Entune B.V. Privacy Statement

Entune B.V. develops smart, scalable solutions for building management and energy optimization. We process personal data when you visit our website or use our products, such as BuildingAI, Optimizer, or Co-Operator.


Contact details:

Entune B.V.

Flight Forum 3360

5657 EW Eindhoven

info@Entune.nl


Chamber of Commerce (KvK) number: 84535415

We obtain your personal data in the following ways:

1. Directly from you
For example, when you sign up for a demo, contact us via the website, or use one of our software solutions, such as BuildingAI, Optimizer, or Co-Operator.

2. Automatically when using our services
When you visit our website or use our applications, we automatically collect technical data, such as your IP address, browser type, device ID, time of visit, and click behavior. This is done, among other things, via cookies (see our cookie policy).

3. Via your organization or employer
If your organization is an Entune customer, we may receive your personal data in the context of the contract with that organization, for example, for building management or user management within a platform.

4. Via third parties
Sometimes we receive data from partners or service providers, for example, in the context of installing or integrating our software into your building or system.

We may process the following categories of personal data:

* Contact details (name, email, phone number)
* User data (service usage, preferences)
* Technical data (IP address, device IDs, browser type)
* Building-related data that may be indirectly traceable to individuals (such as climate data linked to workspaces)
* Financial data
* Log files of interactions with our products
* Where applicable: sensor and usage data from smart buildings (e.g., data from occupancy sensors, CO₂ sensors)
* Where applicable: the texts or instructions (prompts) you enter when using our AI assistant

The exact personal data we process depends on the situation.

We do not store data longer than is necessary for the purpose for which we process your data. If we no longer need your personal data for that purpose, we will delete it, unless we are required to retain your data for a longer period. For analytical purposes, data is anonymized as soon as possible.

In principle, we do not share personal data with other parties unless it is necessary for our services or we are legally required to do so. We may share data with processors, such as our IT service providers, external consultants, or partners.

Itility B.V. is one such partner with whom we may share your data. Together with Itility, we develop and optimize our products and technology. In this context, Itility may have access to personal data, for example, for development, testing, or technical management purposes. We have made appropriate agreements with Itility to ensure the protection of your personal data.

International transfers

We may share personal data within the Netherlands, within the EEA, or sometimes outside of it. Personal data is processed outside the EEA as little as possible, and only if a transfer mechanism is in place and we have assessed that the transfer complies with applicable laws and regulations.

Within Entune, only employees have access to your personal data to the extent necessary for the performance of their duties. These employees are specifically authorized for this access and are bound by contractual and legal confidentiality obligations. Furthermore, they have signed a non-disclosure agreement and are trained in handling personal data with care.

Entune takes appropriate technical and organizational security measures to protect your personal data. We do this in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR). This allows us to minimize the risk of loss, destruction, misuse, unauthorized access, unwanted disclosure, and alteration of your data.

Examples of measures taken by Entune include:

* Encryption of data during storage and transmission (e.g., TLS/SSL)
* Firewalls and monitoring to protect against unauthorized access
* Network segmentation to limit data flows
* Secure hosting and regular penetration testing (where applicable)
* Use of a reliable SSL certificate for our websites and applications

Entune also ensures the security of personal data at an organizational level, including through:

* Access restrictions: only authorized employees are granted access to personal data, based on role and task allocation
* Non-disclosure agreements for all employees
* Regular evaluation of authorization and access policies
* Logging and auditing of access and modification actions

Do you think your data at Entune is not properly secured? Do you have indications of misuse? Please contact us using the contact details at the bottom of this privacy statement.

When we process your personal data, you have a number of rights under the General Data Protection Regulation (GDPR). You can exercise these rights by contacting us using the contact details at the bottom of this privacy statement.

* Right of access: You can request to see which of your personal data we are processing. This allows you to verify that we are using your data lawfully and correctly.

* Right to rectification: If your personal data is incorrect or incomplete, you can ask us to correct or supplement it.

* Right to erasure (right to be forgotten): In certain situations, you can request that we delete your personal data. For example, if we no longer need it for the purpose for which it was collected.

* Right to restriction of processing: You can request that we temporarily limit the use of your personal data, for example, while an objection or correction request is being reviewed.

* Right to data portability: You have the right to receive your data from us in a structured, commonly used, and machine-readable format. You can also ask us to transfer this data directly to another organization.

* Right to object: You can object to the processing of your personal data if we do so on the basis of a legitimate interest.

* Right to withdraw consent: Have you previously given us consent to process your personal data? You can withdraw that consent at any time. From that moment on, we will no longer process your data, unless we have another legal basis for doing so.

You can file a complaint regarding the processing of your personal data by sending an email to info@entune.nl.

We are committed to working with you to find a solution for any complaints or concerns you may have regarding the protection of your personal data and your privacy. If you feel that we have been unable to assist you with your complaint or question, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Do you have a question about the processing or security of your personal data? Please submit it via:

* Contact form on the website
* Email: [info@entune.nl](mailto:info@entune.nl) Attn: Privacy Officer
* Mail: Entune B.V., Attn: Privacy Officer, Flight Forum 3360, 5657 EW Eindhoven