Offset Market Exchange Inc. ("OMX"/"we"/"us") collect information in a number of ways when you visit the www.theomx.com (the "Website") and/or use the Services (as defined in the OMX Terms of Service). OMX collects "Personal Information" from users ("Users" or "you") who register for the Service or request information about the Services such as name, address, phone number, and email address. For example, you provide us with Personal Information when you register for an account or contact us by email. We also automatically receive and record information from your browser, including your IP address and cookies. The Personal Information collected is used for billing, identification, authentication, service improvement, research, and contact. However, we reserve the right to capture usage data for diagnostic purposes, including, but not limited to, IP addresses and geolocation data.
Please note that business information is not the same as Personal Information, and is therefore not necessarily subject to the same restrictions.
Your Privacy at OMX
Your privacy is one of our fundamental commitments here at OMX , including its affiliates within the Morningstar Group, each acting as data controller for its operations, hereinafter called “OMX”, “we”, “us”, and “our”.
Therefore, we take outmost care to process your personal data in accordance with the principles set forth in the applicable data protection legislation, including (EU) Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
Contact details for Sustainalytics` affiliates are available
Contact details for Morningstar’s entities are available
Information about Morningstar’s privacy practices is available
Except for displaying your information on the Website to other Users, we do not sell, rent or share Personal Information or provide our database of User's profiles to third parties without your prior consent. However, where an additional representative of a User (the "Additional Representative") requests permission to administer that User's profile, the email address of such additional representative shall be shared with the current verified representatives of that User in order to verify the authenticity of the Additional Representative. If a verified representative of the User requests that we take down their profile, we will do so within a reasonable period of time.
Third Party Sites Links
OMX uses a third-party service provider to manage all payments, including credit card processing. This service provider is not permitted to store, retain, or use Personal Information except for the sole purpose of credit card processing on our behalf. OMX does not have access to any of the credit card information provided by Users to such third-party service provides.
We encrypt sensitive data in our databases using a one-way encryption, which ensures that we are not able to see any User's password. Similarly, we use password authentication to prevent one User seeing another User's Personal Information.
We restrict access to Personal Information to OMX employees, contractors and agents who need to know that information in order to operate, develop or improve our Services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.
The security of your Personal Information is important to us. We use commercially reasonable efforts to ensure that Personal Information is stored and maintained in a secure environment. All Personal Information is encrypted during transmission across our platform. However, we are not in control of or responsible for any errors, omissions or losses in data transmitted through the Website and/or the Service.
Access and Accuracy
You have the right to access the Personal Information we hold about you in order to verify the accuracy of that information. Upon receipt of your written request, we will provide you with a copy of your Personal Information and will endeavor to deal with all such requests for access in a timely manner. If you, or a duly authorized verified representative, request that Personal Information or a profile be removed from the Website, we will comply within fifteen days of receiving such request.
We will keep your Personal Information for as long as it remains necessary for the operation of the Services or as required by law, which may extend beyond the termination of our relationship with you. In general, once you inform us that you no longer wish to use the Services, we will delete your records from our systems as soon as practicable.
Privacy Questions / Feedback
Last updated August 7, 2021