Privacy Policy

Forge Digital Oy, website forgedigital.fi. Updated 13 November 2026.

This policy explains how Forge Digital Oy processes the personal data of visitors to its website and of people who contact us through the forms on the site. It is based on the EU General Data Protection Regulation (2016/679) and Finnish data protection law.

1. Data controller

Forge Digital Oy
Business ID: 3347904-6
P.O. Box 28, 33101 Tampere, Finland
Visiting address: Peltokatu 34 B, 4th floor, 33100 Tampere, Finland

2. Contact in privacy matters

Email: info@forgedigital.fi

3. What data we collect

Data you give us on forms

  • name, email address and phone number

  • company

  • the content of your message and any other information you enter on the form

  • your marketing permissions and opt-outs

Data collected when you use the site

  • IP address (Google Analytics does not store IP addresses permanently), browser, device and operating system

  • approximate location (country or city)

  • pages visited, time and length of the visit, referring page

  • cookie identifiers

4. Purposes and legal bases


Purpose Legal basis
Answering contact and quote requests Legitimate interest; steps taken before entering into a contract
Managing customer and prospect relationships Legitimate interest
Marketing and marketing communications, such as newsletters, content and event invitations Legitimate interest in business-to-business communication; consent where the law requires it
Visitor analytics and site development Consent (non-essential cookies)
Technical operation and security of the site Legitimate interest

You can opt out of marketing messages at any time through the unsubscribe link in the messages or by contacting us. We do not sell personal data to third parties.

5. Cookies and analytics

The site uses cookies and similar technologies.

  • Essential cookies make the site work and keep it secure. They do not require consent.

  • Squarespace Analytics collects statistics on how the site is used, with the site platform’s own cookies.

  • Google Analytics collects statistics on visitor numbers and site usage.

  • HubSpot uses a tracking cookie to collect data on site usage. When you submit a form, HubSpot links the details you give to your browsing on the site, including visits before you submitted the form.

Non-essential cookies are set only with your consent. You can give or withdraw consent in the cookie banner on the site, and you can delete cookies in your browser settings.

6. Recipients of data

We use the following service providers, which process personal data on our behalf:

  • HubSpot (HubSpot Ireland Ltd): customer relationship management, forms, marketing communications and site usage tracking

  • Google (Google Ireland Ltd): Google Analytics

  • Squarespace (Squarespace Ireland Ltd): site platform and its analytics

  • LinkedIn (LinkedIn Ireland Unlimited Company): advertising measurement

  • LinkedIn Insight Tag collects data for targeting and measuring advertising.

We do not disclose data to other parties unless the law requires it.

Applications for open positions are made in a separate recruitment service, which has its own privacy policy.

7. Transfers outside the EU and EEA

Our service providers may also process data outside the EU and EEA, in particular in the United States. Transfers are based on the European Commission’s adequacy decision (EU–U.S. Data Privacy Framework) or on standard contractual clauses approved by the Commission.

8. Retention periods

  • Form and CRM data: for as long as needed for the customer or prospect relationship, but no longer than 24 months from the last contact.

  • Marketing opt-outs: until further notice, so that we can honour the opt-out.

  • Analytics data: 14 months

Unnecessary and outdated data is deleted regularly.

9. Your rights

You have the right to

  • know whether we process your data and get a copy of it

  • ask us to correct inaccurate data

  • ask us to delete your data

  • ask us to restrict processing

  • object to processing based on legitimate interest and opt out of direct marketing

  • withdraw your consent at any time

  • receive the data you have given us in a portable format, when processing is based on consent or a contract.

Send requests to info@forgedigital.fi. We reply within one month.

10. Data security

Data is stored in our service providers’ protected systems. Access is limited to those of our employees who need the data in their work, and it requires a personal user account. Traffic to the site is encrypted.

11. Right to lodge a complaint

If you believe we process your data in breach of data protection law, you can lodge a complaint with the supervisory authority:

Office of the Data Protection Ombudsman
P.O. Box 800, 00531 Helsinki, Finland
tietosuoja@om.fi
www.tietosuoja.fi

12. Changes to this policy

We update this policy when our operations or the law change. The current version is always available on this page.