privacy.

If you agree in cookie settings, Google Analytics 4 measures visits, viewed pages and actions such as opening an email link or viewing a case study. Meta Pixel measures visits (including visits to the pricing page) and clicks on email links. It also helps us advertise to previous visitors. A click does not confirm that a message was sent, an enquiry received or a sale completed.

The legal basis is consent under Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law. Analytics and advertising are separate optional choices. You may refuse or withdraw consent at any time using the footer, without losing access to content or contact details. Withdrawal does not affect the lawfulness of earlier processing.

These services process online identifiers, IP addresses, device and browser information, viewed URLs, campaign identifiers and measurement events. Our custom events do not contain email message bodies, submitted contact details or customer lists. Meta’s automatic configuration is disabled in the site code. This site does not send advanced matching data or use the Conversions API.

Recipients include Google Ireland Limited and Meta Platforms Ireland Limited. Google provides processing terms for Analytics; we and Meta are joint controllers for the collection and transmission of Pixel data, as set out in Meta’s controller addendum. Meta is responsible for subsequent processing under its own privacy policy. Google’s use of data is described in Google’s partner site information. You may exercise your rights with us or, where applicable, the provider.

Providers may process data outside the EEA, including in the USA, using the applicable EU–US Data Privacy Framework adequacy decision or standard contractual clauses. Contact us for information or copies of applicable safeguards. The analytics configuration used for this site is limited to two months for GA4 user-level and event-level data, with retention reset on new activity disabled. Aggregated reports are reviewed separately and are not treated as anonymous merely because they are aggregated. We do not export raw Analytics data to BigQuery. Meta processes received data under its own retention rules; visitors remain in our advertising audiences for no more than 90 days. This limit is separate from how long Meta keeps event data and how long cookies remain on your device. The provider explains its data retention rules in the privacy policy linked above. Analytics cookies are limited by the site configuration to 180 days without renewal on every visit; Meta cookies typically last up to three months. Cookie lifetime is distinct from the provider’s event-data retention.

Advertising may involve profiling for audience selection. We do not make decisions with legal or similarly significant effects about you. Advertising features of the Google tag are enabled only when advertising consent is granted. We do not currently use Google Ads conversion tracking.

OMAM is run by Michał Opaliński, ul. Alfreda Dauna 58/10, 30-629 Kraków, Poland, who is also the data controller. For enquiries about the site, working together or your data, email contact@omam.pl.

The email link opens your email app. You can edit the suggested message before sending it. The site does not send it for you. Michał Opaliński handles correspondence.

We process your email address, message and any information you choose to provide. We reply to enquiries under Article 6(1)(f) GDPR — our legitimate interest in handling correspondence. When preparing an offer at your request or performing a contract, the basis is Article 6(1)(b) GDPR. Where legal record-keeping obligations apply, the basis is Article 6(1)(c) GDPR. Protecting against claims is our legitimate interest under Article 6(1)(f) GDPR.

Enquiries that do not lead to a contract are reviewed and deleted from our active mailbox no later than 12 months after the last substantive contact. Correspondence needed to perform a contract is kept during that contract, then only to the extent needed for applicable limitation periods or statutory record-keeping. Tax records are generally kept until the end of the statutory period, calculated from the relevant tax payment deadline. A specific dispute or a legal obligation to retain the records may require retaining the relevant records longer. These are our deletion rules; deletion from Apple’s systems and backups is governed by its service terms. Providing data is voluntary, but without contact details we cannot reply. Email for our domain is handled by iCloud, a service of Apple Distribution International Ltd. (Ireland). Apple processes data to deliver and secure email under Apple’s privacy policy and the iCloud terms. Data may also be stored outside the EEA, including the USA; Apple identifies standard contractual clauses as safeguards for transfers from the EEA. Information and copies of those safeguards can be requested from Apple or through the controller.

We store your choice, notice version, timestamp and consent reference in omam-consent in your browser for up to 180 days. A new choice, expiry or a material change to the notice may require a new decision.

When you enable analytics or ads, we store a record of that choice on the server that hosts this site: a random consent reference, categories, the notice’s digital fingerprint (hash) and archived text, language, the time recorded by our server, expiry and any withdrawal. Our consent record does not include your name, email, IP address, full URL of the page you visited or browser fingerprint. Connection data may still be processed separately by the hosting infrastructure.

The basis for keeping evidence is our legitimate interest in demonstrating lawful consent and resolving disputes (Article 6(1)(f) GDPR, in connection with Article 7(1)). Consent records are kept for 730 days from the choice, then removed during the next daily deletion process. Archived notice texts have no visitor identifiers and can be retained as a record of previous website versions. Refusing optional tools does not require a consent confirmation.

Withdrawal switches tools off immediately in this browser, even if the consent recording service is temporarily unavailable. If needed, omam-consent-withdrawals temporarily stores consent references so we can try again to record your withdrawal. It is removed after confirmation, or after 180 days at the latest. Removing browser storage makes a previously issued consent confirmation unavailable on this device; it does not erase historical evidence on our hosting. Contact us if you would like to exercise your data protection rights.

We respect your reduced-motion preference. Details: cookies and browser storage.

The site is hosted by Netlify, Inc. (USA). When serving the site, the hosting provider processes technical connection data such as IP address, request time, requested URL and browser information. This is needed to deliver, operate and protect the site from abuse. The basis is Article 6(1)(f) GDPR — our legitimate interest in the operation and security of the site.

We do not create application access logs containing request bodies, complete URLs, IP addresses or user agents in the consent service. If we retain a separate incident record, it is reviewed at least every 30 days and deleted when the incident is resolved unless specific evidence is still needed for a documented claim or legal duty. Netlify independently controls the retention of its operational infrastructure logs under the applicable service documents; this is separate from our consent-record retention. Contact us for details. The provider’s infrastructure may be outside the EEA, including the USA. Transfers require an appropriate legal basis, such as standard contractual clauses. Information on safeguards and processing documents: Netlify Trust Center. Contact the controller to request information about applicable safeguards.

Links to Instagram and Facebook open external Meta services. No social feed or Facebook widget is embedded here. Meta processes activity on its services under its privacy policy. We use direct messages to handle correspondence. Meta Pixel is a separate tool, activated only after advertising consent as described above.

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. These rights depend on the legal basis and circumstances. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

Email contact@omam.pl. We reply without undue delay, normally within one month. If the complexity or number of requests requires an extension under the GDPR, we will explain the reasons within the first month. You may complain to the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland; UODO contact details.

We use typefaces under the SIL Open Font License 1.1: Flor de Ruina (Semilla and Fractura), by Felipe Sanzana, published by Velvetyne, and Syne Mono (The Syne Project Authors, Bonjour Monde). Files are served locally. For Flor de Ruina, the publisher also identifies CUTE (Conditions d’utilisations typographiques engageantes). Documents: Flor de Ruina OFL, CUTE (EN), CUTE (FR), Flor de Ruina sources, Syne Mono. The illustrations, Spike and logo are used under the rights we hold. Client materials in our portfolio remain attributed to their owners.

Last updated: 26 October 2026.