Data controller
OMAZEO Sp. z o.o. (OFM Legal brand), Plac Bankowy 2, 00‑097 Warszawa, Poland. KRS 0000879770 · NIP 7842524687, contact@ofmlegal.com. Further company details are available in our legal notice.
No data protection officer has been appointed, as we are not required to designate one under Article 37 of the GDPR. Any request relating to your personal data can be sent to contact@ofmlegal.com.
Data we process and why
This website has no user accounts. We only process the data you choose to send us when you contact us by email, via Telegram or through the contact form: name or pseudonym, email address, Telegram username or phone number if you provide it, profile (agency, creator, chatter, other), and any information you choose to share about your situation. The form includes a mandatory consent box; no data is collected without your knowledge, and none is used for marketing or newsletters. Your request is recorded together with its origin: landing page, the site you came from (domain name only), any campaign parameters and the advertising click identifier contained in the address (gclid). These travel with the form you send us, without being read from or written to your device, and are used solely to know which channel brought you to us. They are not passed on to any third party without your consent.
- Replying to your enquiry and arranging the first call, legal basis: steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).
- Managing the client relationship and invoicing where applicable, legal basis: performance of the contract and legal obligations.
- Keeping track of our exchanges, legal basis: legitimate interest in ensuring the continuity of your matter.
Recipients
Your data is never sold or rented. It is shared only with the professionals required for your matter (partner lawyers and chartered accountants), and only with your agreement. Our technical processors access it only as needed to provide their service: Cloudflare, Inc. (website hosting and form processing), Telegram (internal notification of enquiries received through the form and messaging with our clients), Ahrefs Pte Ltd (cookieless audience measurement), Google Ireland Limited (audience measurement and advertising, only with your consent) and, where applicable, Resend, Inc. (delivery of notification emails). Each acts under its own terms and confidentiality commitments.
Transfers outside the European Union
Our technical processors (Cloudflare, Telegram, Resend, Google, Ahrefs) may process data outside the European Union. These transfers are governed by the mechanisms provided for in Chapter V of the GDPR (standard contractual clauses or an adequacy decision, including the EU-US framework for certified US providers). For a channel controlled end to end, use email.
Retention periods
Enquiries received through the form: 12 months after the last exchange if no engagement follows. Prospects: 3 years after the last contact. Clients: the duration of the relationship, then the statutory retention periods (accounting and tax). You can request deletion at any time for data that is not subject to a legal retention obligation.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to contact@ofmlegal.com. You can lodge a complaint with a supervisory authority: the UODO in Poland (uodo.gov.pl) or the CNIL in France (cnil.fr).
Cookies and local storage
Applicable law. The website is published by OMAZEO Sp. z o.o., established in Warsaw. Cookies and local storage are governed by the GDPR (Regulation (EU) 2016/679) and by the Polish Electronic Communications Law (ustawa Prawo komunikacji elektronicznej), which requires your prior consent for any cookie that is not strictly necessary for the website to function. The competent supervisory authority is the UODO (Urząd Ochrony Danych Osobowych, Warsaw).
Strictly necessary cookies and storage (no consent required): display language, the profile you selected ("Agency / Manager" or "Content creator"), anti-bot protection of the contact form and the record of your cookie choice (ofm-consent and ofm-consent-v, kept for 12 months). They do not allow any tracking of your browsing.
Audience measurement cookies (with your consent): we use Google Analytics 4, provided by Google Ireland Limited. It is only loaded after you give your agreement in the banner ("Accept all" or "Audience measurement"). It sets the _ga and _ga_* cookies (13 months maximum) and measures the pages viewed, where visits come from, the type of device and the country. Google signals and ad personalisation are disabled, and the data is kept for 14 months maximum. Google may process some data in the United States under the EU-US Data Privacy Framework. If you withdraw your consent, the _ga cookies are deleted and measurement stops.
Advertising cookies (with your consent): we use Google Ads, provided by Google Ireland Limited, to measure how well our ads perform (for example, whether a visit from an ad led to an enquiry) and, where applicable, to show our ads to people who have already visited the site. These cookies (_gcl_*, 90 days maximum, and Google's advertising cookies) are only set after you agree in the banner ("Accept all" or "Advertising"). Without your agreement, Google Consent Mode stays on "denied": no advertising cookie is set and advertising data is redacted. Google may process some data in the United States under the Data Privacy Framework, and acts as a controller for ad personalisation (Google Privacy Policy). If you withdraw your consent, the _gcl_* cookies are deleted.
Google Tag Manager: the site also loads Google Tag Manager (Google Ireland Limited), a tool that manages these measurement and advertising tags. Google Tag Manager itself sets no cookies, but the tools it loads (Google Ads, Microsoft Clarity) set cookies according to your choice in the banner: without your consent, neither audience measurement nor advertising is enabled (except for visitors located in the United States, see below).
Microsoft Clarity (with your consent): we use Microsoft Clarity, provided by Microsoft Corporation, to understand how the site is used (heatmaps, session recordings: scrolling, clicks, mouse movements) so we can improve it. Input fields are masked: what you type is not recorded. Clarity is only loaded after you agree to "Audience measurement" (or by default for visitors located in the United States). It sets the _clck (12 months) and _clsk (1 day) cookies. Microsoft may process some data in the United States, under the Data Privacy Framework and the European Commission's standard contractual clauses (Microsoft privacy statement). If you withdraw your consent, the _clck and _clsk cookies are deleted.
Cookieless audience measurement: we also use Ahrefs Web Analytics, provided by Ahrefs Pte Ltd (Singapore). It sets no cookies and stores nothing on your device. It measures, as aggregated statistics, the pages viewed, where visits come from, the type of device and the country. Your IP address is sent to Ahrefs when the page loads but is not stored: together with your browser details, it is turned into an irreversible identifier that is regenerated every 24 hours, so you cannot be recognised from one day to the next. Legal basis: our legitimate interest in measuring traffic to the website (Article 6(1)(f) GDPR).
Social media. The site uses no social media trackers, and we never resell data.
Visitors located in the United States. If you visit the site from the United States (country determined from your IP address by our host, and not stored), audience measurement and advertising cookies are enabled by default, without a banner. You can refuse them at any time via the "Cookie settings / Do not sell or share my info" link at the bottom of every page ("Reject all"): they are then deleted and your refusal is recorded. If your browser sends the Global Privacy Control signal, it is honoured as a refusal of advertising: only audience measurement cookies are then enabled by default. For visitors from the European Union, the European Economic Area, the United Kingdom, Switzerland and all other countries, none of these cookies are set without prior consent.
Managing your choice. You can accept or refuse optional cookies when the banner is first displayed, then change your choice at any time via the "Cookies" link at the bottom of every page, or by deleting the website's data in your browser settings.