What we collect, why we collect it, where it is kept and how to get it removed. Written to be read rather than to be complied with.
The controller of the data collected through this site is OSM Europe Ltd, trading as OSM International, registered in Bulgaria. For anything concerning your personal data, write to info@osminternational.com.
Where your request is handled by the OSM partner covering your country, that partner acts as a separate controller for the data they hold about you. We will tell you which partner that is.
We only collect what you give us. There is no tracking pixel on this site and no advertising network reading your behaviour here.
When you fill in a form — a diagnosis request, a contact form, an event registration, a guide download — we collect the fields on that form: typically first and last name, work email, telephone, company, country and company size, plus anything you write in a message field.
When you complete the Business Health Analysis we also store your answers and the resulting scores, because the scores are the point of it and a consultant will discuss them with you.
When you apply for a position we collect what the application form asks for, including the CV you attach.
If you filled in a form asking to be contacted, the basis is that you asked us to — we are taking steps at your request before entering a contract, and answering you is the legitimate interest that follows. If you asked for a newsletter, the basis is your consent, and you can withdraw it at any time using the unsubscribe link at the bottom of every email we send.
These are two different things and we keep them separate. Asking us for a diagnosis does not subscribe you to anything.
Our systems run on Supabase, in the Frankfurt region, inside the European Union. Transactional and marketing email is sent through Brevo. Applications submitted through the site are stored in the same systems.
This site is served by Cloudflare Pages, and the fonts are loaded from Google Fonts, which means Google receives the request for the font file including your IP address. We are removing that dependency.
Contacts who never became clients and have had no interaction with us for more than two years are anonymised automatically. That is not a promise about a policy document — it is a scheduled job that runs every night and empties the personal fields.
Client records are kept for as long as the commercial relationship lasts and afterwards for the period our accounting and tax obligations require.
The OSM partner covering your country, when your request is routed to them. Our software suppliers, listed above, as processors acting on our instructions. Nobody else. We do not sell data and we do not share it for anyone else’s marketing.
Access to what we hold, correction of anything wrong, deletion, restriction of processing, portability, and objection to processing based on legitimate interest. Write to the privacy request form, or to info@osminternational.com. Every request is logged and answered within thirty days.
If you tell us to stop emailing you, we stop — including the automated sequences that were already scheduled. You also have the right to complain to your national data protection authority.
Write to info@osminternational.com. We log every request and act on it within thirty days.
