Privacy statement · Bluestars

Last updated: 10 December 2025

Bluestars.nl is a technology company that offers AI-based products and services. We consider it important that personal data is processed carefully, and we protect it in accordance with the requirements of the General Data Protection Regulation (GDPR). In this privacy statement we explain which data we process, why we do so and what rights you have.

1. Controller

Bluestars

For questions about privacy, you can contact Bluestars.

2. Which personal data do we process?

2.1 Data you provide to us yourself

When you request a business quote, book a demo or contact us, we process:

Name
Email address
Phone number
Company name (optional)
Any additional information you fill in yourself

2.2 Data that is collected automatically

We use Google Analytics to keep anonymised statistics. The data that is collected includes:

(Anonymised) IP address
Browser and device information
Pages that are visited
Click behaviour and session duration

We use this data only to improve the performance and security of our website.

3. Purposes of processing

We process personal data for:

Handling quote and demo requests
Improving our AI technology product
Analysing website usage
Customer service and communication
Recruitment procedures
Technical monitoring and security of our systems

We do not process data for advertising purposes. Nor do we sell data to third parties.

4. Legal basis for processing

We process personal data on the basis of:

Performance of a contract – for quotes and demos
Legitimate interest – for analytics and website security
Consent – for cookies that require consent
Recruitment procedure

5. Retention periods

We never retain data longer than necessary.

Quote and demo requests: up to 2 years
Analytics data (Google): up to 26 months
Server and security logs: up to 12 months
Recruitment procedure**: up to 4 weeks**

We only share personal data with parties that are necessary for our services, and we conclude a data processing agreement for this.

7. International transfers

Google may process certain data in the United States. This takes place under the EU–US Data Privacy Framework, which safeguards the GDPR compliance of the transfer. All other systems we use are located within the EU

8. Use of AI within our technology products

Because Bluestars offers a technology product that uses artificial intelligence (AI), we transparently explain below how we handle this.

8.1 How our AI works

Our AI technology is used for analysis, automation and improving functionality and the user experience within our product.

8.2 Which data is processed by AI?

Depending on the use, our AI may process:

Text input or files that you provide yourself
Contact or company information that you enter
Technical data such as usage statistics

8.3 Is our AI trained on customer data?

Our AI is not trained or improved using users’ personal data, unless you give explicit prior consent for this.

8.4 External AI providers

If our AI functionality uses external platforms (such as European AI services or parties under the EU–US Data Privacy Framework), then:

Bluestars concludes data processing agreements,
data is processed exclusively in accordance with the GDPR,
data is not used for model training by third parties without consent.

8.5 No automated decisions

Our AI does not make decisions that are fully automated and could have legal or similar consequences for individuals. For decisions that affect individuals, human intervention is always required.

8.6 Users’ rights regarding AI

You have the right to:

Receive an explanation of how our AI uses your data
Request human intervention
Object to AI processing
Have your data deleted

9. Security of personal data

We take appropriate technical and organisational measures to protect data, including:

SSL/HTTPS
Strong access control
Secure storage
Regular updates
Monitoring of data traffic and abuse prevention