Privacy policy

1. GENERAL

This Privacy Policy describes how blue2purple processes your personal data (the “Data”) in connection with its activities and your use of the blue2purple website.

We process your Data in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (“GDPR”) and applicable Belgian data protection legislation.

By using our website, contacting us or providing us with your Data, you acknowledge the practices described in this Privacy Policy.

‍

2. CONTACT DETAILS OF THE CONTROLLER

The data controller is:

blue2purple SA/NV
Avenue Louise 523
1050 Brussels
Belgium

Email: info@blue2purple.com

Data Protection Officer (DPO): DPO@VIRTUOLOGY.COM

blue2purple is responsible for the processing of personal data provided:

  • through our website;
  • through our contact forms;
  • when communicating with our teams;
  • when requesting information or commercial offers;
  • through our partners where necessary for the provision of our services.

‍

3. WHAT DATA DO WE COLLECT, FOR WHAT PURPOSE, ON WHAT LEGAL BASIS AND FOR HOW LONG?

The Data we process may come from information you provide directly, forms available on our website, information exchanged during our business relationships, and cookies or similar technologies.

We only collect Data that is necessary for the purposes described below.

‍

3.1 Contact Request Form

Purpose

To allow you to contact blue2purple, request information about our services or submit a business request.

Data collected

  • First and last name;
  • Email address;
  • Telephone number, where applicable;
  • Company name;
  • Information contained in your message.

Legal basis

Taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Retention period

For the time necessary to process your request and, where applicable, in accordance with applicable legal retention periods.

‍

3.2 Newsletter Subscription

If blue2purple offers a newsletter, your email address may be used to send you news, publications, insights and information relating to our services.

Our emails may contain tracking technologies, such as tracking pixels, to measure email openings and interactions with their content and improve our communications.

Data collected

  • Email address;
  • Statistics relating to email openings and interactions.

Legal basis

Your consent (Article 6(1)(a) GDPR).

You may withdraw your consent at any time using the unsubscribe link included in each newsletter or by contacting us.

Retention period

Until you unsubscribe or, failing that, for a maximum of three (3) years from your last interaction with blue2purple.

‍

3.3 Customer and Business Relationship

Purpose

To manage our commercial and contractual relationships, including the provision of services, project management, communications, offers, invoicing and accounting.

Data collected

  • Identification data;
  • Professional contact details;
  • Company and professional information;
  • Information exchanged during the business relationship;
  • Financial and invoicing information where necessary.

Legal basis

Performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), or compliance with a legal obligation where applicable.

Retention period

For the duration of the contractual relationship and thereafter for the periods required by applicable legal, accounting and tax obligations.

‍

3.4 Business Development and Communications

We may process professional contact information to:

  • inform prospects, clients and partners about our services and expertise;
  • maintain and develop our business relationships;
  • send professional communications;
  • measure and improve our communications.

Where required by applicable law, marketing communications are sent only with your prior consent.

You may unsubscribe or object to marketing communications at any time.

‍

3.5 Recruitment / Job Applications

Purpose

To manage job applications and recruitment processes, including reviewing applications, assessing candidates’ qualifications and experience, contacting candidates and organising interviews.

Data collected

  • Identification data;
  • Contact details;
  • Professional information, including CV, qualifications, skills and professional experience;
  • Information provided by the candidate during the recruitment process;
  • Any other information relevant and necessary for assessing the candidate’s application.

Legal basis

Processing is carried out where necessary for taking steps at the candidate’s request prior to entering into a contract and, where applicable, on the basis of our legitimate interests in managing our recruitment activities, in accordance with applicable data protection legislation.

Retention period

Personal data relating to recruitment applications are retained only for as long as necessary for the purposes for which they were collected and in accordance with applicable legal requirements.

‍

4. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to:

  • ensure its proper functioning;
  • remember certain preferences;
  • measure audience and performance;
  • improve the user experience;
  • manage consent preferences;
  • where applicable, measure the effectiveness of communications and marketing activities.

Non-essential cookies are only placed after obtaining your consent where required.

The categories of cookies used, their purposes, providers and retention periods are described in our Cookie Policy and consent-management platform.

You can accept, refuse or customise your preferences and withdraw your consent at any time through the cookie preference management tool available on the website.

‍

5. TO WHOM CAN YOUR DATA BE TRANSMITTED?

Your Data may be communicated to companies belonging to the Virtuology group where necessary for the purposes described in this Privacy Policy.

We may also use technical service providers acting as processors, including providers of:

  • hosting and website infrastructure;
  • maintenance and technical services;
  • analytics and consent-management tools;
  • IT, communication and marketing services.

These providers process Data only in accordance with our instructions and are contractually required to maintain confidentiality and implement appropriate security measures.

We do not sell your personal Data to third parties.

Third-party services linked to or integrated into our website remain subject to their own privacy policies.

‍

6. INTERNATIONAL DATA TRANSFERS

Where a service provider processes personal data outside the European Economic Area, the transfer is carried out in accordance with the GDPR and based on an appropriate legal mechanism where required.

‍

7. WHAT ARE YOUR RIGHTS?

Subject to the conditions provided by the GDPR, you have the following rights:

Right of access
You may request access to your personal data and information about its processing.

Right to rectification
You may request the correction of inaccurate or incomplete data.

Right to erasure
You may request the deletion of your data where the conditions provided by the GDPR are met.

Right to restriction of processing
You may request the restriction of processing in the circumstances provided by the GDPR.

Right to data portability
Where applicable, you may request your data in a structured, commonly used and machine-readable format or its transmission to another controller.

Right to object
You may object to processing based on our legitimate interests where the conditions provided by the GDPR are met. You may also object at any time to direct marketing.

Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

‍

8. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights or ask questions about the processing of your personal data:

Email: info@blue2purple.com

Postal address:
blue2purple SA/NV
Avenue Louise 523
1050 Brussels
Belgium

You may also contact our DPO:

DPO@VIRTUOLOGY.COM

We will respond within the time limits provided by applicable legislation. Proof of identity may be requested where necessary to protect your Data.

‍

9. WHAT HAPPENS IN THE EVENT OF A DISPUTE?

If you believe that the processing of your personal data does not comply with applicable legislation, we invite you to contact us first at info@blue2purple.com so that we can review your request.

You also have the right to lodge a complaint with the competent data protection authority.

For blue2purple, you may contact:

Data Protection Authority (APD/GBA)
Rue de la Presse 35
1000 Brussels
Belgium
Email: contact@apd-gba.be

‍

10. INFORMATION CONCERNING CHILDREN

Our website and services are not specifically intended for children.

We do not knowingly collect personal data from children where such collection is not permitted by applicable law. If we become aware of such collection, we will take appropriate measures to delete the data unless its retention is required by law.

‍

11. LINKS TO OTHER WEBSITES AND SERVICES

Our website may contain links to websites or services operated by third parties.

blue2purple does not control these third-party websites or their privacy practices. We recommend consulting their privacy policies before providing them with personal data.

‍

12. SECURITY

We implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised access, accidental disclosure or other unauthorised processing.

Access to personal data is limited to authorised persons who are subject to confidentiality obligations.

Despite these measures, no system for transmitting or storing data over the Internet can guarantee absolute security.

‍

13. LIMITATION OF LIABILITY

To the extent permitted by applicable law, blue2purple's liability is limited to direct damages resulting from a demonstrated breach of its legal or contractual obligations.

blue2purple cannot be held responsible for damages resulting from fraudulent or malicious acts committed by third parties, including hacking, phishing, viruses or other computer-related offences beyond its reasonable control.

‍

14. APPLICABLE LAW AND JURISDICTION

This Privacy Policy is governed by Belgian law, without prejudice to the mandatory provisions of the GDPR and other applicable data protection legislation.

In the event of a dispute, the parties shall first endeavour to reach an amicable solution.

Failing an amicable resolution, the competent courts shall be determined in accordance with applicable Belgian law, without prejudice to the rights of data subjects under applicable data protection legislation.

‍

15. DATE OF ENTRY INTO FORCE AND MODIFICATIONS

This Privacy Policy entered into force on 04 February 2026.

It may be modified to reflect changes in applicable legislation, recommendations from competent authorities, or changes to our activities, services or processing activities.

Any substantial modification will be published on this page.

Last updated: 19 October 2026

‍

16. LANGUAGE

Where this Privacy Policy is available in several languages, the French version shall prevail in the event of any discrepancy or difference in interpretation, unless otherwise required by applicable law.

‍