Privacy Policy

Unomia ("we", "us") processes personal data carefully and in accordance with the General Data Protection Regulation (GDPR). In this privacy policy we explain what data we process, why, and what rights you have.

1. Data Controller

Unomia
Nieuwe 's Gravelandseweg 27
1405 HK Bussum, The Netherlands
Email: hi@unomia.ai
Chamber of Commerce: to be registered at launch

2. What data do we process?

Depending on the context, we process the following categories of personal data:

Category	Examples	Purpose
Identification data	Name, job title, company name	Account, contract, billing
Contact data	Email, phone number, address	Service delivery, communication
Usage data	Login times, features used, IP address	Security, support, product
Payment data	IBAN (for invoice verification), billing address	Billing and collections
Newsletter data	Email address	Updates and newsletter (with consent)

Note: When your firm uses Unomia to process client data, your firm is the data controller for that client data and Unomia is the processor. We will conclude a Data Processing Agreement (DPA) with you for this purpose.

3. Legal bases for processing

• Contract (Art. 6(1)(b) GDPR) — Processing necessary for performing the Unomia service
• Legitimate interest (Art. 6(1)(f) GDPR) — Security, fraud prevention, product development, customer service
• Legal obligation (Art. 6(1)(c) GDPR) — Tax retention obligations, compliance
• Consent (Art. 6(1)(a) GDPR) — Newsletter, marketing (you can withdraw consent at any time)

4. Retention periods

• Client data: during the contract term + 7 years (statutory tax retention)
• Account data after termination: 30 days (then anonymized)
• Newsletter: until unsubscription
• Log files: 12 months
• Job application data: 4 weeks after completion of process (with consent: 1 year)

5. Third parties and sub-processors

We share personal data only with parties that are technically necessary for our service delivery. Below is an overview of our sub-processors:

SCC = Standard Contractual Clauses — legal safeguards for transfer of personal data outside the EEA. Data processing agreements have been concluded with all sub-processors.

6. Your rights as a data subject

Under the GDPR you have the following rights:

You can exercise your rights via hi@unomia.ai. We will respond within 30 days.

7. Security

We take appropriate technical and organizational measures to protect your personal data:

• Dedicated database per client on Odoo.sh (no shared multi-tenant environment)
• Encryption in transit (TLS/HTTPS) and at rest
• Two-factor authentication (2FA) available by default
• Role-based access control and audit log
• Automated backups at three geographic locations in Europe
• Security incidents are reported to the Dutch Data Protection Authority within 72 hours (where applicable)

8. Cookies

Our website uses cookies. See our Cookie Policy for a complete overview of which cookies we use and how you can manage them.

9. Complaints

Not satisfied with how we handle your personal data? Please first contact us at hi@unomia.ai. You also have the right to lodge a complaint with the Dutch Data Protection Authority:

10. Changes to this policy

We may update this privacy policy from time to time. The most current version is always available at unomia.ai/privacy. For material changes, we will notify you by email or a notice on our platform.

Last updated: September 2025

Questions about your privacy or your data?

Contact us