Menu Close
Close

Privacy Policy

CBlue SRL
Category of data subject: Visitors and users of the website

Purpose of this privacy policy

The purpose of this privacy policy is to inform visitors and users of our website of the personal data we collect, along with the following information, where applicable:

  • The personal data we collect
  • How the collected data is used
  • Who has access to the collected data
  • The rights of data subjects

This privacy policy operates alongside our cookie policy, which is available separately on our website.

Applicable law

In accordance with the General Data Protection Regulation (GDPR), this privacy policy complies with the following requirements. Personal data must be:

  • processed lawfully, fairly and in a transparent manner in relation to the data subject (lawfulness, fairness and transparency);
  • collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not, in accordance with Article 89(1), be considered incompatible with the initial purposes (purpose limitation);
  • adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation);
  • accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy);
  • kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as they will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), subject to implementation of the appropriate technical and organisational measures required by the Regulation in order to safeguard the rights and freedoms of the data subject (storage limitation);
  • processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (integrity and confidentiality).

Processing is lawful only if and to the extent that at least one of the following conditions is met:

  • the data subject has given consent to the processing of their personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • processing is necessary for compliance with a legal obligation to which the controller is subject;
  • processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Personal data we collect

Data collected automatically

When you visit our website, we collect the following data for statistical purposes by means of cookies and audience measurement technologies:

  • IP address (truncated / anonymised);
  • browsing and usage data (pages viewed, time spent, date and time of visit);
  • device type, operating system and browser;
  • referral source (referring website).

This data is collected through the audience measurement tool Google Analytics. Collection takes place only after your consent has been obtained through the cookie management banner. You may withdraw your consent at any time. For further details, please refer to our cookie policy.

Data collected non-automatically

We may collect the following data when you complete the contact form available on our website:

  • First name
  • Last name
  • Email address

This data may be collected by the following means:

  • Voluntary submission of the contact form on our website.

Please note that we only collect data that helps us achieve the purpose set out in this privacy policy. We will not collect any additional data without informing you beforehand.

How we use personal data

The personal data collected will be used solely for purposes directly related to the operation of our website and to handling your contact requests. We will not use your data beyond what we disclose in this policy.

The data we collect may be used for the following purposes:

  • Handling and following up on requests sent via the contact form. Information submitted through this form generates an email that is automatically integrated into our request management (ticketing) system so that your request can be tracked and answered;
  • Audience measurement and statistical analysis of website traffic in order to improve its content and the user experience.

The processing of contact form data is based on your consent and, where applicable, on steps taken at your request prior to entering into a contract. The processing of audience measurement data is based on your consent.

Presentation of our staff

In order to introduce our team, our website displays the following data about some of our staff members: last name, first name, job title and photograph (avatar). This processing is based on the company’s legitimate interest in presenting its teams and, where applicable, on the consent of the staff member concerned. The staff members concerned will find further information about the processing of their data in the privacy policy dedicated to them.

Who we share personal data with

Employees

We may disclose to any member of our organisation the personal data they reasonably need in order to achieve the purposes set out in this policy.

Third parties

We may share personal data with the following third parties: Google (Google Ireland Limited / Google LLC), acting as a processor providing the audience measurement tool Google Analytics.

We may share personal data with third parties for the following purposes: where strictly necessary for the performance of their tasks, namely the provision of the audience measurement service.

Third parties will not be able to access data subjects’ data beyond what is reasonably necessary to achieve the given purpose.

The hosting of our website and our request management (ticketing) system are handled internally by CBlue SRL and are not subcontracted.

Other disclosures

We undertake not to sell or share your data with third parties, except in the following cases:

  • where required by law
  • where required for any legal proceedings
  • to establish or protect our legal rights
  • to buyers or prospective buyers of this company should we seek to sell the company

How long we store personal data

We do not retain data subjects’ data for longer than is necessary to achieve the purposes for which it was collected.

  • Data submitted through the contact form is retained for as long as necessary to handle your request, and thereafter for archiving purposes in accordance with our obligations.
  • Audience measurement data collected through Google Analytics is retained in accordance with the retention settings configured within the tool, and for no longer than is necessary for the statistical purposes pursued.

How we protect your personal data

All data stored in our system is properly secured and accessible only to our employees. Our employees are bound by strict confidentiality agreements, and a breach of such an agreement would result in the employee’s dismissal. We take all reasonable precautions to ensure that personal data is secure and that data subjects’ rights and freedoms under the General Data Protection Regulation are protected.

International data transfers

Personal data may be accessed, processed or collected in the following countries: Belgium, France.

Transfers of data to third-party companies: the use of Google Analytics may result in a transfer of data to the United States. This transfer is governed by the appropriate safeguards provided for by the GDPR, in particular the European Commission’s standard contractual clauses and the EU–US Data Privacy Framework.

Minors

The GDPR provides that persons under the age of 15 are considered minors for the purposes of data collection. Minors must have the consent of a legal representative for their data to be collected, processed and used.

Your rights as a data subject

Under the GDPR, data subjects have the following rights:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object

Further information about these rights can be found in Chapter 3 (Art. 12-23) of the GDPR.

How to modify, delete or challenge the data collected

If you would like your information to be deleted or modified in any way, please contact our Data Protection Officer (DPO) here:

Amaury Mayard
Rue de l’Innovation 3, 5020 Namur
dpo@cblue.be
081 36 36 36

Changes

This privacy policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. We recommend that data subjects check our policy periodically to make sure they are aware of any updates.

Contact

If you have any questions, please do not hesitate to contact us using the following:

081 36 36 36
support@cblue.be
3 Rue de l’Innovation, 5020 Namur

Effective date: 13 August 2026