Back to home

Legal

Privacy Policy

Last updated: March 4, 2026

This Privacy Policy describes how Osmose Industries collects, uses, and protects personal data when you visit osmose.industries and subscribe to our newsletter or waitlist. It complies with the General Data Protection Regulation (GDPR) — EU 2016/679.

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Data We Collect

2.1 Newsletter / Waitlist subscription

When you submit our waitlist or newsletter form, we collect:

  • Email address — to send you project updates and announcements.

This data is transmitted to and stored by Mailchimp (see Section 6). You provide this data voluntarily and explicitly by submitting the form.

2.2 Technical data via third-party services

Our website loads fonts from Google Fonts API. When your browser fetches those resources, Google may receive your IP address. Osmose Industries does not directly collect, store, or process this data. Refer to Google's Privacy Policy for details.

Our website is hosted on OVH infrastructure, which may retain standard web server logs (IP address, browser type, pages visited, date/time) for security and maintenance purposes. These logs are not used for profiling or marketing.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Consent (Art. 6(1)(a)) — When you subscribe to our newsletter or waitlist, you give explicit consent to receive updates from Osmose Industries. You may withdraw this consent at any time (see Section 8).
  • Legitimate interest (Art. 6(1)(f)) — Server logs processed by our hosting provider (OVH) for security and network integrity.

4. Purpose of Processing

We use your email address solely to:

  • Send project updates, milestone announcements, and news about Osmose Industries;
  • Notify you of early access opportunities when they become available;
  • Communicate any changes to our policies or project direction.

We do not use your data for automated profiling, targeted advertising, or any purpose beyond what is listed above.

5. Data Retention

  • Email address (newsletter): Retained for as long as your subscription is active, or until you unsubscribe or request deletion. We periodically purge inactive contacts after 3 years of inactivity.
  • Server logs (OVH): Retained for up to 12 months in accordance with legal obligations and OVH's standard retention policy.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We share data only with the following service providers, strictly for the purposes described in this policy:

Mailchimp (The Rocket Science Group LLC)

OVH (hosting)

Google (Google Fonts)

  • Purpose: Serving web fonts for visual rendering of the website.
  • Data shared: Your browser's IP address (via HTTP request to Google servers).
  • Privacy policy: policies.google.com/privacy

7. International Data Transfers

Mailchimp, operated by The Rocket Science Group LLC, is based in the United States. Transfers of personal data to the United States are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your data.

You can access Mailchimp's Data Processing Addendum and the applicable SCCs at: mailchimp.com/legal/data-processing-addendum

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

  • Right of access (Art. 15) — Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — Request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").
  • Right to restriction of processing (Art. 18) — Request that we limit how we use your data.
  • Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
  • Right to object (Art. 21) — Object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)) — You may unsubscribe at any time using the unsubscribe link at the bottom of any email we send, or by contacting us directly. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9. How to Exercise Your Rights

To exercise any of the rights listed above, contact us by email: [email protected]

We will respond within 30 days of receiving your request, in accordance with GDPR Article 12. We may ask you to verify your identity before processing your request.

To unsubscribe from our newsletter directly, you may also use the unsubscribe link included in every email we send.

10. Right to Lodge a Complaint

If you believe we have not handled your personal data in compliance with applicable law, you have the right to lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL):

  • Website: cnil.fr
  • Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
  • Phone: +33 1 53 73 22 22

11. Children's Privacy

Our website is not directed at children under the age of 15 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify subscribers via email. We encourage you to review this page periodically.

13. Contact

For any questions about this Privacy Policy or how we handle your personal data: