Skip to content
Legal · Data Protection

Privacy &
data protection.

How OMN collects, uses, shares, and protects personal data — and the rights you have under U.S. (CCPA / CPRA) and EU (GDPR) law. This policy applies to omngroup.com, our editorial titles, and the OMN backoffice.

Data Controllers

Who is responsible
for your data.

OMN is operated by two affiliated entities. The controller responsible for your data depends on where you are located and which OMN service you are using.

Draft notice. Items shown in italics — retention schedules, current third-party processors and cookie list — must be completed by legal and the DPO before this policy is published.
United States

OMN Group LLC

Role
Controller for U.S. visitors and U.S.-facing titles
Registered office
254 Chapman Rd, Ste 208
Newark, Delaware 19702
United States of America
Privacy contact
privacy@omngroup.com
Postal (privacy)
Attn: Privacy Officer
OMN Group LLC, address above
Privacy lead
Michael Winter
Compliance & Standards Officer
European Union

OMN Media Management LTD

Role
Controller for EU / EEA / UK visitors and European titles
Registered office
Unit 3D, North Point House
North Point Business Park, New Mallow Road
Cork, Co. Cork, Ireland
Privacy contact
privacy@omngroup.com
Data Protection Officer
Michael Winter
privacy@omngroup.com
Lead supervisory authority
Data Protection Commission, Ireland
dataprotection.ie
What & Why

What we collect and how we use it.

1.Information you provide

You give us personal data directly when you:

  • Create an account in the OMN backoffice or one of our editorial products (name, work email, role, organization, password).
  • Subscribe to a newsletter or alert (email address and preferences).
  • Contact us by email, form, press request, or tip — including any content you choose to share.
  • Apply for a job or request press accreditation (CV, contact details and any documents you submit).
  • Comment, submit a fact-check request, or file a correction or complaint.

2.Information collected automatically

When you visit omngroup.com or one of our titles, we and our service providers may collect:

  • Device and connection data — IP address, browser type and version, operating system, screen size, referring URL, time-stamps.
  • Usage data — pages viewed, articles read, time on page, search terms within the site, links clicked.
  • Approximate location — derived from your IP address (country / region level) for regional editions, rights enforcement, and analytics. We do not collect precise GPS location from the website.
  • Cookies, local storage and similar technologies — see Section 5 below.

3.Information from third parties

We may receive limited information about you from:

  • Identity providers when you sign into the backoffice via single sign-on (only the data you authorize them to share).
  • Payment or subscription processors, where a paid product applies (transaction confirmation, not full card data).
  • Public sources and our journalistic research, where this is necessary for newsgathering in the public interest.
  • Service providers we engage for analytics, security, and delivery (see Section 6).

4.Why we use your data — and our legal basis

We use personal data for the purposes set out below. For visitors in the EU / EEA / UK, the GDPR legal basis is shown in brackets:

  • Run the site and our products. Authenticate users, deliver content, remember preferences, secure the service. (Contract; legitimate interest in operating and securing OMN.)
  • Communicate with you. Respond to your messages, send newsletters or alerts you have requested, notify you of material policy changes. (Contract; consent for marketing-style newsletters; legitimate interest for service messages.)
  • Editorial work. Research, verify, and report on matters of public interest, including processing personal data of public figures, sources, and subjects. (Legitimate interest in journalism; processing for journalistic purposes under Article 85 GDPR and the Irish Data Protection Act 2018, with the safeguards required by law.)
  • Analytics and product improvement. Understand which stories and tools work, measure performance, fix bugs. (Consent where required for non-essential cookies; legitimate interest for aggregated analysis.)
  • Security and abuse prevention. Detect attacks, fraud, and abuse of the service; protect users and sources. (Legitimate interest; legal obligation where applicable.)
  • Legal & compliance. Comply with applicable law, respond to lawful requests, exercise and defend legal claims. (Legal obligation; legitimate interest.)

We do not sell personal information for money, and we do not use your data for automated decision-making that produces legal or similarly significant effects on you.

5.Cookies & similar technologies

We use cookies and similar technologies in three broad categories:

  • Strictly necessary — sign-in sessions, security, load balancing, remembering your cookie choice. These cannot be switched off.
  • Functional — preferences (language, dark mode), saved articles, recently read.
  • Analytics & performance — aggregated traffic measurement and product analytics.

In the EU / EEA / UK, non-essential cookies are set only after you give consent through our cookie banner. You can change your choice at any time from the "Cookie settings" link in the footer (where available) or by clearing cookies in your browser. Our platform honors recognized opt-out signals such as Global Privacy Control (GPC) where required by law.

Specific cookies and their providers are listed in our cookie notice: [ link to live cookie list / consent management platform ].

6.Who we share data with

We share personal data only with parties that need it and only for the purposes described above:

  • Service providers (processors) who host the site, send email, process subscriptions, run analytics, and provide security tools. They act on our instructions under written data-processing agreements. Categories currently in use: [ hosting / email / analytics / payments / security — to be itemised in the cookie & vendor list ].
  • Our group companies — OMN Group LLC and OMN Media Management LTD share data internally only where necessary to deliver a service or comply with law.
  • Legal & safety — courts, regulators, and law enforcement where we are required by law to disclose, or where disclosure is necessary to protect the rights, safety or property of OMN, our users, or the public. We resist overbroad demands and notify affected users where lawful.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of all or part of OMN, personal data may be transferred subject to the same protections set out here.

We do not "sell" personal information for monetary consideration. We do not knowingly "share" personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide a clear opt-out.

7.International transfers

OMN operates across the United States, the European Union and other regions. Personal data may therefore be transferred to and processed in jurisdictions other than your own — including transfers from the EU / EEA / UK to the United States.

For transfers out of the EU / EEA / UK, we rely on appropriate safeguards under Articles 45 – 49 GDPR, including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum where applicable, and the EU–U.S. Data Privacy Framework for certified recipients. A copy of the relevant transfer mechanism is available on request to privacy@omngroup.com.

8.How long we keep it

We keep personal data only as long as necessary for the purposes for which it was collected and to meet legal obligations. Indicative periods:

  • Account data — for the life of the account, plus a short window after closure for reconciliation and dispute resolution.
  • Newsletter subscriptions — until you unsubscribe, with periodic confirmation of interest.
  • Server and security logs — short retention, then deletion or aggregation. [ exact retention period to be confirmed ]
  • Editorial source material — retained as long as needed to substantiate published reporting, in line with journalistic duty.
  • Records required by law (e.g. tax, accounting) — kept for the period required by the applicable jurisdiction.

9.Security

We protect personal data with administrative, technical, and physical safeguards appropriate to the risk — including encryption in transit, access controls, least-privilege provisioning for staff, audit logging, and regular review of our processors. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as required by law.

10.Children

Our services are intended for adults and professionals. We do not knowingly collect personal data from children under 16 in the EU / EEA / UK or under 13 in the United States. If you believe a child has provided us with personal data, contact privacy@omngroup.com and we will delete it.

Your Rights

Your rights over your data.

Different laws give you different rights depending on where you live. We honor the strongest applicable set of rights for each user and do not retaliate or discriminate for exercising them.

If you are in the EU, EEA or UK (GDPR / UK GDPR)

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct data that is inaccurate or incomplete.
  • Erasure ("right to be forgotten") — ask us to delete your data, subject to journalistic, legal and other exemptions.
  • Restriction — ask us to limit how we process your data while a query is resolved.
  • Portability — receive your data in a structured, commonly used, machine-readable format.
  • Object — object to processing based on legitimate interest, including direct marketing.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
  • Complain to a supervisory authority — the lead authority for OMN Media Management LTD is the Irish Data Protection Commission (dataprotection.ie). You can also complain to your local authority — in Germany, your competent State Data Protection Commissioner.

Journalistic exemption. Where personal data is processed for journalistic purposes, certain rights may be limited to the extent necessary to reconcile the right to data protection with freedom of expression and information (Article 85 GDPR; Section 43 of the Irish Data Protection Act 2018). We apply these limits narrowly and only where required.

If you are in the United States

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, and others with comparable laws), you may have the right to:

  • Know what categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
  • Delete personal information we have collected from you, subject to legal exceptions (including journalism, free speech and First Amendment activity).
  • Correct inaccurate personal information.
  • Opt out of the "sale" or "sharing" of personal information and of targeted advertising. As stated above, we do not sell personal information and do not share it for cross-context behavioral advertising; we honor Global Privacy Control (GPC) signals where required.
  • Limit the use of sensitive personal information to the purposes permitted by law.
  • Non-discrimination — exercising any of these rights will not result in denial of service, different pricing, or a lower quality of service.

First Amendment / journalism. Many U.S. privacy laws expressly exempt activity protected by the First Amendment, including newsgathering and publishing. Where you ask us to delete or restrict data that is part of our journalism, we will balance your request against our duty to inform the public and respond accordingly.

How to exercise your rights

Email privacy@omngroup.com with a clear description of your request. We may need to verify your identity before acting. Authorized agents may submit requests on your behalf with appropriate proof. We aim to respond within the time limits required by applicable law — generally one month under GDPR (extendable by two further months for complex cases) and 45 days under U.S. state laws (with possible extension).

There is no fee for exercising your rights; we may charge a reasonable fee or refuse a request only where permitted by law (e.g. manifestly unfounded or excessive requests).

Updates & Contact

How this policy changes — and how to reach us.

Updates to this policy

We review this Privacy Policy at least annually and whenever our practices change in a material way. The "last reviewed" date below indicates the version currently in force. Where a change materially affects how we process your data, we will notify you in advance through the site or by email where appropriate.

Contact

For any privacy question, request, or complaint, contact privacy@omngroup.com, or write to either entity at the postal address listed at the top of this page. Press and editorial enquiries: press@omngroup.com. General operations: operations@omngroup.com.

Related documents

See also our Imprint & legal notice and the Editorial Code & Publication Standards.

Last reviewed: 28.06.2026. Owner: Michael Winter, Compliance & Standards Officer (Data Protection Officer). Version: v1.0.