1. Who are we?
Runa Network Limited (“Runa”) a company incorporated in England and Wales (registered number 09281949) with registered address of 1st Floor, One Suffolk Way, Sevenoaks, TN13 1YL.
Runa is a digital value infrastructure that enables people to pay and get paid by anyone, anywhere, instantly. Runa’s APIs enable you to issue, send, hold and accept digital value (such as a gift voucher) to enable the easy exchange of digital gift cards, shares, cryptocurrencies, donations and more. This website enables you to find out more information about the services that Runa offers, and to request more information on the company.
Runa
Runa is the Data Controller in respect to this website (collectively referred to as, “we”, “us” or “our” in this privacy policy).
Runa respects your right to privacy and has appointed a Data Protection Officer who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us on the details provided at the bottom of this privacy policy.
2. Collection of your personal data (LEGAL BASIS)
When you use our website or you register for an account, we may collect the following personal identifiable information (“Personal Data”):
Identity Data: First name, last name and curriculum vitae.
Contact Data: Billing address, delivery address, telephone number and email address.
Professional Data: company name, your job title, company address
Technical Data: Internet Protocol (IP) address, timezone setting and location and device data.
Usage Data: Information concerning how you use our website, products and services including cookie data - please see our Cookie Policy for more information.
Marketing and Communication Data: Your choices about how you want us to market or communicate with you about promotions etc.
Transaction Data: Details about payments you may make on our website or any refunds.
Data from other sources: Details from Google or social media provider or any other email provider you choose to use to log in to our website.
Pseudonymised, aggregated or anonymous data is not considered Personal Data as it is not personally identifiable information.
3. Use of your personal data
We only use your Personal Data in compliance with data protection laws and regulations. We will use your Personal Data in the following circumstances:
- Contract - Where we need to perform the contract we are about to enter into or have entered into with you.
- Legitimate Interest - Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Legal obligation - Where we need to comply with a legal or regulatory obligation.
Purposes for which we will use your Personal Data subject to obtaining a Legal Basis to use it:
- to register and manage your account on our website;
- to provide technical support to you;
- to send you the company’s newsletter or email notifications and updates regarding your account or purchases on our website;
- to schedule a demo meeting or case study call with one of our sales representatives;
- to obtain your opinion on your experience on our website or to publish reviews and ratings of our services and website;
- to enable you to participate in marketing campaigns, e.g. refer-a-friend;
- to help us optimise and improve our website using your Personal Data with analytics and data from search-engine providers or social media companies. If we use social media data it will be shared information which will be governed by the social media provider’s privacy notice to you;
- to provide reporting or analytics;
- to carry out any risk or fraud prevention checks; and
- to process your application for a job or role with us.
4. Consent
By consenting to this privacy notice you are giving us permission to process your Personal Data specifically for the purposes identified.
You may withdraw your consent at any time by completing a Subject Consent Withdrawal Form. This will be provided to you upon emailing our Data Protection Officer at the contact details below.
5. Disclosure of personal data to third parties
Runa may disclose your Personal Data to third parties, where necessary or required in accordance with data protection laws. These companies can only use your Personal Data in line with the law and in compliance with our specific instructions. Here is a list of Companies we may share your information with:
Runa Group companies
These companies are controlled by Runa. We may share data with other Runa group companies if they provide services to you or to us.
Third-Party Service Providers
This includes service providers, who assist us with the running of our website and business activities. These have been appointed with the appropriate safeguards in place. A list of any sub-processors can be provided to you upon request, using our contact details set out below. This list may change or grow and you can request to be notified of any changes.
Legal Compliance
We may also share your Personal Data with third parties to comply with applicable legislation. Examples of these third parties are HM Revenue & Customs, the Information Commissioner's Office, fraud prevention agencies, the police and other public authorities.
6. International transfers
Some of our external third parties are based outside of the UK and the European Economic Area (EEA) so their processing of your Personal Data will involve a transfer of data outside the UK and the EEA.
Whenever we transfer your Personal Data out of the UK or EEA, we ensure a similar degree of protection is afforded to it and it is transferred in accordance with applicable data protection laws either to third countries which have adequately safeguarded personal data, or under the European Commission approved Standard Contractual Clauses.
7. Retention period
We will retain your Personal Data for no longer than is necessary. We will generally retain Personal Data that you provide us for as long as we consider it potentially useful in contacting you about our services, as needed for our legal obligations, or to complete our contractual obligations.
In some instances, we will delete this information at an earlier date if you so request.
To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
For Newsletter subscriptions, we will retain your information until you unsubscribe from the Newsletter.
8. Protection of your personal data
We are committed to protecting your data and to ensure it remains safe and confidential. We maintain strong technical, and physical security measures, which are designed to protect your information.
We are an ISO 27001 accredited company, and actively pursue standards to ensure the security of your information.
9. Cookies
When you access and use our website we may use cookies to track, collect and aggregate information about your use. We may obtain information about your general internet usage by using a cookie file which is stored on your computer. These cookies help us to improve our website and to deliver a better and more personalised service. You can refuse to accept cookies by changing the settings on your browser. For more information about our use of cookies, please refer to our Cookies Policy.
10. Your rights as a data subject
Along with any applicable data protection laws, at any point while we are in possession of or processing your Personal Data, you, the data subject, have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review – in the event that Runa refuses your request under rights of access, we will provide you with a reason as to why.
All of the above requests will be forwarded should there be a third party involved.
To exercise any of these rights, please contact us (details set out below).
11. Complaints
In the event that you wish to make a complaint about how your Personal Data is being processed by us, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Runa’s Data Protection Officer.
12. Children
Our products are not directed to individuals under the age of 16, and we do not knowingly collect or sell the personal information of children under the age of 16.
13. Contact
Supervisory Authority contact details:
Contact Name: ICO (Information Commissioner’s Office)
Email: registration@ico.org.uk
If you want to make a complaint, you can contact them here.
Telephone: 0303 123 1113 (local rate)
Runa Data Protection Officer:
FAO: Data Protection Officer
Runa Network Limited
Address: 1st Floor, One Suffolk Way, Sevenoaks, TN13 1YL.
Email: Privacy@runa.io
Telephone: 0203880 6311
Alternatively, if you are based in the EU or EEA you may contact us at:
Runa Network GmbH
FAO: Data Protection Officer
Runa Network GmbH
Address: Address: Eschersheimer Landstraße 42 60322, Frankfurt am Main, Hessen, Germany
14. Updating the privacy policy
We may update this privacy policy. The date on the bottom indicates when it was last revised. Any changes will become effective when we post the revised policy on this page.
This page was last updated on 30/03/2023.