Privacy Policy

Placeholder — to be completed before launch. This privacy policy must be completed with the correct company details and all services actually in use (newsletter platform, analytics, etc.). Legal basis: GDPR (EU 2016/679).

1. Controller

The controller within the meaning of the GDPR is:

Thomas Leonhardt
Kolju Petrov 12, 7855 Braknitsa, Bulgaria
Email: info@forgeproject.eu
Website: forgeproject.eu

2. What data we process

When you visit this website, the following data is collected automatically:

IP address (anonymized by nginx, not permanently stored)
Date and time of access
Page / URL accessed
Referrer URL (if transmitted)
Browser type and operating system

This data is processed solely to ensure the operation of the website and is not combined with any other data.

3. Newsletter (Forge Signal)

When you subscribe to the Forge Signal newsletter, the following data is processed:

Email address (required)
Date and time of sign-up
IP address at the time of sign-up (double opt-in)

The newsletter is sent via Beehiiv. Beehiiv privacy policy: beehiiv.com/privacy

Legal basis: Art. 6 (1) (a) GDPR (consent). You can withdraw your consent at any time (unsubscribe link in every email).

Retention period: The data is stored until you unsubscribe from the newsletter.

4. Cookies

This website currently uses no tracking or analytics cookies. Only strictly necessary connections are established.

This website currently uses no analytics or tracking services.

5. Hosting

This website is operated on our own server (VPS). Server location: EU (Hetzner, Germany)

No external hosting provider that processes personal data is used.

6. Newsletter — Resend

To send the "Signal Forge" newsletter, we use the service Resend (Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Newsletter subscribers' email addresses are transmitted to Resend and stored there.

Sign-up takes place via double opt-in. You can unsubscribe at any time using the unsubscribe link in every newsletter email.

Legal basis: Art. 6 (1) (a) GDPR (consent). Data transfer to the USA takes place on the basis of the Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

Resend privacy policy: resend.com/legal/privacy-policy

7. Your rights (GDPR Art. 15–22)

You have the following rights regarding your data:

Access — what data we have stored about you (Art. 15)
Rectification — correction of inaccurate data (Art. 16)
Erasure — "right to be forgotten" (Art. 17)
Restriction — restriction of processing (Art. 18)
Data portability — data in a machine-readable format (Art. 20)
Objection — objection to processing (Art. 21)

Send requests to: info@forgeproject.eu

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection authority. The competent authority is the supervisory authority of the EU member state of your habitual residence or of the place of the alleged infringement.

For Germany: Federal Commissioner for Data Protection (BfDI)
For Bulgaria: Commission for Personal Data Protection (KZLD)

9. Last updated

Last updated: 2026-05-30 — This privacy policy is updated whenever the way we process data changes.