Privacy Policy (GDPR Compliant)

Last updated: [Insert Date]

Blue Flax B.V. (“we”, “us”, “our”) is committed to protecting your personal data and ensuring your privacy in accordance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store, and safeguard your information when you interact with our website and services.

1. Data Controller

Blue Flax B.V.
Lange Viestraat 2b, 3511BK Utrecht – The Netherlands
Email: info@blueflax.nl
Phone: +31 30 899 9230

2. Personal Data We Collect

2.1 Data You Provide to Us

• Full name

• Email address

• Phone number

• Company details

• Messages or inquiries submitted through forms

• Project-related information

2.2 Data Collected Automatically

• IP address

• Browser type and version

• Device details

• Pages viewed and navigation path

• Timestamp and duration of visits

• Cookies and similar tracking technologies

2.3 Data Collected When Using Our Services

Based on the solutions we provide (Azure Integration Services, OutSystems development, BlueConnect platform), we may process:

• Technical integration details

• Service usage metadata

• Subscription-related information

3. Why We Process Your Data

We use your personal data for the following purposes:

• Responding to inquiries and communication

• Providing information about our services and solutions

• Preparing proposals, contracts, or service agreements

• Delivering and improving our digital transformation, integration, and low-code development services

• Maintaining website performance and security

• Conducting analytics for service improvement

• Sending updates or marketing communications if you provide consent

• Complying with legal and regulatory requirements

4. Legal Basis for Processing

We process your data under the following GDPR grounds:

• Consent – For cookies, newsletters, and marketing

• Contractual necessity – When preparing or executing a service agreement

• Legitimate interest – Business operations, analytics, security

• Legal obligation – Regulatory compliance (tax, accounting, documentation)

5. Data Sharing

We may share your data only with:

• Trusted service providers (hosting, email delivery, analytics, CRM)

• Cloud service platforms used in our operations

• Legal or regulatory authorities when required

• Internal teams located in The Netherlands, Canada, and India for project delivery

We never sell your personal data.

6. International Data Transfers

As Blue Flax operates in multiple regions (The Netherlands, Canada, India), your data may be processed outside the EU.

We ensure GDPR-compliant safeguards such as:

• Standard Contractual Clauses (SCCs)

• Secure processing environments

• Strict confidentiality measures

7. Data Retention

We retain personal data only as long as necessary for:

• Communication and service delivery

• Legal or regulatory requirements

• Business purposes aligned with GDPR

Retention periods vary, but unnecessary data is securely deleted.

8. Your Rights (GDPR)

You have the right to:

• Access your personal data

• Correct or update inaccurate information

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise these rights, contact: info@blueflax.nl

9. Security Measures

We use technical and organizational safeguards such as:

• Encrypted data transmission

• Secure cloud infrastructure

• Access control and role-based permissions

• Regular audits and monitoring

• Compliance with industry best practices in integration and software development

10. Updates to This Policy

We may update this Privacy Policy when necessary. The latest version will always be available on our website.