Onde Website Recipient Register

Last Updated: September 28, 2026

1. About this Register

1. This Register forms part of the Onde Website Privacy Policy for onde.app and onde.com. It lists who receives personal data processed through the Website, in what role, where they process it and the safeguard for transfers outside the European Economic Area (“EEA”).
2. It does not cover personal data we process on behalf of our Clients in the Onde platform and apps or data we process for Onde's own ride-hailing service for passengers and drivers, which is covered by its own privacy notice if any.
3. Abbreviations: DPF means the EU-U.S. Data Privacy Framework (active certification of the named U.S. company). SCCs means the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914.
4. Companies related to Onde in the EEA and the United Arab Emirates receive inquiries concerning the markets they serve. From that point, each of them acts as a separate controller. Transfers to the United Arab Emirates are covered by SCCs.

2. Service providers

1. These providers process personal data only on our instructions under data processing agreements.

Table 1. Service providers (processors)

3. Advertising and measurement partners

1. These partners receive data only after you consent to advertising or analytics cookies. Hashed email addresses and phone numbers are shared only if you tick “personalized ads” in a form.

Table 2. Advertising and measurement partners