Privacy Policy of omniabpm.com

This Privacy Policy describes how we collect, use, and protect users’ Personal Data. It applies to all users of the site.

Owner and Data Controller

Omnia BPM S.r.l.
Represented by its legal representative for the time being
Address: Via Catone, 3, 00192 Rome (RM) – ITALY
VAT Number: 14223601007
Contact: amministrazione@omniabpm.com
Certified Email (PEC): info@pec.omniabpm.com

Data Protection Officer (DPO)

The Data Controller has not appointed a Data Protection Officer (DPO), as the conditions for such an appointment under Article 37 of the GDPR are not met.

Types of Data collected

omniabpm.com may process—including through third parties—various categories of Personal Data, such as: first name, last name, email address, phone number, usage data, cookies, and other tracking tools.

Details regarding the categories of data processed for each specific purpose are provided in the relevant sections of this Privacy Policy. Additional, specific information may be provided prior to the collection of such data.

Personal Data may be provided directly by the User—for example, by filling out forms or making purchases—or collected automatically during the use of the site, to the extent strictly necessary for the stated purposes.

Unless otherwise specified, the requested data is necessary to provide the service requested by the User. Failure to provide such data may make it impossible to deliver the service. Data marked as optional may be omitted without affecting the availability of the primary service.

Any use of cookies or other tracking tools is carried out for the purposes described in this Privacy Policy and in the Cookie Policy (where available).

The User is responsible for any third-party Personal Data shared or communicated through the site and warrants that they have the right to process or disclose such data, thereby indemnifying the Data Controller against any liability toward third parties.

Mode and place of processing the Data

Methods of processing

The Data Controller implements appropriate technical and organizational measures to ensure a level of security commensurate with the risk (Art. 32 GDPR), including protection against unauthorized access, disclosure, alteration, or accidental destruction of Personal Data.

Data processing is carried out primarily using electronic and automated tools, in a manner strictly aligned with the purposes set out in this privacy policy.

Access to the Data is granted to authorized internal personnel and technical service providers appointed as Data Processors (a list is available upon request).

Legal basis of processing

Processing is based on one of the following conditions (Art. 6 GDPR):

  • the User’s consent;
  • performance of a contract or pre-contractual measures;
  • compliance with legal obligations;
  • the Data Controller’s legitimate interest.

The specific legal basis for each processing activity is indicated in the relevant sections.

Place

Data is processed at the Data Controller’s premises and/or at the premises of the appointed Data Processors. Transfers outside the EU take place subject to appropriate safeguards (Articles 45–46 of the GDPR), as indicated in the specific snippets.

Retention time

Data is retained for the time necessary to fulfill the purposes of the processing:

  • Contacts/Newsletter: until consent is withdrawn or for 24 months from the last contact;
  • Statistics: 26 months (Google Analytics) or until deletion;
  • Hosting/Backup: duration of the contract + 1 year;
  • Other: as specified in the relevant snippets or as required by law.

At the end of this period, the data is deleted or anonymized, subject to any legal obligations.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following purposes:

  • Contacting the User;
  • SPAM protection;
  • Analytics;
  • Interaction with external social networks and platforms;
  • Displaying content from external platforms;
  • Hosting and backend infrastructure;
  • Tag Management;
  • Remarketing and behavioral targeting.

For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User

Contact form (omniabpm.com)

By filling in the contact form with their Data, the User authorizes omniabpm.com to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal Data collected: surname, name, email, company, phone number.

Phone contact (omniabpm.com)

Users that have provided their phone number might be contacted for commercial or promotional purposes related to omniabpm.com, as well as for fulfilling support requests.

Personal Data processed: phone number.

SPAM protection

These services analyze site traffic to filter out SPAM content and protect against automated abuse.

Google reCAPTCHA

Google reCAPTCHA is an anti-SPAM protection and human verification service.

Personal Data processed: usage data, cookies.

Place of processing: Ireland – Privacy Policy. Transfers outside the EEA are governed by Articles 45–46 of the GDPR.

Hosting and backend infrastructure

These services host data, files, and infrastructure required for the operation and distribution of the website.

Amazon Web Services (AWS) (Amazon Web Services, Inc.)
Hosting and cloud infrastructure service.

Personal Data processed: usage data.

Place of processing: Germany – Privacy Policy.

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics 4 (Google Ireland Limited)

Google Analytics 4 is a web analytics service. IP addresses are anonymized by default (details).

Personal Data processed: usage data, browser/device information, approximate location (city), session/user statistics, cookies.

Place of processing: Ireland – Privacy Policy. Manage preferences. Transfers outside the EEA (GDPR Articles 45–46).

Google Ads conversion tracking (Google Ireland Limited)

Connect Google Ads data with actions taken on the website to track conversions.

Personal Data processed: usage data, cookies.

Place of processing: Ireland – Privacy Policy. Transfers outside the EEA (GDPR Articles 45–46).

Interaction with external social networks and platforms

These buttons/widgets allow for direct interaction with social networks and external platforms from the site’s pages.

X (X Corp.) buttons/widgets

Services for interaction with X (formerly Twitter).

Personal Data processed: usage data, cookies.

Place of processing: United States – Privacy Policy. Transfers outside the EEA (GDPR Articles 45–46).

LinkedIn buttons/widgets (LinkedIn Corporation)

Services for interaction with LinkedIn.

Personal Data processed: usage data, cookies.

Place of processing: United States – Privacy Policy. Transfers outside the EEA in accordance with Articles 45–46 of the GDPR.

YouTube buttons/widgets (Google Ireland Limited)

Services for interaction with YouTube.

Personal Data processed: usage data.

Place of processing: Ireland – Privacy Policy. Transfers outside the EEA (GDPR Articles 45–46).

Displaying content from external platforms

These services integrate content (fonts, maps, videos) hosted on external platforms into the site’s pages.

Google Fonts (Google Ireland Limited)

Web font service provided via CDN.

Personal Data processed: usage data.

Place of processing: Ireland – Privacy Policy. Transfers outside the EEA (GDPR Articles 45–46).

Font Awesome (Fonticons, Inc. )

Icon and web font service.

Personal Data processed: Usage Data.

Place of processing: United States – Privacy Policy. Transfers outside the EEA: GDPR Articles 45–46.

YouTube Video Widget (Google Ireland Limited)

Displaying embedded YouTube videos.

Personal Data processed: usage data, cookies.

Place of processing: Ireland – Privacy Policy. Transfers outside the EEA (GDPR Articles 45-46).

Remarketing and Behavioral Targeting

These services manage code tags and track users for remarketing and personalized targeting.

Google Tag Manager (Google Ireland Limited)

Centralized management of analytics and advertising tags.

Personal Data processed: usage data, cookies.

Place of processing: Ireland – Privacy Policy. Transfers outside the EEA under GDPR Articles 45–46.

Google Ads Remarketing (Google Ireland Limited)

Remarketing through DoubleClick Cookies and Customer Match/Similar Audiences. Opt-out: Ad Settings.

Personal Data processed: usage data, cookies, email address/phone number (Customer Match).

Place of processing: Ireland – Privacy Policy.

User Rights

Users may exercise the rights provided for under Articles 15–22 of the GDPR by contacting the Data Controller using the contact details provided at the beginning of this policy.

In particular:

  • Right of access (Article 15): confirmation of processing and access to data;
  • Right to rectification (Article 16): correction of inaccurate data;
  • Right to erasure (Article 17): deletion of data;
  • Right to restriction of processing (Article 18): restriction of processing;
  • Right to data portability (Article 20): receipt of data in an interoperable format;
  • Right to object (Article 21): objection to processing;
  • Right to withdraw consent (Article 7): withdrawal of previously given consent.

A response will be provided within 1 month (which may be extended to 3 months). Complaints may be submitted to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Further Information on Data Processing

Legal Defense

The Data Controller may use Personal Data in legal proceedings to defend against abuse involving the use of the website/services. The Data Controller may disclose such data upon order of public authorities.

Specific Privacy Notices

Upon request, we provide additional privacy notices concerning specific services or particular processing activities.

System Logs and Maintenance

For maintenance purposes, we collect system logs (including IP addresses) through omniabpm.com or third-party services.

Information Not Contained in This Policy

Please contact the Data Controller for further details regarding data processing activities.

“Do Not Track” Requests

We do not support “Do Not Track” requests. Please refer to the privacy policies of third parties.

Changes to This Privacy Policy

Changes will be notified on this page and, where possible, through the User’s contact details. Please refer to the date of the latest update at the bottom of this page. For processing activities based on consent, new consent will be obtained.

Definitions and Legal References

Personal Data: information that identifies or makes an individual identifiable.

Usage Data: data collected automatically while using omniabpm.com, including IP address, browser, operating system, timestamps, and pages visited.

User: the person using omniabpm.com.

Data Subject: the natural person to whom the Personal Data relates.

Data Processor: the entity that processes data on behalf of the Data Controller.

Data Controller: the entity that determines the purposes and means of processing Personal Data.

Cookie: a small piece of data stored on the User’s device.

This Privacy Policy has been prepared in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Last updated: October 5, 2026