Omnea / Legal

Privacy Policy

Draft information for the Omnea test catalog. Operator details and the processing disclosures remain to be completed before public launch.

Version: 2026-09-15-draftLast updated: September 15, 2026

Draft notice: operator details pending

Omnea is a test vehicle catalog. The legal operator, registered address, country of establishment and privacy contact have not yet been designated. These documents are drafts, not a complete legal notice or a claim of GDPR compliance.

Before a public launch, the operator must complete its identity and contact details, confirm its processing purposes and legal bases, identify service providers and international transfers, and approve retention periods and a working procedure for privacy requests.

Information processed

Opening a page sends technical request data to the infrastructure serving it. This can include your IP address, request time, requested address and query parameters, browser headers and response status. Search filters and the selected display currency are sent to the catalog service to return the requested results.

Your browser stores language and currency preferences and temporary catalog navigation state. See the Cookie Policy for the storage names, purposes and lifetimes. Do not put private information in catalog URLs or share URLs containing it.

Vehicle listings are obtained from external listing sources and may be manually maintained. Seller names, locations or other listing details may identify individuals. The operator must confirm source-specific disclosures, lawful reuse and a correction or removal contact before public launch.

Purposes and legal bases

Technical requests and preferences support the pages, searches, currency display and exports you request. Infrastructure logs may be used to keep the service secure and investigate failures. This is distinct from tracking visitors for advertising or audience analysis.

The intended basis for necessary delivery and security processing is legitimate interests under Article 6(1)(f) GDPR, subject to the appointed operator documenting necessity, balancing those interests against your rights, and confirming the applicable basis for each activity. This draft does not establish that assessment or treat merely browsing as consent.

Analytics, advertising trackers, chat widgets and automatic client-error reports are disabled on this mirror. There is no account registration or form submission. Optional analytics will require a new notice and, where required, a separate prior opt-in; dismissing the settings notice is not that consent.

Recipients and external content

Hosting, reverse-proxy, database, object-storage and content-delivery providers support the service. Their legal identities, roles, locations and contract terms are awaiting confirmation by the operator. Necessary server logs may still contain request data even though analytics is disabled.

Some vehicle photographs can load directly from a CDN or listing provider. That provider receives the network request, including the IP address and browser headers; the referring site may also be sent according to browser policy. Following a source link opens a separate website with its own privacy practices.

Currency suppliers are queried by the server rather than by each visitor's browser. A requested PDF is generated in your browser; image retrieval and an export-number request can still reach the service. Downloaded or shared PDFs are copies outside this site's control.

International transfers

This test version does not make an EU-only hosting promise. Service-provider and remote-image requests may involve processing outside the EEA. The destinations, recipients, applicable adequacy decisions or other safeguards, and how to obtain a copy of safeguards must be documented before public launch. No standard contractual clauses or other transfer safeguards are claimed to be in place by this draft.

Retention

Browser preference lifetimes are described in the Cookie Policy. Infrastructure-log and backup retention periods have not yet been confirmed. They must be limited to the time needed for delivery, security and applicable legal obligations, with an approved deletion schedule before public launch. Log rotation alone is not a complete retention policy.

Copies that you download remain on your device until you delete them. Your browser controls the storage of cached pages, files and browsing history.

Your rights

Where GDPR applies, you may request access to your personal data, correction, erasure or restriction and object to processing based on legitimate interests. Portability applies where its legal conditions are met. Where processing relies on consent, you may withdraw it without affecting prior lawful processing. These rights have conditions and exceptions.

You may complain to a competent supervisory authority, including in the EU country of your habitual residence, workplace or alleged infringement. The operator must provide a working privacy contact before public launch; no request address or response service is available through this draft.

The request procedure must support the GDPR's normal one-month response deadline, with any permitted extension explained within that month. Identity checks should request only information necessary to verify the requester. Any required EU representative or data protection officer and their contact details must be assessed and disclosed.

Updates

Material changes to data use, providers or optional features require an updated notice. This version does not use advertising profiles or automated decisions with legal or similarly significant effects on visitors.