Processing Agreement (DPA) with each customer, who remains the controller. If your personal data is processed by us on behalf of one of our customers, please refer to that customer's own privacy notice and direct any request to them; we will support them.
| Category | Personal data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Website visitors | IP address, device and browser data, usage data (via cookies) | Operate, secure and improve our website | Legitimate interests; consent for non-essential cookies |
| Prospects and business contacts | Name, business contact details, company, correspondence | Sales, relationship management, responding to enquiries | Legitimate interests; steps prior to entering a contract |
| Customer contacts | Account and contact details, correspondence, billing details | Providing and administering our services | Performance of a contract; legitimate interests |
| Job applicants | Application data, CV, correspondence, references | Recruitment and selection | Steps prior to a contract; consent |
| Personnel | Employment and HR data | Employment administration | Contract; legal obligation |
| Newsletter / marketing recipients | Email address, preferences | Sending updates you asked for | Consent |
Our website uses cookies and similar technologies. Strictly necessary cookies are used to operate and secure the site. Analytics or other non-essential cookies are placed only with your consent, which you can withdraw at any time via our cookie settings.
We share personal data only where necessary, with:
- Service providers acting as our processors (for example cloud hosting, communications and analytics), each bound by a data processing agreement.
- Our primary infrastructure provider is Microsoft Azure, with hosting located in the European Union.
A current list of the sub-processors we use to deliver our services is available on request and via our Trust Center. We do not sell personal data.
Personal data is hosted within the European Union. Where a transfer outside the European Economic Area (EEA) is necessary, we rely on an appropriate safeguard — an adequacy decision, or the European Commission's Standard Contractual Clauses (SCCs) together with supplementary measures where required.
We keep personal data only as long as necessary for the purposes described above, or for as long as required by law (for example statutory retention periods under Dutch tax and administrative law). When personal data is no longer needed, we securely delete or anonymise it.
We operate an information security management system aligned with ISO/IEC 27001:2022. Measures include encryption of data in transit (TLS) and at rest (AES-256), access control on a least-privilege basis with multi-factor authentication, logging and monitoring, secure software development, and assurance over our suppliers.
Under the GDPR you have the right to: access your personal data; rectification; erasure; restriction of processing; data portability; to object to processing; and to withdraw consent at any time (without affecting prior processing).
To exercise your rights, contact privacy@runspace.ai. We will respond within one month, as required by the GDPR. To protect your data we may need to verify your identity. Where we process your data as a processor on behalf of a customer, please direct your request to that customer (the controller).
You have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). We would appreciate the opportunity to address your concerns before you do so — please contact us first.
We may update this Privacy Statement from time to time. The "last updated" date at the top shows the current version. Material changes will be communicated where appropriate.