Version 1.6
Date: 5.11.2026
Humbol values and respects your privacy and personal data and processes your personal data in accordance with applicable European data protection law.
This policy outlines how we process and collect data when you visit the Humbol website. It also covers the representatives and contact persons of our customers, prospects and suppliers when we conclude and administer contracts with their organisations, invoice them and manage our customer relationships. We also process data about business contacts that we obtain from other sources, as described under “B2B sales: personal data we obtain from other sources”. Cookies that are not necessary for the website to work are set only with the consent you give in our cookie banner. To understand the privacy policy relating to the Humbol Leadership Platform, please refer to this document: https://www.humbol.app/en/humbol-application-privacy-policy/
Data Controller
The controller for personal data collected under this Privacy Policy is:
Humbol Inc
Raastuvankatu 20
65100 Vaasa
Finland
Information Humbol Collects
For the purposes of this Privacy Policy, ‘Personal Information’ also referred as Personal Data is any data which relates to an individual who may be identified from that data, or from a combination of a set of data, and other information which is in possession of Humbol.
When you are visiting our website, we collect the following Personal Information:
- The browser you are using and your operating system
- The pages you have visited on the Humbol website
- The IP address from where you are accessing the internet
If you choose to fill in a contact request form, demo form or register for one of our newsletter or events, we ask for the following information:
- Your name, employer, email address, and telephone number
- Additional information relating to your contact request or event/training registration
- Special diet relating to a live event or training that serves food — asked only with your explicit consent, used only for catering and deleted after the event
- Possible Invoicing details relating to an event
- Your role, signature and invoicing details, and our correspondence with you, when you sign or administer a contract with us on behalf of your organisation
How does Humbol use your information?
The personal information we collect from you is used for the following purposes:
- Personalizing content that is displayed to you when you visit our website
- Optimizing the user experience to your browser and device
- Analyzing the performance of our marketing campaigns and promotions
- Using Hubspot as an email dispatch solution as well as Hubspot itself to store the data
- Advertising and promoting our services as allowed by law
- Identifying potential customers for our products and services and increasing the relevance of our customer communications
- Doing preparations and managing registrations to our events and trainings
- Concluding and administering contracts with your organisation, invoicing, and managing our customer relationship
Legal Basis of Processing
We process your Personal Information when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract, such as when you register for one of our events or trainings. If you do not provide the Personal Information that we need for it, we will not be able to process your registration.
We process your Personal Information when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights). This applies in the following circumstances:
- to operate and maintain our website and to troubleshoot it; and
- to contact you and respond to your questions or requests.
We process the personal data of the representatives and contact persons of our customers, prospects and suppliers on the basis of our legitimate interest in concluding and administering contracts with their organisations and managing our customer relationships, and to meet our legal obligations in invoicing and accounting.
We analyse the use of our website and the performance of our marketing campaigns with Google Analytics, and advertise Humbol on Google using audiences of our website visitors and conversion measurement, only on the basis of the consent you give in our cookie banner. These tags do not load before you consent, and you can withdraw your consent at any time from the cookie settings. We also process your Personal Information where applicable on the basis of an explicit consent provided by you for receiving marketing communications, events, and any service requests. Where the processing is based on explicit consent, you have the right to opt out or withdraw your consent from any further processing (as per local law). You may exercise your rights by writing to privacy@humbol.app.
B2B sales: personal data we obtain from other sources
We contact organisations that could benefit from Humbol, and the people in them whose work covers employee experience, people development or management. For this we process limited data about those people that we have not received from them directly.
- What data: name, employer, job title and role, whether you are a decision-maker, work email address and work phone number, LinkedIn profile address, changes in your role that Vainu reports, and notes of our calls, meetings and emails with you.
- Where it comes from: Vainu, a Nordic company information service that collects it from public sources such as public registers, company websites and press releases, and Fonecta, a Finnish directory service. Vainu describes its own processing at https://www.vainu.com/legal-stuff/database-privacy-statement/ and Fonecta at https://tuki.fonecta.com/tietosuojaseloste.
- Why: to contact you in your work role about Humbol’s services, and to manage our sales and customer relationships in our CRM.
- Legal basis: our legitimate interest in offering our services to the people responsible for them in organisations, and in keeping our contact details accurate (Article 6(1)(f) GDPR), which we have weighed against your rights in a written assessment. We email you only when our service relates to your role.
- Your right to object: you can object at any time, and we will stop contacting you for sales. Tell us during a call, reply to our email, or write to privacy@humbol.app. We mark your objection in our CRM so that we do not contact you again, and keep your record only so that the objection holds. You can also ask us to erase your data; we then erase all of it, unless you want us to keep your objection, in which case we keep only it and your name, employer and email address, so that you are not contacted again. You can ask the source of your details to remove you from its database: Vainu at privacy@vainu.io, or Fonecta at tietosuoja@fonecta.com. Neither we nor they can reliably recognise you at a new employer, so after a change of employer your details may come up again; you can then object again.
- Who receives the data: HubSpot, our CRM; Vainu, which updates contact and company data in it; and Microsoft, whose Copilot assistant helps our sales team work in the CRM. They process the data on our behalf.
- How long we keep it: we delete your details when there has been no activity with you for three years, unless you represent one of our current customers. If we obtain your details from Vainu or Fonecta, we contact you or delete them within a month.
- Your other rights: Your other rights are described under “Data Subject Rights”, and how to lodge a complaint under “Contact Your Local Data Protection Authority”.
If you do not provide your Personal Information
If you choose not to provide your Personal Information that is mandatory to process your request, we may not be able to provide the related service.
Cookies, Web beacons, and pixel tags
Cookies are text files that a website places on your hard drive when you visit a website. Cookies that are not necessary for the website to work are set only with the consent you give in our cookie banner, which you can change at any time. You can also block cookies in your browser settings, which may limit the functionality we can provide when you visit our site.
The Humbol website contains web beacons (pixel tags). A web beacon is a very small graphic image that is placed on a website or in an email that is used to monitor the online behavior of the user visiting our website or receiving the email. Web beacons are also used by third-party technologies to monitor the activity of the users to the Humbol Website that may be used to deliver advertising or other digital content based on your interests. It allows tracking which computer accessed a certain website, when and from where (geographically).
The third-party analytics and marketing services we use are Google Analytics, Google Tag Manager, Google Ads, HubSpot CRM and marketing automation. These services need to place a cookie to function as intended. Google Analytics and HubSpot share audiences of our website visitors with Google Ads, so that we can show Humbol’s advertising on Google to people who have visited our website, and Google Ads measures how that advertising performs on our website (conversion measurement). This happens only with your consent (see Legal Basis of Processing).
Alone Cookies and web-beacons cannot identify your personal information (such as email address). However, once you choose to provide these details by filling a form or clicking a link in one of our marketing emails, this personal information can be linked to the data collected by the cookie.
More information about Google Analytics privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en&ref_topic=2919631
More information about Google Analytics cookie usage:
https://policies.google.com/technologies/cookies#how-google-uses-cookies
More information about how Google uses advertising cookies:
https://policies.google.com/technologies/ads
Information on how Hubspot uses cookies:
https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser
Data Subject Rights
You can review personal information stored about you, request changes to it, and request the removal of your personal information. You can also prohibit or object to the use of your information, including for direct marketing. Where consent is used for processing you are entitled to withdraw your consent (opt-in) and limit any further processing as per local law.
You can make the above requests by e-mailing us at privacy@humbol.app.
You can withdraw your consent to cookies at any time from the cookie settings on our website. You can also block cookies in your browser – please refer to your browser’s user instructions on how to do this.
Data Transfer
Personal data is stored in the EU where our service providers offer it. Google Analytics and Google Ads data is stored in the USA, and HubSpot may process data in the USA to provide its service. Oneflow stores contracts in the EU; its US sub-processors receive what they need to deliver signing emails.
If personal data is transferred outside the EU, we make sure that (i) the recipient is located in a country, or certified under a framework such as the EU–US Data Privacy Framework, that the European Commission has decided provides an adequate level of protection, or (ii) the transfer is made under the Standard Contractual Clauses published by the European Commission.
Data Security
Humbol adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Information.
Data Retention
Personal Information will not be retained for a period more than necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required by law or for directly related legitimate business purposes. Contracts and accounting records are kept as the Finnish Accounting Act requires, and the contact details of our customers’ representatives while the customer relationship lasts. Google Analytics keeps website usage data for two months at event level and for fourteen months at user level; the user-level period restarts when you visit the website again.
Third parties and disclosure of personal information
Humbol manages the cloud services used to store your data and the data can only be accessed by our staff and service providers who act for Humbol for the purposes set out in this policy or for other purposes approved by you. Our service providers include Morgan Digital Oy Ab, which hosts this website; HubSpot, for our CRM, marketing automation and customer support; Vainu, which updates company and contact data in our CRM; Microsoft, whose Copilot assistant helps our sales team work in the CRM; Oneflow, for signing contracts; and Google, for Google Analytics, Google Tag Manager and Google Ads. We do not sell your information or disclose it for others’ commercial purposes. Without your consent we disclose it only to the service providers above, and to accountants, debt collectors, legal advisers or authorities where the law or a claim requires.
Humbol protects your data privacy and data security according to the EU General Data Protection Regulation (GDPR Regulation 2016/679).
Linked Websites
Humbol provides links to third-party websites and services. However, Humbol is not responsible for the Privacy Policies, practices, or the contents of such third-party websites.
How to Contact Us
If you have any questions regarding our privacy practices or this Privacy Policy, please contact us at privacy@humbol.app.
Contact Data Protection Officer
Jyri Kytömäki, Email: privacy@humbol.app
Contact Your Local Data Protection Authority
If you are unhappy with how we safeguard your personal data, you have the right to bring a complaint to your local data protection authority.
Updates
Humbol may change the data privacy practices and update this Privacy Policy as and when the need arises, and the same will be made available on the website. But our commitment to protect the privacy of website users will continue to remain.