Skip to content

Privacy policy

This privacy policy explains how we process your personal data, including what we use it for and how we store and protect it.

This privacy policy (the “policy”) explains how we process your personal data, including what we use it for and how we store and protect it. It also explains the rights you have when we process your personal data. Why? Because we care about your privacy.

Who we are

We are responsible for processing your personal data in accordance with this policy. This means we are the data controller. Our details are:

  • Rumli ApS, Gothersgade 8L, 1., 1123 Copenhagen, Denmark
  • Company registration number (CVR): DK39016869
  • Email: hej@rumli.com
  • Phone: +45 9393 0003

Our website, emails and social media profiles may contain links to other companies, apps or websites (“other websites”) that do not belong to us. This policy does not cover how those other websites process your data. We encourage you to read the privacy policies of the other websites you visit.

Why, what and for how long we process your data

We help landlords make renting out their properties easy and efficient, while creating the best possible experience for tenants.

The Rumli platform handles all your rent payments, collections and reminders automatically. Give your tenants the freedom to choose between bank transfers and payment services. If necessary, we also handle default notices. Throughout the process, you always have access to relevant real-time data and information.

With Rumli, you never need to worry about deadlines. We have automated all processes and make sure reminders are sent on time for both you and your tenants. You always have immediate access to all documents and contracts. And we keep up to date with relevant legislation so you remain compliant.

When you visit our website, subscribe to newsletters or create an account, we process your personal data for the purposes below.

Please note that if you subscribe to our services, we will be your data processor. The data we process on your behalf in that connection will be governed by the data processing agreement entered into between you and us.

Providing our services and products

We process your data to provide our services and products, contact you about our platform and hold demos, workshops and other services that can be booked through the website.

We also process your data to give you access and enable you to log in to your account, send you notifications, register and identify you as a customer or user, process your payment, activate account and product features, and store the actions you take when using our product and website. We use it to answer your questions and provide customer service and support, including service-related messages.

The data we process includes:

  • Your contact details, such as name, email, job title and phone or mobile number
  • The company you work for, including its domain, address and country
  • Billing history
  • Your requests, such as signing up for and using our product, when you accepted our terms and conditions, when you registered, requested a demo or contacted us for support
  • The content of any email you send us
  • Login details and verification
  • The choices you made when creating your account or becoming a customer, and your user role when logging in to our product
  • Other interactions with us and our service, such as customer support, account and product setup, user interviews, UX research and customer feedback
  • Information about how you use our product and which services you and your company subscribe to

Legal basis: Your consent (GDPR Article 6(1)(a)); performance of our contract with you (GDPR Article 6(1)(b)); compliance with our legal obligations (GDPR Article 6(1)(c)), including the Danish Marketing Practices Act and Bookkeeping Act; pursuit of legitimate business interests (GDPR Article 6(1)(f)); and the establishment, exercise or defence of legal claims where necessary (GDPR Article 9(2)(f)).

Retention: Data is retained for as long as you use our product or services or have an account with us, plus five years after your account or relationship with us ends. If you are employed by one of our customers, we retain your data for as long as we have a business relationship with that customer.

Sources: Directly from you; publicly available online sources, such as social media (LinkedIn); public authorities; banks.

Marketing

We process your data for marketing purposes, including sending newsletters, holding demos and webinars, tailoring our communications to your interests and sending relevant product and service offers.

We do not process sensitive information.

The data we process includes:

  • Your contact details, such as name, email, job title and phone or mobile number
  • The company you work for, including its domain, address and country
  • Purchase history, interests and use of our digital services
  • Which newsletters you have subscribed to, when you asked to receive email marketing and when you requested a demo
  • When you gave consent
  • Which events you attended or registered for

Legal basis: Your consent (GDPR Article 6(1)(a)); pursuit of legitimate business interests (GDPR Article 6(1)(f)).

Retention: We retain your data for as long as you subscribe to our newsletters, email marketing and similar communications. If you ask to unsubscribe, we retain your data for two years after your request. We retain your information for up to two years after our most recent contact with you. For events, seminars, courses and similar activities, we retain your personal data for as long as necessary for their purposes and evaluation.

Sources: Directly from you; publicly available online sources, such as social media (LinkedIn).

Improving, optimising or changing the experience on our website, online service and apps

We process your data to improve and optimise the experience on our website, in our services and in our product. We use the data to operate our services, improve and protect their security, ensure safe, reliable and robust performance, improve the content we show you, determine which content is most useful and improve the usability of our website, apps and online services.

The data we process includes:

  • When you visit our website, our servers may automatically log the standard data provided by your browser. This includes your computer’s IP address, browser type and version, user agent, the pages you visit, the time and date of your visit, time spent on each page and other details
  • Cookie information: we use cookies and similar technologies to collect additional website usage data and operate our services
  • Information we receive when you interact with our services, for example by visiting our websites, logging in to your account or interacting with email subscriptions

Legal basis: Your consent (GDPR Article 6(1)(a)); compliance with our legal obligations (GDPR Article 6(1)(c)), including the Danish Marketing Practices Act and the ePrivacy Directive; pursuit of legitimate business interests (GDPR Article 6(1)(f)).

Retention: We retain this data for up to two years. Cookie information is retained in accordance with the cookie policy.

Business and product development

We process your data for data analysis, audits, development of new products and services, identifying usage trends, determining the effectiveness of our advertising campaigns, and operating and expanding our business activities.

The data we process includes:

  • Your contact details, such as name, email, job title and phone or mobile number
  • The company you work for, including its domain, address and country
  • How you use our products and services
  • Purchase history, interests and use of our digital services

Legal basis: Performance of our contract with you (GDPR Article 6(1)(b)); pursuit of legitimate business interests (GDPR Article 6(1)(f)).

Retention: We retain data processed for this purpose for as long as you have an account with us, plus up to three years from the time you stop using our services.

Statistics

We process your data to compile statistics about the use of our website.

The data we process includes:

  • When you visit our website, our servers may automatically log the standard data provided by your browser. This includes your computer’s IP address, browser type and version, user agent, the pages you visit, the time and date of your visit, time spent on each page and other details
  • Cookie information: we use cookies and similar technologies to collect additional website usage data and operate our services

Legal basis: Your consent (GDPR Article 6(1)(a)); pursuit of legitimate business interests (GDPR Article 6(1)(f)).

Retention: We retain your data for up to two years from the time you visited our website and/or used our services and products.

Compliance with obligations

Data is processed to comply with legal obligations and requirements, requests from public and government authorities, relevant industry standards and our internal policies, and to protect our operations and rights.

The data we process includes:

  • Your contact details, such as name, email, job title and phone or mobile number
  • The company you work for, including its domain, address and country
  • Information needed to comply with requirements from public and government authorities
  • Purchase history and use of our digital services

Retention: The retention period is based on statutory requirements.

Additional information

We do not sell or rent your data to marketers or third parties.

Some of these grounds for processing your data overlap, so there may be more than one ground that justifies our processing.

We may also use your data in other ways, but we will inform you of those purposes when we collect your data.

If you would like more information about our legal bases for processing your data, please contact us using the details at the start of this policy.

Please note that particular circumstances or legal requirements may mean these periods are shorter or longer, depending on the need to comply with requirements to delete or retain information.

Protecting your data

We use reasonable organisational, technical and administrative measures to protect your data within our business.

The internet is not a completely secure environment, so we cannot guarantee the security of the data you send us. Emails sent over the internet may not be encrypted, so we advise you not to include confidential or sensitive information in your emails to us.

Third parties and data processors

We use companies (data processors) to help us deliver our services, for example by providing our product’s hosting environment, sending newsletters, helping us operate our website and administering payments.

When we use a data processor, we make sure a legal agreement is in place covering how it handles data on our behalf. We also make sure appropriate security measures are in place. If the processor is outside the EU, we make sure a legal agreement allows us to give it access to the data.

We share your personal data with:

  • Suppliers and partners we work with to support our business, including service providers, technical support, utility services and financial institutions
  • Group companies
  • Public authorities
  • HubSpot as our CRM system
  • Mailchimp for sending emails
  • Wistia for hosting customer webinars
  • Meta for marketing purposes
  • And others: the list may change, so the above should be seen as illustrative examples of the types of suppliers and partners we use

If we are involved in a bankruptcy, merger, acquisition or reorganisation, your personal data may be transferred as part of that transaction. This policy will continue to apply to your information after it has been transferred to the new entity.

Transfers to countries outside the EU/EEA

In certain cases, we transfer your data to the following country outside the EU/EEA:

  • The United States

The country in question has not been assessed by the European Commission as providing an adequate level of personal data protection. We will ensure appropriate safeguards for the transfer through the European Commission’s Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914 of 4 June 2021) or another contractual arrangement approved by the competent authorities.

You can obtain a copy of the contract or agreement by contacting hej@rumli.com.

Your rights

You have the following rights:

  • Your right of access and rectification: You may ask us for copies of your personal data or ask us to correct information you believe is inaccurate.
  • Your right to erasure: You may ask us to delete your personal data in certain circumstances.
  • Your right to withdraw consent: If processing is based on your consent, you may withdraw it at any time by emailing hej@rumli.com.
  • Your right to restrict and object to processing: You may ask us to restrict the processing of your information and have a corresponding right to object to processing.
  • Your right to data portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format.
  • Where your personal data is processed for direct marketing, you may object to that processing at any time.

We will respond to your request within one month of receipt. This period may be extended by a further two months if your request is particularly complex.

Complaints

You may always lodge a complaint with a European data protection authority, such as the Danish Data Protection Agency (Datatilsynet):

How do I unsubscribe from email marketing?

If you have subscribed to our newsletters or asked to receive marketing material, you may unsubscribe at any time. All these emails contain an unsubscribe link, which you can click to unsubscribe easily. You can also email hej@rumli.com.

Children and our services

Our services and website are not directed at children. You may not use our services if you are under 18.

Changes to this policy

We sometimes need to change this policy to reflect our current practices. We will take reasonable steps to inform you of changes through our website. If you are a registered user, we will notify you by email of material changes to the policy.

This policy was last updated on 11 March 2026.

Questions about your data?

If you have questions about our privacy policy or would like to exercise your rights, you are always welcome to contact us.

Contact usRead our DPA