Privacy Notice

Controller

The controller of personal data processed in connection with this website and our services is:

run-e Software & Consulting GmbH & Co. KG& Consulting GmbH & Co. KG
Pariser Bogen 7, 44269 Dortmund, Germany
Email: contact@run-e.com
Phone: +49 231 226 175 90

Full corporate details are listed in our Imprint.

Data Protection Officer

run-e is not legally required to appoint a Data Protection Officer under Art. 37 GDPR / §38 BDSG. Data-subject requests and privacy queries are handled by the contact above.

Categories Of Personal Data Processed

We process personal data in the following contexts:

• When you visit the website. Technical access data necessary to deliver the page (IP address, user agent, request timestamp, referrer URL, requested URL). Logged by our hosting provider on our behalf.
• When you consent to analytics and visitor tracking. Page views, navigation paths, scroll depth, click events, screen size, language, an anonymised IP-derived region, and a Zoho-assigned pseudonymous visitor identifier. Collected only after you give consent through our cookie-consent banner. Processed by Zoho PageSense and (where active) Zoho SalesIQ.
• When you submit the enquiry form. The data you provide (name, work email, company, country, topic, message, optional phone) plus GDPR-consent and marketing-consent flags. Referrer URL and UTM parameters are stored as hidden fields for attribution.
• When you start a live-chat conversation (only if the Zoho SalesIQ chat widget is active on a page you visit). The contents of the chat, your declared name and email if provided, and the technical metadata of the conversation.
• When you contact us by email or phone. The contents of your communication and the metadata necessary to reply.
• When you become a customer. The additional data necessary to deliver the service contract - typically work contacts, billing details and project artefacts. Governed by the customer agreement and any data-processing addendum.
• When you subscribe to newsletters or other voluntary communications. Your email address and the consent record.

Purposes And Legal Bases (Art. 6 GDPR)

Purpose	Legal basis
Delivering the website and ensuring its security	Art. 6 (1)(f) GDPR - legitimate interest in operating a secure and functional website.
Processing enquiry-form submissions	Art. 6 (1)(b) GDPR - pre-contractual measures at your request.
Email or phone correspondence in response to your enquiry	Art. 6 (1)(b) GDPR or Art. 6 (1)(f) GDPR depending on context.
Customer-relationship management for active customers	Art. 6 (1)(b) GDPR - performance of contract.
Marketing communications where you have opted in	Art. 6 (1)(a) GDPR - consent, withdrawable at any time.
Website analytics and visitor tracking (Zoho PageSense, Zoho SalesIQ)	Art. 6 (1)(a) GDPR + §25 (1) TDDDG (formerly §25 (1) TTDSG) - consent given through our cookie-consent banner; withdrawable at any time.
Live chat (Zoho SalesIQ, where the chat widget is active)	Art. 6 (1)(b) GDPR - pre-contractual measures at your request once you initiate a conversation. The underlying tracking layer remains consent-based (see row above).
Compliance with statutory obligations (tax, commercial, audit)	Art. 6 (1)(c) GDPR.

Recipients And Processors

We share personal data only with the processors strictly necessary to operate the website and deliver our services. All processors operate under written data-processing agreements pursuant to Art. 28 GDPR.

Processor	Service	Location of processing
Amazon Web Services EMEA SARL (Luxemburg)	Hosting of the website and delivery of static assets via CDN.	EU
Zoho Corporation Pty Ltd (Australia) - contracting entity within the Zoho group	Embedded enquiry form, CRM, website analytics (Zoho PageSense) and live-chat / visitor tracking (Zoho SalesIQ). Processed under Zoho's Data Processing Addendum (Art. 28 GDPR) and Standard Contractual Clauses; Zoho publishes its GDPR compliance position at zoho.com/gdpr.html.	USA

Beyond the processors above we do not transmit personal data to third parties unless legally required (e.g. tax authorities, courts) or unless you have given specific consent.

Transfers To Third Countries

Website hosting takes place inside the EU/EEA; static assets are served through a global content delivery network (CDN) whose edge servers may also be located outside the EU/EEA. The Zoho services used on this site - the embedded enquiry form, CRM, Zoho PageSense and Zoho SalesIQ - operate on a US-hosted tenant, and Zoho’s parent operations in India may have support access. Both involve transfers of personal data outside the EU/EEA.

• Zoho group, USA (data hosting). The Zoho tenant is operated on US infrastructure within the Zoho group. The Art. 28 GDPR Data Processing Agreement is concluded with Zoho Corporation Pty Ltd in Adelaide as the Australian contracting entity within the Zoho group; data residency remains the US. Transfers are governed by the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023) where the operating Zoho US affiliate is certified, and supplemented by the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) under that DPA. We have conducted a transfer impact assessment in accordance with EDPB Recommendations 01/2020.
• Zoho support operations in India. Where Indian-based support staff need access to investigate an incident, that access is governed by the same SCCs and Zoho’s published data-protection commitments.

You may request a copy of the safeguards in place from the contact in the Controller section above.

Retention

Data	Retention
Website access logs (server-side)	30 days, then deletion or anonymisation.
Enquiry-form submissions	Until the purpose for which they were submitted is fulfilled, plus any statutory retention period. Typically up to 24 months from last contact unless a customer relationship arises.
Customer-contract data	Duration of the contract plus the statutory retention period under HGB / AO (typically 6 to 10 years).
Marketing-consent records	Until consent is withdrawn, plus 3 years of evidentiary retention after withdrawal.
Cookie-consent records (banner)	12 months from the date consent is given or refused, after which the banner is re-presented.
Zoho PageSense and Zoho SalesIQ tracking data	Per Zoho's published retention defaults for our US tenant. On withdrawal of consent, identifying cookies are purged from the browser and aggregated reporting continues only at the level that does not identify the individual.
Zoho SalesIQ chat transcripts (where chat is active)	Until the conversation purpose is fulfilled and any related enquiry is closed, plus any statutory retention period - typically up to 24 months from the last message unless a customer relationship arises.

Your Rights As A Data Subject

Under the GDPR / DSGVO you have the right to:

• Access the personal data we hold about you (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure under the conditions of Art. 17.
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Object to processing on legitimate-interest grounds, including direct marketing (Art. 21).
• Withdraw consent at any time, where processing is based on consent (Art. 7 (3)) - withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Complain to a supervisory authority (Art. 77). The competent authority for run-e is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

To exercise any of these rights, write to contact@run-e.com. We will reply within one month (Art. 12 (3) GDPR).

Mandatory Vs Voluntary Data

The fields marked as required on the enquiry form (name, work email, company, country, topic, message and GDPR consent) are necessary to respond to your enquiry. Without them we cannot meaningfully reply. All other fields - including phone number and the marketing-consent checkbox - are voluntary, and providing them or not has no consequence for the processing of your enquiry.

Automated Decision-Making

We do not use automated decision-making within the meaning of Art. 22 GDPR on this website or in our customer processes.

Cookies And Similar Technologies

This website uses cookies and similar technologies in two categories: strictly necessary (set without consent because they are required to deliver the service you have requested) and analytics (set only after you have given consent through our cookie-consent banner).

• Strictly necessary. Cookies and local-storage items required to deliver the website itself and to operate the embedded enquiry form (session integrity, anti-abuse, load-balancing). Legal basis: §25 (2) No. 2 TDDDG (formerly §25 (2) No. 2 TTDSG) - necessary for the service the user explicitly requests. No consent required.
• Analytics and visitor tracking - Zoho PageSense and Zoho SalesIQ. When you give consent through the cookie-consent banner, the Zoho tracking scripts are loaded. They set cookies that allow us to measure page views, navigation paths, scroll depth and aggregated visitor behaviour, and - when the SalesIQ chat widget is active - to associate a visitor with a chat session. Legal basis: Art. 6 (1)(a) GDPR + §25 (1) TDDDG - consent. Before consent is given, these scripts are blocked from loading and do not set any cookies. Consent can be withdrawn at any time through the same banner; withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Cookie-consent banner. The banner is provided through Zoho’s consent-management script, embedded on every page. It records your consent or refusal and re-presents the banner after 12 months or when the categories of cookies change. The consent record itself is necessary to demonstrate compliance with Art. 7 (1) GDPR (legal basis: Art. 6 (1)(c) GDPR - legal obligation).
• Static map. The map on the contact page is a pre-rendered static image. No third-party map JavaScript is loaded; no tile-server requests are made to Google Maps, Mapbox or similar services. No cookies set.

Embedded Zoho Services (Enquiry Form And, Where Active, Live Chat)

Two Zoho-hosted elements may appear on this site:

• The enquiry form on the Contact page is technically embedded as an iframe served by Zoho. When you submit the form, the data you enter is transmitted to Zoho and stored in our CRM tenant. Legal basis: Art. 6 (1)(b) GDPR - pre-contractual measures at your request.
• The Zoho SalesIQ chat widget, where active, allows you to start a live conversation with our team. Loading the widget is consent-gated together with the analytics layer (see Cookies). Opening and exchanging messages in the chat is processed under Art. 6 (1)(b) GDPR.

Both elements run on the same US-hosted Zoho tenant, under a Data Processing Agreement pursuant to Art. 28 GDPR. For further details on Zoho’s own processing as a controller in its own right, see Zoho’s privacy notice at zoho.com/privacy.html.

Server Log Files

Our hosting provider, Amazon Web Services EMEA SARL (Luxembourg), automatically records technical data in server log files when you visit the site. Processing takes place in the AWS EU region. The following fields are recorded:

• IP address (truncated where technically feasible);
• date and time of request;
• requested URL and HTTP method;
• HTTP response code and bytes transferred;
• user agent and referrer URL.

These data are processed under Art. 6 (1)(f) GDPR for the purpose of operating, securing and analysing the technical performance of the website. They are not combined with other data sources to identify individuals and are not used for analytics in the marketing sense - for that, see Cookies.

SSL / TLS Encryption

The site uses TLS encryption end-to-end. The encrypted connection can be recognised in your browser by the “https://” prefix and the padlock icon. While TLS is active, the data you transmit cannot be read by third parties in transit.

Changes To This Notice

We may update this notice from time to time to reflect changes in our processing, in the law or in the technical operation of the site. The current version is always available at this URL, with the effective date stated at the top.