LEGAL & COMPLIANCE SECTION
PRIVACY POLICY
INTRODUCTION
Open Mobile Alliance (OMA) is committed to protecting your privacy and ensuring that your personal data is collected, used, stored, and protected in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
DATA COLLECTION
OMA collects personal data when you subscribe to our news, register for workshops, or engage with our services. This includes:
- Name
- Email Address
- Company
- Job Description
PURPOSE OF DATA PROCESSING
OMA processes personal data for the following purposes:
- Sending OMA news and workshop invitations.
- Providing updates on events, standards, and other OMA-related activities.
- Responding to inquiries and improving our services.
DATA RETENTION
Personal data will be retained for as long as it is necessary to fulfill the purposes outlined above or until the user requests its deletion.
DATA SHARING
OMA does not sell, share, or disclose your personal data to third parties, except as required by law.
USER RIGHTS
Under GDPR, you have the following rights:
- Right of Access: You can request information about the personal data we hold about you.
- Right to Rectification: You can request the correction of inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your data.
- Right to Restrict Processing: You can request a temporary restriction on data processing.
To unsubscribe from email notifications, use the unsubscribe link provided in our emails.
SECURITY MEASURES
OMA implements appropriate technical and organizational measures to ensure the security of your personal data.
COOKIE POLICY
INTRODUCTION
OMA is committed to ensuring transparency in how we use cookies on our website. However, we currently do not collect or store cookies from users visiting our website, and we do not plan to implement cookie tracking.
TYPE OF COOKIES
Since OMA does not use cookies, there are no types of cookies collected or stored on this website.
MANAGING COOKIE PREFERENCES
Users do not need to manage cookie preferences as OMA does not collect or use cookies.
TERMS OF USE
INTRODUCTION
By accessing and using the Open Mobile Alliance (OMA) website, you agree to comply with the following terms and conditions.
ACCEPTABLE USE
You agree to use the OMA website and its resources only for lawful purposes. You may not:
- Use the website in a way that violates applicable laws or regulations.
- Use any automated system to access or extract data from the website without authorization.
PROHIBITED ACTIONS
Users are prohibited from:
- Disrupting or interfering with the website’s functionality.
- Misrepresenting your identity when using the website.
LIMITATION of LIABILITY
OMA publishes over 10,000 documents, profile data, and registries for public use. However:
- OMA is not responsible for any misuse of its specifications.
- OMA is not liable for any loss of business resulting from the use of its specifications.
CHANGES of TERMS
OMA reserves the right to modify these terms at any time. Users are encouraged to review the Terms of Use periodically.
GDPR COMPLIANCE NOTICE
INTRODUCTION
OMA is committed to ensuring compliance with the General Data Protection Regulation (GDPR) to protect the privacy and security of personal data.
Processing LAWFUL DATA PROCESSING
OMA processes personal data on the following lawful bases:
- Consent: Users provide consent when subscribing to our OMA news or registering for events.
- Legitimate Interest: Data processing for improving services and providing relevant updates.
DATA TRANSFERS
OMA ensures that any data transfers comply with GDPR requirements. Data is processed within the European Economic Area (EEA) whenever possible.
DATA SECURITY
OMA implements the following security measures:
- Encryption of data during transmission.
- Access controls to limit data access to authorized personnel only.
- Regular security audits to identify and address vulnerabilities.
DATA BREACH NOTIFICATION
In the event of a data breach that affects personal data, OMA will notify affected individuals and the relevant supervisory authorities as required by GDPR.
DATA SUBJECT RIGHTS
INTRODUCTION
As a data subject under the General Data Protection Regulation (GDPR), you have specific rights concerning your personal data.
EXERCISING YOUR RIGHTS
You have the following rights:
- Right of Access
You can request information about the personal data we hold about you and receive a copy of this data. - Right to Rectification
You can request the correction of inaccurate or incomplete data. - Right to Erasure
You can request the deletion of your personal data, subject to legal retention obligations. - Right to Restrict Processing
You can request a temporary restriction on processing your personal data under certain circumstances. - Right to Data Portability
You can request that your personal data be provided in a structured, commonly used, and machine-readable format. - Right to Object
You can object to the processing of your personal data in specific situations.
HOW TO SUBMIT A REQUEST
To exercise any of these rights, please contact us at helpdesk@omaorg.org with the subject line “Data Rights Request” and include:
- Your full name.
- Details of the specific right(s) you want to exercise.
OMA will respond to all requests within one month of receipt.
HELP and SUPPORT
SECURITY DISCLOSURES
INTRODUCTION
Open Mobile Alliance (OMA) is committed to maintaining the highest standards of security in our technical specifications and processes. We take security issues seriously and encourage responsible disclosure of any identified vulnerabilities.
REPORTING SECURITY ISSUES
If you identify a security vulnerability in OMA’s standards, protocols, or technical specifications, please report the issue promptly to help us address it effectively.
HOW to REPORT a SECURITY ISSUE
To report a security issue, please follow these steps:
- Email the details of the identified vulnerability to helpdesk@omaorg.org
- Include the following information in your report:
- A clear and concise description of the security issue.
- The affected OMA standard, protocol, or technical specification.
- Any supporting evidence, such as screenshots or technical documentation, that can help us understand and resolve the issue.
OMA’s RESPONSE
Upon receiving a security disclosure, OMA will:
- Acknowledge receipt of your report within 3 business days.
- Assess the reported issue and determine the appropriate course of action.
- Keep you informed of the progress and any resolution, where appropriate.
RESPONSIBLE DISCLOSURE POLICY
To ensure responsible disclosure:
- Please allow OMA reasonable time to address the reported issue before making any information public.
- Refrain from exploiting the identified vulnerability for any malicious purposes.
Thank you for helping us maintain a secure environment for OMA’s standards and technical specifications.
