Rauva's Privacy Notice

RAUVA (“We”, “Our”, “Ours”, “Us”) has procedures based on personal data protection policies that are established in accordance with EU Regulation No. 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter the “Regulation”). In this sense, this notice aims to allow the RAUVA to transmit the legally mandatory information in its capacity as Controller of the personal data collected about you as User of the RAUVA App and/or RAUVA Website.

1. DEFINITIONS:

The terms "personal data", "data subjects", "international organisation", "processing", "personal data breach", "data protection officer", "data controller" and "processor" referred to in this Privacy Notice shall correspond to the definitions provided in Article 4 of the Regulation.

In addition, the following definitions apply:

Agreement – the subscription to the Terms and Conditions of Use of RAUVA Services, which makes you or your organization a Client;
Client – a registered User which already accepted the Terms and Conditions of Use of RAUVA Services and benefits from RAUVA Services directly or as a legal representative of his/her organization;
RAUVA App – the Application made available by RAUVA in the App Store and in the Play Store (which may be downloaded free of charge by any User) that allow Clients to have access to RAUVA Services;
RAUVA Website - the website
Services – the Services provided by RAUVA to its Clients, which consist of providing, through the RAUVA App, an interface which seamlessly enables and aggregates Client's access to certain financial and business-related services of its partners, via APIs, to give to you a “one-shop” digital solution for starting and managing your business, while also offering you additional business-related tools.
User – the Clients and the natural persons who browse RAUVA's website or download and explore RAUVA's App but have not subscribed yet any RAUVA's Services.

2. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

Name: RAUVA TECHNOLOGY, UNIPESSOAL LDA.
Address: Avenida Duque de Loulé, n.o 12, 1050-090 Lisboa
Email:support@rauva.com

3. WHICH CATEGORIES OF DATA WE COLLECT ABOUT YOU?

Browsing RAUVA's Website:

We will only process cookies under the terms that you have authorised us through our Cookies’ Collection Tool and pursuant to our Cookies' Policy, which can be found on our website (www.rauva.com). In particular, and where you have expressly authorised us to do so, we may use data about your location.

If you use our online application forms, we may process the following data from you:

Identification data (first name and last name)
Contact data (email and phone number)
Nationality
Residence data
Device type
Taxpayer data (NIF)

If you use our online live-chat, we will process the following data:

Identification data (first name and last name)
Contact data (email and phone number)

We will also process the personal data you decide to share with us in the chat. Please note, however, that Rauva does not expect to process any sensitive data through the chat, including, without limitation, special categories of data as defined by articles 9 and 10 of the Regulation. We strongly advise you against using the chat for sharing any sensitive data.

Using RAUVA's App:

If you download RAUVA App, we will process the following personal data from you:

User ID
Country
Region
City
Device type
Operating system

If you register as a Client by accepting the Terms and Conditions of Use of RAUVA Services, in addition to the data pointed out above, we may also process the following personal data from you:

Login Data (email and password)
Identification data (name, surnames, passport number (or equivalent), taxpayer number, social security number)
Contact data (address, email, telephone number)
Location data (country, region, city)
Tax data (NIF, Portal das Finanças sub User ID)

We may also need to process personal data from your shareholders, partners, employees, contractors and others to provide RAUVA Services to you or to your organization (“Third-parties' Personal Data”). In that case, it is your responsibility to grant that you have obtained all necessary authorizations from those data subjects, or that you have legitimate grounds for processing their personal data and to share it with us.

4. FOR WHICH PURPOSES DO WE PROCESS PERSONAL DATA?

Performance of a contractual obligation

By subscribing to the Terms and Conditions of Use of RAUVA Services, the User is entering into an agreement with RAUVA as a Client. RAUVA therefore processes Clients' personal data strictly necessary to manage the contractual relationship between Client and RAUVA, so that Client may access the App and the Services provided therein.

If you do not provide us with the personal data required for the execution of the Agreement, we cannot provide you any of RAUVA Services.

Compliance with a legal obligation

Your personal data (and Third-Parties' Personal Data) may be used to allow RAUVA to comply with any legal obligation, including, without limitation, when RAUVA is notified by a supervisory authority or by a court for that purpose.

Consent

Sending you promotional content from RAUVA, including, but not limited to, new features and releases of RAUVA Services;

Using your location data to provide you with more accurate suggestions regarding RAUVA Partners you may wish to engage for additional Services;
Sending you promotional content on behalf of or directly through RAUVA's Partners.
You may revoke any of your consents at any time and without any need for justification by using the “unsubscribe” option in our newsletters or by removing your permission for notifications or location in your device. You can also contact RAUVA through the contact information indicated above in this Privacy Notice.

You may revoke any of your consents at any time and without any need for justification by using the “unsubscribe” option in our newsletters or by removing your permission for notifications or location in your device. You can also contact RAUVA through the contact information indicated above in this Privacy Notice.

Legitimate interest

RAUVA may also process your personal data under RAUVA's or a third party's legitimate interest. That is the case, for example, of:

Processing your data for IT security purposes;
Processing your data for RAUVA's Legal Defense;
Making your personal data available (to the extent necessary) for market surveys for total or partial acquisition of RAUVA or of its Services by a third party, by means of capital increase, credit loan or through the transfer of shares.
Processing your personal data in the live-chat to reply to any request or query you may have.

In those cases, RAUVA will always seek that its legitimate interests do not override your interests or your fundamental rights in relation to the protection of your personal data.

5. WITH WHOM WILL WE SHARE YOUR PERSONAL DATA?

While providing RAUVA Services, and namely while acting as an intermediary between Clients and RAUVA's Partners, RAUVA will have to transmit your personal data and Third Party's Personal Data to the selected RAUVA's Partners (namely, for example, your identification data, your contact data, etc.). Please note that while your data is being processed by such RAUVA's Partners, such data processing activity shall be governed by the respective privacy notice, and not by the current Privacy Notice.

Some examples of categories of recipients of your data by RAUVA are:

Affiliates	Other companies belonging to Rauva’s group of companies.
Commercial partners	Other companies engaged by Rauva to provide you with any services you select. For example: accounting partners, banking services, law firms and others. Commercial partners are usually independent controllers of your personal data and therefore you should check their privacy notices before accepting their services.
Service providers	Companies that are engaged by Rauva to provide any tasks or services on behalf of Rauva. For example: IT providers, accounting provider, legal assistance. RAUVA shall at all times procure that its suppliers adopt appropriate technical and organisational measures to protect your personal data.
Supervisory authorities and courts	We may be requested by a competent supervisory authority or court to share information about you.
Other parties in the scope of a corporate transaction	We may disclose your information to a third party in the context of a merger or transfer, acquisition or sale. It may also be necessary to share your personal data with potential buyers or investors in RAUVA. However, RAUVA will always ensure the principle of minimizing the processing of personal data and will subject any third parties accessing your personal data to confidentiality obligations.

About how we will process Third Party's Personal Data shared by you, please refer to our Data Processing Addendum in the Terms and Conditions of Use of RAUVA Services.

6. WHERE DO WE PROCESS YOUR PERSONAL DATA?

RAUVA will seek to keep all personal data processed under RAUVA's Services in the European Economic Area (“EEA”). If RAUVA needs to transfer any personal data outside of the EEA, RAUVA will favor the use of third parties' countries which have an adequacy decision in force with the European Commission with regard to the transfer of personal data (“Whitelisted Countries”). If RAUVA needs to transfer personal data processed within RAUVA Services for any non-whitelisted country, RAUVA will ensure first that it has adopted appropriate additional safeguards for such transfer, such as the adoption of the EC Standard Contractual Clauses as timely approved by the European Commission.

7. FOR HOW LONG DO WE PROCESS YOUR DATA?

All personal data will be stored by RAUVA in accordance with the regulations in force to ensure compliance with legal obligations by RAUVA, to enable RAUVA to provide its services or to exercise its legal defense rights.
If the User does not access the Services for a period exceeding twelve (12) months, RAUVA holds the right of deleting such User's data, unless RAUVA considers that such records are necessary for the exercise of RAUVA's legal defense or other rights or obligations.

If you need to obtain further information regarding the storage periods of your data with RAUVA, please contact us through any of the contact details in 2 above.

8. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

Right of access

You have the right to request information from RAUVA about the personal data we process about you.

Right to rectification

You have the right to request RAUVA to rectify your personal data if they are incorrect, as well as the right to complete such data if and when incomplete. However, we remind you that through the "My Account" tab, you may rectify most of your identification data.

Right to portability

Where RAUVA processes personal data about you by automated means or on the basis of your consent or within a contract, you have the right to ask RAUVA for a copy of that personal data in a structured, commonly used and machine-readable format, or to request it to be transferred to another controller indicated by you.

Right to erasure

You may request RAUVA to erase your personal data. Please note, however, that such erasure may not be immediate where RAUVA wishes to safeguard any of its rights of defense. We will always keep evidence regarding your request for erasure.

Right to object

You have the right to object to the processing of your personal data where RAUVA bases the processing on the legitimate interest of RAUVA or a third party.

Right to restriction of processing

You may request the limitation of the processing of your personal data when you contest their accuracy, consider that the processing is unlawful (and you have not requested their erasure), understand that they are no longer necessary for the processing purposes described by RAUVA in this Privacy Notice or when you have objected to their processing and until deciding on the legitimacy or otherwise of their processing by RAUVA.

Right to not be subject to automated decisions

The use of the online application forms and its output shall not qualify as an automated decision as per the Regulation. The User is always granted with the right to request to RAUVA a manual assessment or reassessment of their qualification criteria.

9. HOW CAN YOU EXERCISE YOUR RIGHTS?

If you believe RAUVA has not complied with any of the personal data processing provisions of this policy or of the Regulation, or in case you wish to exercise any of your rights, you can contact RAUVA by any of the contact details referred in 2 above.

You may always fill a complaint before a data supervisory authority if you feel your requests have not been properly addressed. You may find a list of all data protection authorities in Europe here.
Please note that RAUVA reserves the right to, at any time, amend, update, revoke or replace this Privacy Notice. If the amendments are material, we will provide you with a prior notice.

Version dated of April 2023