Privacy policy

Last updated: [date of publication]

1. Controller. Blueverse GmbH, Mastweg 227, 42349 Wuppertal, Germany. Represented by the managing director Akshay Batra. Email: [[email protected] — to confirm], phone: +49 202 25352312.

2. Scope. This policy covers our website. The Blueverse platform (app.blue-verse.de) has its own privacy notice; there we usually process data on behalf of our customers (Art. 28 GDPR).

3. Hosting and server log files. The website is hosted by [name and address of the hosting provider]. When you visit the website, technically necessary data is processed: IP address, date and time, page requested, referrer URL, browser and operating system. Purpose: delivering the website and keeping it stable and secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention: [7] days, then deleted unless needed to investigate a security incident. A data processing agreement is in place with the provider. [If data is processed outside the EU: state the safeguard.]

4. Cookies and consent. Without your consent we use only technically necessary cookies (Section 25(2) TDDDG). All other services (e.g. HubSpot tracking, analytics) load only after you consent through our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw consent at any time via "Cookie settings" in the footer.

5. Contact and demo requests (HubSpot). When you request a demo or contact us through a form, we process your details (name, work email, company, country, sector, number of uniformed employees, message) to handle your request. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) or (f) (legitimate interest in answering business enquiries). Forms and meeting booking use HubSpot (HubSpot Inc., Cambridge, MA, USA; for the EEA: HubSpot Ireland Ltd., Dublin). The data is stored in HubSpot's EU data centre. A data processing agreement is in place with HubSpot; any transfers to the USA are covered by [the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses — to confirm]. Retention: until your request is closed; for business relationships, according to statutory retention periods; prospect data without a business relationship is deleted after [24] months at the latest.

6. Fonts. Fonts are loaded locally from our own server. No connection is made to Google or other font providers.

7. Links to LinkedIn and the Blueverse app. Our website contains plain links to our LinkedIn company page and to the Blueverse app sign-in. No social media plugins are embedded; no data is shared until you click a link. LinkedIn's own privacy policy applies there.

8. Recipients. Only the service providers named above receive your data, as processors, and authorities where the law requires it. We do not sell data.

9. Your rights. You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. Contact us at the email address above.

10. Right to complain. You can lodge a complaint with a data protection supervisory authority. Ours is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

11. No automated decision-making. We make no decisions based solely on automated processing within the meaning of Art. 22 GDPR.

12. Security. The website is encrypted with TLS.

13. Changes. We update this policy when our website or the law changes. The version published here applies.