Privacy Policy Blue10

This privacy statement was last updated on 23 July 2026

This is the Privacy Policy of Blue10 (trading name of Blue 10 B.V.), registered in the Commercial Register of the Chamber of Commerce under number 27195343. Blue10’s offices are situated at Oude Middenweg 17, 2491 AC in The Hague. Blue10 is therefore subject to Dutch law.

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) has been in force since 2018, significantly harmonising data protection legislation within the European Economic Area. In general terms, the law is characterised by strict provisions governing the processing of personal data, enhanced supervision of such processing, but above all by the obligation placed on organisations to demonstrate compliance with the provisions of the law.

At Blue10, we consider the privacy of our employees, job applicants, (potential) customers, users and other contacts to be of the utmost importance, and we do everything within our power to safeguard data privacy and protect personal data.

In this Privacy Policy, we explain what personal data we process, for what purpose we do so and how we protect personal data.

In our processing activities, we comply with the requirements of data protection legislation. This means, amongst other things, that we:

  • Clearly state in this Privacy Policy for what purposes we process personal data;
  • Limit the collection of personal data to the personal data necessary for the specified purposes;
  • First ask for your explicit consent to process your personal data in cases where consent is required;
  • take appropriate security measures to protect your personal data and require the same of parties processing personal data on our behalf;
  • respect your right, upon your request, to access, rectify or erase your personal data.

When handling personal data, Blue10 acts in various roles:

  1. In this role, we at Blue10 process personal data on the instructions of a data controller. This applies to the personal data of customers who use or wish to use the Blue10 service.
  2. As a data controller. We assume this role when Blue10 itself determines the purposes and means of processing personal data. This applies to the personal data of:
    a. our own employees, contractors, trainees and suppliers;
    b. job applicants;
    c. website visitors;

For the data subjects referred to under 2.a, we have drawn up a separate, internal Privacy Policy which is not covered further in this document.

Blue10 is ‘DataPro-verified’, which means that we demonstrably comply with the DataPro Code of Conduct for data processors, drawn up under the coordination of NLdigital, the trade association for IT companies in the Netherlands. The DataPro Code of Conduct has been approved by the Dutch Data Protection Authority.

A. Use of the Blue10 service

Use of the Blue10 service involves the processing of personal data to a limited extent. We process this personal data for the following purposes:

  1. To register you as a Blue10 customer and user of the Blue10 service, and for the resulting invoicing;
  2. To grant you access to the Blue10 service;
  3. For the (daily) use of the Blue10 service in the form of notifications, routing and authorisation of invoices and other documents;
  4. To process (contact) forms you have completed on our website;
  5. To send newsletters, tips & tricks or other product-related messages, if you have subscribed to them;
  6. To answer your support queries relating to the use of the Blue10 service;
  7. To send service messages relating to our service to your email address;
  8. To send invitations to take part in customer satisfaction or loyalty surveys, to provide input on new features in the Blue10 service, and to carry out marketing campaigns.

In doing so, we process the following data:

  1. Registration and invoicing: Name, job title, gender and contact details (telephone number(s) and email address). Company details (name, address and payment details, as well as VAT and Chamber of Commerce numbers);
  2. Access: Login details, consisting of an email address and a password;
  3. Usage: Name and email address. This data is required to send you a notification when documents are ready, to address you personally within the Blue10 service, to circulate and authorise documents, and to distinguish between different users within the Blue10 service;
  4. Form(s) on the website: Company name, name, email address, telephone number and any details you choose to include in the message.
  5. Newsletters: Name and email address. An option to unsubscribe is included in every newsletter.
  6. Support enquiries: Name and email address;
  7. Service messages: Name and email address;
  8. Marketing purposes to improve our services: Name, job title and email address.

If you are a Blue10 customer, we will of course also enter into a data processing agreement with you, setting out our mutual responsibilities in greater detail. The standard data processing agreement we use can be found on our website.

B. Website usage

We record general visitor data relating to your visit to the Blue10 website (www.blue10.com), including your computer’s IP address, the time at which a page is accessed and other data sent by your browser. This data is used to analyse visitor and click behaviour on the website with the aim of improving the website’s performance.

When using our website, we also offer the option to request information and/or ask questions. In doing so, you provide us with certain details. These will often be business details, but in some cases they may also include personal data. We process this personal data in order to contact you, either because you have made a request to that effect or because you have asked a question via our website.

The legal basis for this is legitimate interest. Personal data we obtain via our website is anonymised as far as possible and is not disclosed to third parties.

Blue10 uses Google Analytics to track how users interact with the website and to assess the effectiveness of Blue10’s AdWords adverts on Google search results pages. The information collected, including your computer’s address (IP address), is transmitted to and stored by Google on its servers. You can find Google’s privacy policy and the Google AdWords privacy policy here.

We use Leadinfo’s lead generation service. The tool recognises business visits to our website based on IP addresses and displays publicly available information, such as company names or addresses. Further information is available at www.leadinfo.com. On the page: https://www.leadinfo.com/en/opt-out you will find an opt-out option. If you opt out, your data will no longer be recorded by Leadinfo.

We use cookies on our website. Please read our cookie policy for more information on this.

C. Job Applications

If you apply for a job at Blue10, we will process your personal data for the following purposes:

  1. To record your interest;
  2. To assess your suitability for the role in which you are interested;
  3. To be able to contact you for (further) information, invite you for an interview, or keep you informed of the progress and outcome of the application process;
  4. To be able to convert your application into an employment contract, if applicable.

The legal basis for this is our legitimate interest in conducting a thorough recruitment process and in entering into an appropriate contract. We process the following personal data:

  • Name, email address, telephone number, link to your LinkedIn profile, and personal data you provide in your CV (such as further personal details, employment history and education).

To support the recruitment process, we use a (SaaS) applicant tracking system provided by an external supplier, in which your data is recorded. A data processing agreement has been concluded with this supplier.

Retention periods

Blue10 does not retain your personal data for longer than is necessary to achieve the purposes for which your data is collected.

Disclosure to third parties

Blue10 will disclose your personal data to third parties if this is necessary for the use of the Blue10 service, or where we are legally obliged to do so.

Third-party websites

This Privacy Policy does not apply to third-party websites linked to our website. We cannot guarantee that these websites handle your personal data in a reliable and/or secure manner. Before using any such website, you should always read its Privacy Policy carefully to familiarise yourself with how that website handles your data.

Security

Blue10 considers the protection of your (personal) data to be of the utmost importance and takes appropriate measures to protect your personal data against unauthorised access and other forms of unlawful use.

We have implemented a comprehensive range of technical and organisational measures to ensure the security of the Blue10 service. These measures can be found in the Security & Privacy White Paper. In addition, Blue10 provides assurance reports (ISAE 3000/SOC 2 and ISAE 3402) to customers and prospective clients, which provide assurance regarding the effective operation of the security measures in place.

Accessing, amending or deleting data

You have the right to access, correct or have your personal data deleted. A request for access, correction or deletion can only be processed if it is submitted in writing. We may ask you to identify yourself so that we can be certain that the data in question is yours.

You are personally responsible for the consequences of deleting your personal data. This may include, for example, no longer being informed of new developments and updates relating to the Blue10 service, no longer being able to respond to support requests and/or no longer being able to log in to the Blue10 service.

If, as a customer, you terminate your agreement with Blue10, we will apply an exit procedure which includes the deletion of data. The exit procedure is described in our data processing agreement.

If you have applied for a job at Blue10, your data may be retained so that we can contact you in future recruitment rounds. If you would like us to delete your data following your application, please send an email to compliance@blue10.com.

Changes to this Privacy Policy

This Privacy Policy may be amended from time to time; the most recent version of the Privacy Policy is always available on our website. We advise you to consult our Privacy Policy regularly so that you are always aware of the latest changes.

Dutch Data Protection Authority

We are, of course, happy to assist you if you have any complaints regarding the processing of your personal data. Should we genuinely be unable to resolve the matter together, you also have the right under data protection legislation to lodge a complaint with the data protection regulator, the Dutch Data Protection Authority.

Contact

If you have any questions about your privacy, this Privacy Policy and/or the processing of your personal data, please feel free to contact us at compliance@blue10.com.