Privacy notice

Filings never leave your computer. The analysis, the model and the encryption all run locally, and no address of ours would receive a document, a filename or a detected value.

The update check sends no identifier. It is a request for a static file that is the same for everyone: it carries no email of yours, no token, no identifier for this computer. The flip side is that we do not know how many copies are installed or who has not updated, and we live with that.

The data controller is Morfex S.R.L., registered office at viale San Marco 13/B, 34074 Monfalcone (GO), Italy, VAT and tax code 01289340315.

For any request, including exercising the rights listed below, the address is info@morfex.it. We have not appointed a data protection officer: we fall into none of the cases where article 37 GDPR requires one, and writing to that address reaches the same people.

omissia.com uses no profiling cookies and loads no typefaces or scripts from third parties. Analytics only turn on with your consent, and no counts as much as yes: the site works identically either way.

This site has two technical cookies: “locale”, which remembers which language you want to read in, and “consent”, which remembers the choice you made about statistics cookies. They last a year and six months respectively, and identify nobody. The account area adds a third, “checkout”, which holds the plan you picked for the ten minutes between choosing and paying: without it the payment page would not know what you are buying.

We keep proof of that choice, because consent has to be demonstrable (art. 7 GDPR): the date, the version of the notice you saw, the random identifier that lives in the consent cookie and, **only if you accepted**, the user agent of the browser you accepted with. If you decline we do not record the browser: what remains of your choice is the no, and nothing else. The tool-by-tool detail is in the cookie policy.

Like any web server, whoever hosts the site records the request: IP address, date, page, user agent. They keep the site working and defend it from abuse; we keep them for the shortest time we can and we do not cross-reference them with anything.

updates.omissia.com serves two static files and nothing else. It sees an IP address and a user agent, like any download: there is no identifier to send, because the program does not have one.

If you sign in to app.omissia.com we handle your email address, your licence details (plan, seats, expiry) and what invoicing requires.

We handle nothing that comes from your filings, because nothing from your filings reaches us.

Performance of the contract, for the licence, the sign-in and support. A legal obligation, for invoicing and accounting retention, and for being able to demonstrate a consent we were given. Your consent, for statistics cookies: it is the only basis on which they turn on, and it can be withdrawn at any time. Our legitimate interest, for technical logs and security, to the minimum extent needed.

The account and the licence for as long as the relationship lasts, and for as long as a dispute is still possible. Tax documents for the ten years the law requires. Proof of a consent for as long as the tool it authorises is running, and for as long as the choice could be contested. Technical logs for a few days.

Only the providers we need to make this work, each appointed as a processor and bound to use the data only on our behalf: whoever hosts the site and the account area, whoever hosts the database, whoever takes payments and issues invoices, and a mail provider for sign-in messages and receipts.

We do not sell personal data, we do not hand it over for advertising, and we disclose it to nobody else except where the law requires it.

We prefer providers that handle data inside the Union. Where a transfer is unavoidable, it rests on an adequacy decision of the European Commission or on standard contractual clauses.

You may ask for access, rectification, erasure, restriction and portability, and you may object to processing. Write to info@morfex.it: we answer within a month.

If the answer does not satisfy you, you may turn to the Italian data protection authority, the Garante per la protezione dei dati personali.

If we change anything substantial we update the date at the top and, where it concerns you, we write to you.