Privacy policy
Updated: 15 October 2026
This policy explains how Great Slogan Oy processes personal data on its website slogan.fi, in its forms and in its customer relationships. We comply with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act. The Finnish version of this policy is the original.
1. Controller and contact details
Great Slogan Oy (Business ID 2812252-8) Innova 4, Lutakonaukio 1, 40100 Jyväskylä, Finland
Data protection contact: Olli Ropponen, olli.ropponen@slogan.fi
2. Whose data we process
- Visitors to the website
- People who send a form (audit request, contact) or book a meeting
- Contact persons of our customers and prospective customers
3. What data we process and where it comes from
Data you give in our forms: name, work email, phone number, website address, monthly ad budget range, main market and your message.
Data saved when you send a form: the page the form was sent from, the page where you first arrived, and campaign identifiers (such as utm parameters, Google’s gclid, Meta’s fbclid and OpenAI’s oppref) if you came to the site through an ad. Long-term storage in your browser happens only if you have accepted analytics or marketing cookies.
Website use (only with your consent): browser and device data, approximate location derived from your IP address, pages visited and how you use the site (such as clicks and scrolling), and cookie identifiers.
Customer relationship data: contract and billing details and correspondence.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to an audit request or contact, booking meetings | Steps taken at your request before a contract (GDPR 6.1 b) |
| Managing the customer relationship and delivering the service | Contract (6.1 b) |
| Sales and marketing contacts to business customers | Legitimate interest (6.1 f); you can object at any time |
| Website analytics (Google Analytics, Microsoft Clarity) | Consent (6.1 a) |
| Measuring and targeting advertising (Google Ads, Meta, OpenAI) | Consent (6.1 a) |
| Bookkeeping and other legal obligations | Legal obligation (6.1 c) |
| Website security and preventing misuse (such as form spam protection) | Legitimate interest (6.1 f) |
5. Cookies and similar technologies
We use only necessary technologies unless you consent to more. You make your choice in the cookie banner and can change or withdraw it at any time from the Cookie settings link at the bottom of the page. Withdrawing consent removes tracking cookies.
| Name | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| sl_consent (browser storage) | Slogan | Remembering your cookie choice | Necessary | 12 months |
| slogan_lead (session storage) | Slogan | Showing your name on the thank-you page | Necessary | Browser session |
| sl_first, sl_last (browser storage) | Slogan | Identifying the ad campaign and landing page with a form | Analytics or marketing | 90 days |
| _ga, ga* | Google (Analytics) | Visitor statistics | Analytics | 2 years |
| _clck, _clsk, CLID, MUID | Microsoft (Clarity) | Analysing site use and session recordings | Analytics | up to 1 year |
| gcl* | Google (Ads) | Measuring ad conversions | Marketing | 90 days |
| _fbp, _fbc | Meta | Measuring and targeting ads | Marketing | 90 days |
| __oppref, __obref | OpenAI | Measuring ChatGPT ad conversions | Marketing | 30 days / 1 year |
We use Google Consent Mode v2: Google’s services receive your choice and do not store cookies without your consent. Tracking code is not loaded at all before consent.
6. Recipients and processors
We do not sell personal data. We use the following service providers, who process data on our behalf or, with your consent, for their own purposes in measuring advertising:
- HighLevel / LeadConnector (customer relationship management, forms, bookings) – United States
- Vercel (website hosting and form handling) – United States / EU
- Google (Analytics, Ads, Tag Manager) – EU / United States
- Microsoft (Clarity) – United States
- Meta Platforms (Meta Pixel and Conversions API) – EU / United States
- OpenAI (ChatGPT ads measurement pixel) – United States
- Procountor (bookkeeping and invoicing) – Finland
- Stripe (payment processing) – EU / United States
Data may be disclosed to authorities where the law requires it.
7. Transfers outside the EU and EEA
Some service providers (such as HighLevel, Google, Microsoft, Meta, OpenAI and Stripe) may process data outside the EU and EEA, mainly in the United States. Transfers are made with the safeguards required by EU data protection law: the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
8. Retention
- Form and contact data, if no customer relationship follows: 24 months from the last contact
- Customer relationship data: for the duration of the relationship and 24 months after it ends
- Bookkeeping records: as required by the Finnish Accounting Act (6–10 years)
- Analytics data: up to 14 months in Google Analytics and up to 13 months in Microsoft Clarity
- Cookies: as listed in section 5
9. Your rights
You have the right to:
- access your data and receive a copy of it
- have inaccurate data corrected
- have your data erased
- restrict processing
- object to processing based on legitimate interest, including direct marketing
- data portability for the data you have given us
- withdraw your consent at any time. Withdrawal does not affect the lawfulness of earlier processing.
Send your request to olli.ropponen@slogan.fi. We respond within one month.
If you believe the processing of your data breaks data protection law, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the supervisory authority in your own country.
10. Automated decision-making
We do not make decisions about you based solely on automated processing, and we do not profile you in a way that has legal or similarly significant effects on you.
11. Security
Data is transferred encrypted (HTTPS). Only people who need the data in their work can access our systems. The keys used for form handling are stored on the server only.
12. Changes
We update this policy when our processing changes. The date of the latest update is shown at the top.