Privacy policy

1 The short version

You sign in with your work email. Your company's planning, instruments, jobs and certificates are stored in Cloudflare's EU jurisdiction. We use no analytics, advertising or tracking in the service, and we never sell personal data. You can export the planning and delete your account or company yourself.

2 Who decides about which data

Oomny B.V. provides Onvanto and is the controller for your account, sign-in data, this website and support messages. Our registration and address are on the support page.

Planning data and team data belong to your company. Your company decides what is entered and who has access; we process it to provide the service to your company.

Privacy questions and requests: privacy@oomny.eu.

3 What the service stores

• Your account. Your email address and the name you enter.
• Signing in. Sign-in codes (stored only as a hash, valid for 5 minutes), sessions (valid for 14 days) with the IP address and browser or app identification of the sign-in, and request counts per IP address to stop abuse.
• Your company. Its name, country, time zone and language, its members with their roles and technical qualification, open invitations with the invited email address, and an activity log of changes to the company and team.
• Planning. What your company enters, such as instruments, jobs, lab shipments, certificate PDFs and the planning history.

The field apps keep your sign-in token in the device's secure storage and send planning only to the service you connect. They contain no analytics or advertising.

4 Why, and on what basis

• To provide the portal and the apps to you and your company: performance of a contract (Article 6(1)(b) GDPR).
• To keep the service secure and prevent abuse, including sign-in limits and the activity log: our legitimate interest (Article 6(1)(f) GDPR).
• To answer messages you send us: our legitimate interest in responding to you.

We send email only to deliver sign-in codes. There is no profiling and no automated decision about you.

5 This website

Cloudflare processes IP addresses and request data to deliver and protect this website. Cloudflare Web Analytics counts visits and measures loading speed without cookies and without building a profile of you. The planning board on the home page runs in your browser and sends nothing.

6 Who processes data for us

• Cloudflare, Inc. hosts the service, its databases, this website and the delivery of sign-in codes.
• Microsoft 365 provides the mailbox we use to handle support and privacy requests.
• Apple and Google distribute the field apps under their own privacy policies.

Oomny staff can see account metadata (company name, country, number of members, trial date, last activity) to run the service. That view has no access to planning or documents.

7 Location and transfers

Company records and the planning are stored in Cloudflare's EU jurisdiction. Our service providers may process website, delivery and correspondence data outside the European Economic Area; such transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

8 How long we keep it

Your account stays until you delete it. A company and its planning stay until an owner deletes the company. Deletion removes the data from the active service immediately. Database recovery history at Cloudflare can still contain it for up to 30 days, after which it is gone. Support messages are kept as long as needed to handle your request.

9 Your rights

You can see and correct your name in the portal, delete your account yourself (portal: Account; apps: Settings), and an owner can delete a company with all its data. Qualified members can export the planning.

You also have the right to access, rectification, erasure, restriction, data portability and objection. Write to privacy@oomny.eu. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10 Cookies

The portal uses one essential cookie that keeps you signed in. This website uses no cookies.

11 Changes

We update this policy when the service changes and show the date above. Material changes are announced in the portal.