Privacy Policy

1. Introduction

bluecircle B.V. ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website at bluecircle.world or use our services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws in the European Union.

2. Data Controller

bluecircle B.V. is the Data Controller for the personal data processed under this privacy policy. Our contact details are:

3. Data Collection

The data we collect includes personal information that you voluntarily provide to us and information automatically collected through your use of our services. We collect the following types of personal data:

• Contact Information: Name, email address, phone number, company name, and job title
• Account Information: Username, password, and account preferences
• Technical Data: IP address, browser type, device information, and usage analytics
• Communication Data: Records of correspondence and support interactions
• Marketing Data: Preferences for receiving marketing communications
• Transaction Data: Payment information and billing details

4. How We Use Your Information

We use your personal data for various purposes based on different legal bases under GDPR. Here's how we use your information and our legal basis for processing:

• Service Provision: To provide and maintain our SaaS platform and services (Legal Basis: Contract Performance)
• Customer Support: To respond to your inquiries and provide technical support (Legal Basis: Contract Performance)
• Account Management: To create and manage your user account (Legal Basis: Contract Performance)
• Communication: To send service updates, security alerts, and administrative messages (Legal Basis: Contract Performance)
• Marketing: To send promotional materials and product updates (Legal Basis: Consent or Legitimate Interest)
• Analytics: To analyze usage patterns and improve our services (Legal Basis: Legitimate Interest)
• Legal Compliance: To comply with legal obligations and protect our rights (Legal Basis: Legal Obligation)

5. Data Sharing and Disclosure

We may share your personal data with third parties in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in providing our services
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: With your explicit consent for specific purposes

We ensure that all third parties are bound by appropriate data protection agreements and comply with GDPR requirements.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Our retention periods are:

• Account Data: Retained for the duration of your account plus 3 years after closure
• Transaction Records: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity
• Technical Logs: Retained for 12 months for security and troubleshooting purposes

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where applicable

To exercise any of these rights, please contact us at privacy@bluecircle.world. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures

9. International Data Transfers

When we transfer your personal data outside the European Economic Area (EEA), we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes and codes of conduct

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie practices, please refer to our Cookie Policy.

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In the Netherlands, you can contact:

This privacy policy is effective as of December 2024 and applies to all personal data processed by bluecircle B.V.