Privacy Policy

Last updated: pending counsel review

This page is a structural draft. It must be reviewed by the client's counsel before go-live (LEG-4).

Controller

Omnimain GmbH is the controller for the processing described here. Contact details are in the Imprint.

Contact form

When you submit the contact form we process your name, work email, company, website, budget range, primary KPI, target CPA and message. The purpose is to answer your enquiry and, where relevant, to take pre-contractual steps at your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and, for the business-development interest in responding, Art. 6(1)(f). Providing the data is voluntary, but without it we cannot answer you.

Retention

Enquiries that do not lead to a business relationship are deleted after a defined retention period; enquiries that do are retained for the duration of the relationship and any statutory retention obligation.

Retention period to be confirmed with counsel.

Processors

We use the following processors under Art. 28 GDPR. Each entry states the role and, where applicable, the transfer basis for processing outside the EEA.

Vercel Inc.: Hosting and delivery of this website
Standard Contractual Clauses
Resend (Plus Five Five, Inc.): Transactional delivery of contact-form emails
Standard Contractual Clauses
Cloudflare, Inc.: Spam protection (Turnstile) on the contact form
Standard Contractual Clauses
Analytics provider: Privacy-friendly, cookieless audience measurement
To be confirmed — decision P0-05

Spam protection

The contact form is protected by Cloudflare Turnstile, which loads only when you first interact with a form field — not on page load. It processes your IP address and browser signals to distinguish humans from automated submissions. The legal basis is our legitimate interest in preventing abuse, Art. 6(1)(f) GDPR.

Analytics and cookies

Any non-essential measurement loads only after consent, and the site sets no non-essential cookies before you give it.

The analytics decision (cookieless without a banner, or consent-gated) is open — build-plan decision P0-05.

Fonts

All fonts are self-hosted from this domain. No font is requested from a third-party CDN, so no data is transmitted to a font provider when you load a page.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority.