Last updated 20 August 2026

Privacy Policy

Ossma (“we”, “us”, “our”) is a web design studio based in Kosovo, working with clients across Kosovo, the EU (including Germany), and the UK. This policy explains what personal data we collect through ossma.com and during client engagements, why we collect it, and the rights you have over it.

1. Data we collect

  • Contact form: name, email address, and any message content you submit.
  • Newsletter: your email address, if you choose to sign up for updates.
  • Analytics: pages viewed, approximate location, device and browser type, referring site, and time on page, collected via cookies or similar technologies.
  • Cookies: small files stored in your browser to remember preferences and measure site usage. See Section 5.
  • Client project data: briefs, brand assets, business information, and any other files or details you share with us in the course of a paid engagement.

2. Why we collect it

  • To respond to enquiries submitted through the contact form.
  • To deliver, manage, and invoice client projects.
  • To send newsletter updates, only to those who opt in.
  • To understand how the site is used and improve its performance and content.
  • To meet our legal and accounting obligations.

3. Legal basis

For visitors in the EU/EEA and UK, we process personal data under the following bases: your consent (analytics cookies, newsletter sign-up), the performance of a contract (client project data), and our legitimate interest in responding to enquiries and running the business.

4. Sharing your data

We do not sell personal data. We may share it with service providers who help us run the site or business — for example, email, hosting, analytics, and invoicing tools — bound by their own confidentiality and data protection obligations. We disclose data where required by law.

5. Cookies

We use essential cookies to run the site, and — where you consent — analytics cookies (such as Google Analytics or Plausible) to understand traffic. You can control or delete cookies through your browser settings at any time; blocking them may affect some site functionality.

6. Data retention

We keep contact form submissions and newsletter data for as long as needed to respond or until you unsubscribe. Client project data is retained for the duration of the engagement and for a reasonable period afterward to meet contractual, accounting, and legal requirements, after which it is deleted or anonymised.

7. Your rights

If you are in the EU/EEA or UK, GDPR gives you the right to access, correct, delete, or export your personal data, to withdraw consent at any time, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below.

8. International transfers

As we are based in Kosovo and work with clients across the EU and UK, personal data may be processed outside your home country. We take reasonable steps to ensure it is handled securely and in line with this policy wherever it is processed.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

10. Contact

Questions about this policy or your data can be sent to hello@ossma.de.