Privacy policy

01Who is responsible

The controller of the personal data described here is Runos Software S.R.L., Str. Buzesti nr. 10, Sector 1, 011013 Bucuresti, Romania, registered under J40/12345/2025, tax ID RO48123456. For anything related to personal data, write to contact@runos.ro.

02What this policy covers

This policy covers the runos.ro website and the demo requests sent through it.

When a hospital, clinic or other organisation uses the Runos application, that organisation decides which data about its team goes into the schedule and is the controller of that data. We process it only on the organisation's behalf, under the customer agreement and its data processing terms. Team members with questions about their data in a Runos schedule should contact their organisation.

03What data we collect

• The email address you enter when you ask for a demo, together with the date and time of the request.
• Anything you choose to send us by email afterwards: your name, role, the organisation you work for and the content of the messages.
• Technical data that the servers hosting the website record automatically for security and troubleshooting: IP address, browser type, the pages requested and the time of the request.

The website has no user accounts and does not build profiles of its visitors.

04Why we use it and on what legal basis

• To answer your demo request and arrange a walkthrough: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• To keep the website secure, available and working correctly: our legitimate interest in running the website (Article 6(1)(f) GDPR).
• To meet legal obligations, such as answering a lawful request from an authority (Article 6(1)(c) GDPR).

We do not send newsletters or marketing emails unless you ask for them, and we do not make automated decisions about you.

05Cookies

The website sets no advertising or tracking cookies and uses no analytics service. Only what is strictly necessary to serve the page is stored in your browser, which is why no cookie banner is shown.

06Who receives the data

We do not sell personal data. We share it only with providers who process it on our behalf, under contracts that bind them to the GDPR:

• Supabase, which hosts the database where demo requests are stored;
• the provider hosting the website, which records the technical data described above;
• the email service we use to reply to you.

We may also disclose data when the law requires it, for example to a court or a public authority acting within its powers.

07Transfers outside the EU

We keep the data in the European Economic Area wherever possible. Where a provider processes data outside it, the transfer relies on the safeguards of Chapter V of the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.

08How long we keep it

• A demo request is kept until the demo has been handled and for up to 12 months after our last exchange, or until you ask us to delete it, whichever comes first.
• Server logs are kept for up to 30 days.
• Correspondence connected to a contract is kept as long as the law on accounting and commercial records requires.

09Your rights

Under the GDPR you can ask us to:

• tell you whether we hold data about you and give you a copy (access);
• correct data that is inaccurate or incomplete (rectification);
• delete your data (erasure);
• limit how we use it (restriction);
• give you the data you provided in a machine-readable format (portability);
• stop processing based on our legitimate interest (objection).

To exercise any of these rights, write to contact@runos.ro. We answer within one month; if a request is complex we may extend this by two months and will tell you so.

If you believe we handle your data unlawfully you can complain to the Romanian supervisory authority, the Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro, or to the authority of the EU country where you live or work.

10Security

Data travels over encrypted connections (TLS), is stored with providers that hold recognised security certifications, and is accessible only to the people who need it to answer your request.

11Changes to this policy

We may update this policy when the website or the law changes. The current version is always published here with the date of the last revision.

12Contact

For anything related to personal data, write to contact@runos.ro or by post to Runos Software S.R.L., Str. Buzesti nr. 10, Sector 1, 011013 Bucuresti, Romania.