Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy identifies legitimate interests as the primary legal basis for direct marketing and service improvement and analytics processing under GDPR, with consent as a secondary basis where required by applicable law for marketing communications.
This analysis describes what RunPod's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Reliance on legitimate interests as the legal basis for direct marketing and analytics processing requires documented legitimate interests assessments (LIAs) balancing RunPod's interests against data subject rights, and EU and UK users retain the right to object to processing on legitimate interests grounds under GDPR Article 21.
Interpretive note: Whether legitimate interests assessments have been completed and documented as required by GDPR cannot be confirmed from the policy text alone; this depends on internal compliance practices not disclosed in the document.
Under the GDPR section of this policy, RunPod relies on legitimate interests to process contact data, demographic data, profile data, device data, online activity data, and communication interaction data for direct marketing and service analytics purposes. EU and UK users have the right to object to this processing by contacting RunPod or through the Prighter Group portal at https://app.prighter.com/portal/19142785727.
Cross-platform context
See how other platforms handle GDPR Legal Bases: Legitimate Interests for Marketing and Analytics and similar clauses.
Compare across platforms →Monitoring
RunPod has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Direct marketing Contact data Demographic data Profile data Communications data Transactional data Marketing data [Communication interaction data] Legitimate Interests. We have a legitimate interest in promoting our operations and goals as an organisation and sending marketing communications for that purpose. Consent, in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given marketing communications. Service improvement and analytics Contact data Demographic data Profile data Device data Online activity data Precise geolocation/Location) data [Communication interaction data] Legitimate Interests. We have a legitimate interest in providing you with a good service, which is personalised to you and that remembers your selections and preferences.Excerpt from RunPod's Privacy Policy
REGULATORY LANDSCAPE: This provision directly implicates GDPR Article 6(1)(f) (legitimate interests) and Article 21 (right to object). The EU's data protection authorities (including the European Data Protection Board) have issued guidance indicating that legitimate interests assessments must be documented and that marketing may not always qualify as a legitimate interest overriding data subject rights. The UK ICO has similar guidance under UK GDPR. GOVERNANCE EXPOSURE: Medium. Reliance on legitimate interests for direct marketing is a commonly observed approach but is subject to challenge if LIAs are not documented or if the balancing test does not adequately account for data subject rights. Use of precise geolocation data under legitimate interests for analytics may attract heightened regulatory scrutiny given the sensitivity of that data category. JURISDICTION FLAGS: EU member state data protection authorities and the UK ICO have jurisdiction. Processing of precise geolocation data under legitimate interests rather than consent may face challenge in jurisdictions with stricter interpretations. For EU users, the ePrivacy Directive may separately require consent for certain marketing communications regardless of GDPR legal basis. CONTRACT AND VENDOR IMPLICATIONS: B2B customers of RunPod operating as data controllers should evaluate whether RunPod's reliance on legitimate interests for analytics processing that may involve their end users' data is adequately documented in data processing agreements. COMPLIANCE CONSIDERATIONS: RunPod's legal team should confirm that LIAs have been completed and documented for each processing purpose relying on legitimate interests, particularly direct marketing and analytics involving precise geolocation data. Opt-out mechanisms for marketing should be functionally tested to confirm they result in cessation of legitimate-interests-based marketing processing.
Reliance on legitimate interests as the legal basis for direct marketing and analytics processing requires documented legitimate interests assessments (LIAs) balancing RunPod's interests against data subject rights, and EU and UK users retain the right to object to processing on legitimate interests grounds under GDPR Article 21.
Under the GDPR section of this policy, RunPod relies on legitimate interests to process contact data, demographic data, profile data, device data, online activity data, and communication interaction data for direct marketing and service analytics purposes. EU and UK users have the right to object to this processing by contacting RunPod or through the Prighter Group portal at https://app.prighter.com/portal/19142785727.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by RunPod.