Last updated: September 25, 2026
Routebook is operated by Designworkplan BV, Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42018003.
For privacy-related questions, contact: hello@routebook.co.
Scope
This Privacy Notice applies to routebook.co, app.routebook.co, and related Routebook services operated by Designworkplan BV.
For personal data processed on behalf of customers, Designworkplan BV acts as a processor where applicable, as further described below.
Personal data we process
Website visits
Our systems may process standard technical information such as IP address, browser type, requested page, date and time, and security-related log information.
This information is used solely for security, availability, troubleshooting and prevention of misuse.
Technical logs are retained only for as long as reasonably necessary for these purposes.
We do not use personal data for advertising and do not sell personal data.
Email and enquiries
If you contact us, we process your name, email address and the contents of your message in order to respond to your enquiry and maintain relevant business correspondence.
Account access
Where access to Routebook has been provided, we may process information such as your name, email address, organisation, account permissions and login or security events.
This information is used to provide, administer and secure access to the service.
Legal basis
Depending on the circumstances, we process personal data on the basis of:
- performance of a contract or steps taken prior to entering into a contract;
- our legitimate interests in operating, securing and improving our services and responding to enquiries; or
- compliance with applicable legal obligations.
Hosting and security
Routebook systems are hosted in the Netherlands and European Union. The platform infrastructure used for Routebook is hosted in Amsterdam on infrastructure certified to ISO 27001 and NEN 7510. We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure.
Service providers
We may use carefully selected service providers for services such as hosting, infrastructure, email and technical operations.
Where these parties process personal data on our behalf, appropriate contractual and data-protection arrangements are in place. A current list of relevant sub-processors is available to customers on request.
Customer data and data processing
Where a customer determines the purposes and means of processing personal data within Routebook, the customer acts as the controller and Designworkplan BV acts as the processor.
Where required, the parties enter into a Data Processing Agreement in accordance with Article 28 GDPR.
The agreement addresses, among other things:
- the nature and purpose of processing;
- confidentiality;
- security measures;
- use of sub-processors;
- assistance with data-subject requests;
- data retention; and
- return or deletion of data following termination.
Customer data remains under the control of the customer and is processed only for the purpose of providing and supporting the Routebook service.
Data retention
Personal data is retained only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law or agreed with the customer.
Following termination of a customer environment, customer data can be exported during the agreed transition period. Data is subsequently deleted from the active environment and from backups in accordance with the applicable retention and backup procedures.
Your rights
Under the GDPR, you may have the right to:
- access your personal data;
- correct inaccurate personal data;
- request deletion of personal data;
- restrict processing;
- object to processing; and
- request data portability.
Requests can be sent to hello@routebook.co.
Changes
We may update this Privacy Notice from time to time. The most recent version will always be published on this page.