Data Processing

This page summarises how Rumtelo processes personal data under the GDPR. For the full picture, also read our Privacy Policy.

Roles

For your Rumtelo account and household data, Rumtelo acts as the data controller. When we use infrastructure or payment providers, they act as processors under contract.

Purposes and legal bases

• Contract — create and run your account, show jars, Coach tips, and product features you use.
• Legitimate interest — security, fraud prevention, product improvement (with safeguards).
• Consent — optional bank connect or marketing where required.
• Legal obligation — tax and accounting records for paid plans.

Categories of data

Identity and contact data; authentication credentials (hashed); household financial and practice data you enter or import; technical logs.

Processors (typical)

• EU cloud hosting (application, database, backups) — Amsterdam region.
• Email delivery for verification and account messages.
• Payment processor for paid plans (card details never stored by Rumtelo).
• Optional PSD2/AIS provider for live bank sync when enabled — read-only, after you connect.

International transfers

We prefer EU processing. If a processor transfers data outside the EEA, we require appropriate safeguards (e.g. Standard Contractual Clauses).

Subprocessors and changes

Processor list may change as the product grows. Material changes that affect how your data is processed will be reflected here or in the Privacy Policy.

Contact / DPO

Privacy requests: support@rumtelo.com. You may also lodge a complaint with the Dutch Autoriteit Persoonsgegevens.