Privacy Policy

The controller determines the purposes and means of processing personal information through this website.

OMAH Services operates through team members based in Berlin, Germany, and Beirut, Lebanon. Projects may be delivered remotely for organisations across Europe and the Middle East.

The operating locations describe where team members may work. They do not alter the identity or legal address of the controller stated in Section 1.

When you open this website, the hosting infrastructure may process technical information required to deliver the requested page, maintain security and diagnose errors.

• IP address
• Date and time of the request
• Requested page or file
• Browser and operating-system information
• Referring page when supplied by the browser
• HTTP status and technical error information

The information is processed to provide the website, protect it against misuse and maintain reliable technical operation.

The current contact form prepares a message and opens the default email application on your device. The website does not currently save the entered information in an OMAH Services database.

Information is sent only after you review the prepared email and choose to send it through your email application.

When an email is sent, the information is processed through your chosen email provider and the email service used by OMAH Services.

Do not send passwords, authentication codes, private access credentials, confidential customer records or sensitive personal information through the enquiry form or ordinary email.

The production website uses Vercel Web Analytics to understand general website usage and identify pages that may require improvement.

Depending on the active configuration, analytics information may include page views, referring pages, browser or device information, approximate geographic information and configured website events.

OMAH Services does not intend to use this configuration to create advertising profiles or track visitors across unrelated websites.

Website operation and security

Processing required to provide and protect the website may be based on the legitimate interest in maintaining a secure and functional online presence.

Project and service enquiries

Information submitted in relation to a possible project may be processed to take steps requested before entering into a contract and, where applicable, for legitimate business communication.

Contractual relationships

When an enquiry develops into a project, information may be processed as necessary to prepare, perform and manage the relevant agreement.

Legal obligations

Information may be retained or disclosed when required to comply with an applicable legal obligation.

Consent

Where a future feature relies on consent, that consent may be withdrawn without affecting processing completed before the withdrawal.

Personal information is shared only where necessary to operate the website, respond to enquiries, protect legal interests or comply with an applicable obligation.

Potential recipients may include:

• Website hosting and infrastructure providers.
• Email and communication providers.
• Analytics providers enabled on the website.
• Professional advisers where required for legal, accounting or security matters.
• Public authorities where disclosure is legally required.

Where a provider or authorised recipient processes information outside the European Economic Area, an applicable transfer mechanism and appropriate safeguards must be used where required.

Personal information is retained only for as long as reasonably required for the relevant purpose, unless a longer period is required by law or necessary for legal claims.

Technical server information

Retention follows the security, diagnostic and storage settings of the final hosting provider.

Project enquiries

Information may be retained while the enquiry is active and afterwards where required for follow-up, contractual documentation, legal obligations or the defence of legal claims.

Analytics information

Retention follows the active Vercel Analytics plan, configuration and reporting window.

Subject to the conditions of applicable data-protection law, you may have the right to:

• Request information about how your personal data is processed.
• Request access to personal data held about you.
• Request correction of inaccurate or incomplete information.
• Request erasure where the information is no longer required.
• Request restriction of processing in applicable cases.
• Receive eligible information in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a competent supervisory authority.

Requests can be sent to Youssef@openmindaihamburg.com. Additional information may be requested where reasonably necessary to verify the identity of the person making the request.

You may contact a competent data-protection supervisory authority if you believe that the processing of your personal information infringes applicable data-protection law.

Depending on the circumstances, you may also contact another competent authority, particularly in the place of your habitual residence, workplace or the location of the alleged infringement.

Appropriate technical and organisational measures are used to reduce the risk of unauthorised access, alteration, accidental loss or misuse. No internet transmission or electronic storage system can guarantee absolute security.

The current website does not make decisions producing legal or similarly significant effects based solely on automated processing of visitor information.

This policy may be updated when the website, providers, legal requirements or processing activities change. The current revision date is displayed at the beginning of this page.