1. Introduction

This privacy policy outlines how Gabria Oy (“we”, “us”, or “our”) collects, uses, and protects the personal data of our website visitors, clients, and partners. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This website does not use any marketing or tracking cookies.

Please, visit our website at https://gabria.fi, or any website of ours that links to this Privacy Notice.

You may also engage with us in other related ways, including any sales, marketing, or events.

2. Data Controller

The data controller for the personal data we collect is:

Gabria Oy Erottajankatu 19, 00130 Helsinki, Finland. Business ID: 3425948-3

For any privacy-related inquiries, you can contact us using contact information found at https://gabria.fi/contact or by contacting our Data Protection Specialist Kari Mantere, kari.mantere@gabria.fi, +358 45 7885 2046.


3. Personal Data We Collect

We may collect the following types of personal data:

  • Contact Information: Name, email address, and phone number when you contact us through our contact forms or by email.
  • Recruitment Data: If you apply for a career with us, we will collect your resume, cover letter, and any other information you provide in your application.
  • Comments: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. After approval of your comment, your profile picture is visible to the public in the context of your comment.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To provide our services: We use your data to respond to your inquiries, provide you with information about our services, and to enter into and manage our client relationships.
  • To improve our website: We analyze usage data to understand how our website is used and to improve its functionality and user experience.
  • For marketing purposes: With your consent, we may send you marketing communications about our services. You can opt-out of these communications at any time.
  • For recruitment purposes: We use the information you provide to us to evaluate your application for employment.
  • To comply with legal obligations: We may be required to process your data to comply with legal or regulatory requirements.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: We will ask for your consent to process your data for specific purposes, such as sending you marketing communications.
  • Contractual Necessity: We will process your data when it is necessary for the performance of a contract with you, such as when you become a client.
  • Legitimate Interests: We may process your data for our legitimate interests, such as improving our website and services, provided that these interests are not overridden by your rights and interests.

6. Data Sharing and Transfers

We do not sell, trade, or otherwise transfer your personal data to outside parties. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

8. Your Rights

Under the GDPR, you have the following rights over your personal data:

  • The right to be informed: You have the right to be informed about the collection and use of your personal data.
  • The right of access: You have the right to access your personal data and supplementary information.
  • The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.
  • The right to erasure: You have the right to have personal data erased. This is also known as the ‘right to be forgotten’.
  • The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
  • The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
  • The right to object: You have the right to object to the processing of your personal data in certain circumstances.
  • Rights in relation to automated decision making and profiling.

To exercise any of these rights, please contact us at the details provided in section 2.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

This policy was last updated on July 26th, 2025.