Skip to content
dpoasaservice.eu

A sourced reference on the outsourced Data Protection Officer: when the GDPR requires one, what the role may and may not do, and how independence is kept.

Open the checker→
  • 01When it is required
  • 02Obligation checker
  • 03Duties
  • 04Independence
  • 05Appointing one
  • 06Guides
Home

Privacy policy

Updated 13 September 2026

Operator and scope

dpoasaservice.eu is a free reference operated by SEQ SIA (OffSeq), registration number 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia. The site has no user accounts, no newsletter, no contact form and no comments.

The obligation checker

The checker on the home page runs entirely in your browser. The organisation type, role, processing activities, core-activity answer and scale answer you select are held in page memory for as long as the page is open. They are not sent to OffSeq, not written to local storage or any cookie, not included in analytics events, and not added to outbound links. Closing or reloading the page discards them. The checker is educational: it does not inspect your systems, your records or your processing, and its result is a band, not a legal opinion.

Technical requests and traffic measurement

Serving a page through Cloudflare involves technical request data, including an IP address, browser headers, the requested URL and the request time. These data support delivery, security and operation of the site. Cloudflare may set its own security cookies; those are separate from the site application.

The site sends page views and clicks on OffSeq service and contact links to our self-hosted Plausible service at in.ainalytic.net. Events include the site domain, the public page address, limited campaign parameters and the referring site's origin when available. A link-click event adds only the destination path and a static placement label such as header, hero or obligation-checker. Checker answers and determinations are never sent. The application does not set analytics cookies or a persistent visitor identifier; the collector receives technical network information with the request. Cookieless measurement is still data processing.

Measurement is disabled when the browser signals Do Not Track or Global Privacy Control, when the local-storage preference plausible_ignore is set to true, and for previews, local development and recognised automation. OffSeq links may carry static referral labels identifying this resource and the link placement; those labels never contain checker answers.

Purpose, legal basis and retention

We use technical request data to operate and secure the site, and page-view and link-click statistics to understand how the resource is used and how much interest there is in OffSeq services. The operator's stated legal basis for these purposes is legitimate interests under Article 6(1)(f) GDPR. Hosting and infrastructure providers process requests on our behalf; the analytics service is self-hosted. Data are kept only as long as needed for those purposes and any applicable legal obligation. The operator's privacy policy explains its retention criteria, providers and transfer safeguards.

Contact and external links

If you email support@offseq.com, we receive the address, the message and anything you choose to include, so that we can reply. Correspondence is retained while it is needed to handle the enquiry or the business relationship. OffSeq service links and the sources cited throughout this site take you to sites with their own privacy notices.

Your rights

Subject to the conditions in the GDPR you may request access, correction, deletion, restriction or portability, and object to processing. Contact support@offseq.com. You may also complain to Latvia's Data State Inspectorate or to the supervisory authority where you live or work. The cookie and browser-storage notice covers what is and is not stored in your browser.

dpoasaservice.eu

dpoasaservice.eu is a free reference on the Data Protection Officer as the GDPR actually defines the role: the three cases where designation is mandatory, the tasks in Article 39, the independence guarantees in Article 38, and what changes when the officer sits outside the organisation on a service contract.

Guides

  • Do you need a DPO?
  • Internal or external DPO
  • Conflict of interest
  • Notifying the authority

Related security work

  • Data protection impact assessment
  • NIS2 and ISO 27001 readiness
  • Security policy development
  • Talk to OffSeq

Information

  • About
  • Privacy policy
  • Cookies and browser storage

dpoasaservice.eu is a free reference maintained by the OffSeq security team. OffSeq does not accept Data Protection Officer appointments and does not act as anyone's DPO. The reasons are set out in full on this site rather than hidden in a disclaimer.

Nothing here is legal advice. OffSeq (SEQ SIA) is a security testing and consulting company, not a law firm. Designating a DPO, and judging whether a particular arrangement creates a conflict of interests, are decisions for the controller or processor and its own counsel.

Operated by SEQ SIA · Riga, Latvia