Privacy Policy

1. Data controller

The data controller is OM Software S.r.l., with registered office at Via Mazzini 3/C, 20063 Cernusco sul Naviglio (MI), Italy, tax code and VAT number 14626500962.

For any request concerning the processing of personal data, you can write to info@om.software.

The controller has not appointed a Data Protection Officer (DPO), as one is not required for its activities.

2. Scope of this notice

This notice covers the om.software website. OM Software’s apps have their own privacy notices, available on their store pages and inside the apps.

3. Data processed, purposes and legal bases

a) Browsing and site security. To serve the pages, the server hosting the site automatically records some technical data for each request: IP address, date and time, page requested, browser and operating system. It is used only to deliver the site and protect it from abuse. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR). Retention: for the short period set by the hosting provider, unless needed to investigate wrongdoing.

b) Email enquiries. When you write to the addresses published on the site, you share your email address and whatever the message contains. This is used only to reply. Legal basis: pre-contractual steps taken at your request, or the legitimate interest in replying (Art. 6(1)(b) and (f) GDPR). Retention: for as long as needed to handle the request; if a contract follows, for the periods required by law.

c) Usage statistics, only with consent. If you accept, the site enables Vercel Web Analytics and Vercel Speed Insights, which record in aggregate form: page visited, referring page, approximate location, operating system, browser, device type and loading times. They use no cookies; visitors are recognised only by a temporary code derived from the request, which is discarded after 24 hours and cannot be used to identify them. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which can be withdrawn at any time. Retention: in aggregate form only, under Vercel’s policies.

d) Preferences saved on your device. Your chosen theme and your choice about statistics stay in your browser’s storage and are not sent to the controller. Details are in the Cookie Policy.

The site has no contact forms, requires no registration and does not process special categories of data.

4. Search indexing tools

The controller uses Google Search Console (Google Ireland Limited) and Bing Webmaster Tools (Microsoft Corporation) to check how the site appears in their search engines. These tools install nothing on the site and collect no data from visitors while they browse it: they only give the controller aggregated data about searches made on the engines, which Google and Microsoft process as independent controllers.

Privacy notices: Google · Microsoft.

5. Recipients

• Vercel Inc., which hosts the site and provides the statistics service, as a data processor (Art. 28 GDPR).

• Hostinger International Ltd (Larnaca, Cyprus), which manages the controller’s domain and mailbox, for email enquiries, as a data processor (Art. 28 GDPR). Hostinger’s privacy notice.

• Advisers and authorities, only where required by law.

Data is never sold, passed on or used for advertising.

6. Transfers outside the European Union

Emails are handled by Hostinger, a company based in the European Union, so no transfer outside the EU takes place for them. Vercel Inc. is based in the United States. Transfers rely on the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, in which Vercel participates, and on standard contractual clauses. Google and Microsoft also participate in the Data Privacy Framework; the list of certified companies is public.

Vercel’s privacy notice: vercel.com.

7. Whether data must be provided, and automated decisions

Providing data is optional: without consent the site works in full, just without statistics. No decisions are made solely by automated means and no profiling takes place (Art. 22 GDPR).

8. Your rights

At any time you can:

• access your data and receive a copy (Art. 15);

• ask for it to be corrected (Art. 16) or erased (Art. 17);

• ask for processing to be restricted (Art. 18);

• receive your data in a structured format or have it sent to another controller (Art. 20);

• object to processing based on legitimate interest (Art. 21);

• withdraw consent to statistics, without affecting processing already carried out, using the “Cookie preferences” button at the bottom of every page.

Requests can be sent to info@om.software and are answered within one month. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of your own country.

9. Security

The site is served only over an encrypted connection (HTTPS). The controller applies appropriate technical and organisational measures to protect data from unauthorised access, loss and alteration.

10. Changes to this notice

This notice may be updated, for example when a new service is added or the law changes. The version in force is always the one published on this page, with the last-updated date shown at the top.