LEGAL
Privacy policy
Last updated 1 August 2026
This notice, given under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), explains how iMotion S.r.l., VAT 03665821207, processes personal data through the Runic service, the runic.io websites, the mobile app and the admin portal.
Controller and contact
The controller is iMotion S.r.l. For any privacy matter, including exercising your rights, write to privacy@runic.io or contact support@runic.io. Where you use Runic to track assets used by your own staff or customers, you act as controller of that location data and iMotion acts as your processor under a data processing agreement.
Data we process
Account data (name, email, telephone, company, VAT number); billing and payment data; device identifiers and SIM data; location, speed, heading, trip and event data reported by your trackers; support correspondence; and technical log data such as IP address, browser and app version.
Purposes and legal bases
Performance of the contract, to supply tracking, send the alerts you configure, operate the app and portal, take payment and provide support. Legal obligation, for invoicing, tax and accounting records. Legitimate interest, to keep the service secure, prevent abuse and improve reliability. Consent, for optional marketing communications and non-essential cookies, which you may withdraw at any time.
Retention
Location and trip history is retained for the period defined by your plan. Account and contract data is retained for the duration of the relationship and then for the ten years required by Italian tax law for accounting records. Support correspondence is kept for 24 months. On account closure, data not subject to a legal retention duty is deleted within 90 days.
Recipients and transfers
We use carefully selected processors for hosting, mobile connectivity, payment processing, invoicing, email delivery and customer support, all bound by data processing agreements. We do not sell personal data and we never share location data with insurers or other third parties without your instruction. Data is hosted in the European Union; where a processor operates outside the EEA, transfers rely on the European Commission’s standard contractual clauses.
Automated decisions
Runic does not take decisions about you by solely automated means, and does not carry out profiling that produces legal effects.
Your rights
You may request access, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest. Write to privacy@runic.io; we reply within one month. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or your local supervisory authority.
Drivers, employees and third parties
If you track vehicles used by employees or customers, you must inform them in advance, define the purpose of the tracking and respect applicable employment law, including any trade-union or works-council agreements required in your country.