Privacy policy

Osmosia, a French société par actions simplifiée (SAS), SIREN 988 882 221, with its registered office at 6 rue Auguste Brizeux, 44000 Nantes, France. Contact: privacy@osmosia.io.

Osmosia acts in two distinct capacities, which are important not to confuse.

Data controller for the data of osmosia.io visitors and of the people who contact us: prospects, clients, candidates. This is the subject of the present policy.

Processor, within the meaning of Article 28 of the GDPR, for the data of potential buyers processed as part of the service. The controller then remains the automotive professional using Osmosia. Such processing is governed by the data-processing agreement entered into with them.

Osmosia has not appointed a data protection officer. Any question relating to data can be sent to privacy@osmosia.io.

Data you provide to us. Last name, first name, company, professional email address, phone, stated need, context and lead volume. Required fields are marked in our forms. The others are optional and their absence does not prevent us from handling your request.

Browsing data. Aggregated traffic data, without cookies and without any individual identifier.

Data from the service. The content of exchanges with potential buyers, qualification elements and associated scores. This data is processed on behalf of our client, under the conditions in section 1.

Our legitimate interests are to maintain a reliable service, to ensure its security, and to make our offer known to professionals in the automotive sector. You can object at any time to processing based on this legal basis.

Your data is never sold, rented or transferred to third parties for commercial purposes.

The Osmosia service assigns a qualification score to leads to help the seller prioritise their follow-ups.

This score is a decision-support tool. It produces no legal effect on the individuals concerned and does not deprive them of entering into a contract: the commercial decision, including whether or not to contact a potential buyer, remains taken by a human being. No solely automated decision within the meaning of Article 22 of the GDPR is carried out.

Some of our subprocessors are established outside the European Union, notably in the United States. These transfers are governed by the standard contractual clauses adopted by the European Commission and, where applicable, by the recipient's certification under the Data Privacy Framework.

The details of the safeguards applicable to each transfer are provided on request at privacy@osmosia.io.

When we process, on behalf of our clients, messages sent by potential buyers, this data comes from the automotive listings platforms on which our clients publish their vehicles.

Informing these individuals is the responsibility of the controller, i.e. the professional using the service, in accordance with section 1.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set directives concerning its fate after your death.

Where processing is based on your consent, you can withdraw it at any time. This withdrawal does not affect the lawfulness of processing carried out before it.

These rights are exercised by writing to privacy@osmosia.io. A response is provided within one month.

If you are a buyer who has exchanged with a professional using Osmosia, send your request directly to that professional, who is the controller of your data. If you send it to us, we will forward it.

You can at any time lodge a complaint with the French data protection authority (CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07) or at www.cnil.fr.

The site uses no audience-measurement cookies, no advertising trackers and no individual tracking tools.

Traffic is measured in aggregate, without any identifier that would recognise you from one visit to the next, under the consent-exemption conditions defined by the CNIL. No consent banner is therefore required.

Only cookies strictly necessary for the site to function may be placed.

When the service is connected to your mailbox or calendar, access is limited to what is strictly necessary for it to work.

Only the emails matching the rules you configure are forwarded. These emails remain fully available in your inbox. Forwarding can be disabled at any time. Osmosia can neither delete your calendar nor change your sharing permissions.

Osmosia's use of information received from Google APIs, and its transfer to any third party, complies with the Google API Services User Data Policy, including its Limited Use requirements.

Osmosia implements appropriate technical and organisational measures to protect personal data against any unauthorised access, loss or alteration: encryption of data in transit, access partitioning and restriction, logging of sensitive operations, and regular review of access rights.

This policy may be updated to reflect technical, contractual or regulatory changes. The date of the last update appears at the top of the page.

Any substantial change is subject to prior notice to our clients.