PRIVACY POLICY
1. DATA CONTROLLER IDENTITY
The data controller responsible for the processing of personal data is:
Luca Simonetti – RUNBIS
Sole trader
Address: Avenida Diagonal 534, Entresuelo, 08006 Barcelona (Spain)
Contact email: privacy@runbis.com
The controller complies with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
2. PURPOSES OF PROCESSING
Personal data is processed for the following purposes:
- Request and contact management: responding to forms, scheduling calls, and managing incoming requests
- Commercial management: lead tracking and sending commercial communications related to consulting services
- Service delivery: execution of contracts, administrative, accounting, and billing management
- Analysis and service improvement: website usage measurement and behavioral analysis
- Advertising and remarketing: management of advertising campaigns and conversion tracking
- Security: fraud prevention and system protection
3. LEGAL BASIS
The legal bases for processing are:
- Consent: for forms, commercial communications, and non-essential cookies
- Contract performance or pre-contractual measures: provision of requested services
- Legitimate interest: B2B commercial prospecting and service improvement
- Legal obligation: compliance with tax, accounting, and administrative regulations
4. DATA PROCESSED
The following categories of data are processed:
- Identification data: name, surname
- Contact data: email, phone number
- Professional data: company, position
- Commercial data: information provided through forms
- Economic data: data necessary for billing
- Technical data: IP address, cookies, device identifiers
5. DATA SOURCES
Data may be obtained from:
- Web forms
- Direct contact from the data subject
- Publicly accessible sources (in the case of B2B prospecting)
6. DATA RETENTION
Data will be retained for the following periods:
- Leads and commercial contacts: up to 24 months from last contact
- Clients: during the contractual relationship and up to 6 years due to legal obligations
- Data for commercial communications: until consent is withdrawn
- Technical data and cookies: as established in the Cookie Policy
7. RECIPIENTS
Data will not be disclosed to third parties unless required by law.
However, data may be accessed by service providers acting as data processors, such as:
- Hosting services
- CRM tools
- Email marketing platforms
- Analytics tools (e.g., Google Analytics)
- Advertising platforms (e.g., Meta Ads, Google Ads)
8. INTERNATIONAL TRANSFERS
Some providers may be located outside the European Economic Area.
In such cases, an adequate level of protection is ensured through:
- Adherence to the Data Privacy Framework
- Execution of Standard Contractual Clauses approved by the European Commission
9. USER RIGHTS
The user may exercise the following rights:
- Access
- Rectification
- Erasure
- Objection
- Restriction of processing
- Data portability
The user also has the right to:
- Withdraw consent at any time
- Not receive commercial communications
- Lodge a complaint with a supervisory authority
10. SUPERVISORY AUTHORITY
The user may file a complaint with:
Spanish Data Protection Agency (AEPD)
www.aepd.es
11. DATA SECURITY
RUNBIS applies appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.
12. COOKIES
The use of cookies is regulated in the corresponding Cookie Policy.
13. MODIFICATIONS
RUNBIS reserves the right to modify this policy to adapt it to legal or operational changes. The current version will be the one published on the website.