Privacy statement
Last updated: 24 August 2026
Blue River values your privacy. This statement explains which personal data we process when you visit our website or contact us, why we do so, on what legal ground, who we share data with and which rights you have.
1. Data controller
Blue River, Dijle 1, 2800 Mechelen, Belgium. Email: coffee@blueriver.be — Phone: +32 2 898 30 50. Blue River is the controller for the data collected through this website.
2. What data we process
- Contact details you provide yourself (name, email address, phone number, company, message) via the contact form, newsletter sign-up, self-scan or a meeting request.
- Answers and results of the online self-scan, if you complete it.
- Technical and usage data: IP address, browser and device type, pages visited, time and duration of the visit, referring website.
- Company data derived from your IP address (company name, industry, size, public company contact details) via Leadinfo, based on our legitimate interest.
3. Purposes and legal grounds
| Purpose | Data | Legal ground |
|---|---|---|
| Answering questions and following up on enquiries | Contact details, message | Performance of, or steps prior to, a contract |
| Sending the newsletter | Email address, name | Consent (art. 6(1)(a) GDPR) |
| Producing and sending your self-scan report | Answers, email address | Consent |
| Operating and securing the website | Technical data, necessary cookies | Legitimate interest (a working, secure website) |
| Website statistics and usage analysis (Google Analytics) | Pseudonymous usage data, IP address | Consent |
| B2B company recognition for commercial follow-up (Leadinfo) | IP address, derived company data, pages visited | Legitimate interest |
| Marketing and remarketing cookies | Usage data | Consent |
You can withdraw consent at any time through the cookie settings at the bottom of every page or by emailing coffee@blueriver.be. Withdrawal does not affect the lawfulness of processing before withdrawal.
4. Cookies and tracking technologies
We only place necessary cookies without your consent. Analytics and marketing cookies are placed only after you accept that category in the cookie banner. We use Google Consent Mode v2: until you consent, analytics and advertising cookies remain blocked.
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Necessary | Consent preference (br_consent_v2) | Remembering your cookie choice, security | 12 months |
| Analytics | Google Analytics (_ga, _ga_*) | Measuring page visits and usage | Up to 14 months |
| Analytics — company recognition | Leadinfo (_li_id, _li_ses) | Recognising the company behind a visit | Session up to 12 months |
| Marketing | Advertising and remarketing cookies | More relevant content and ads | Up to 13 months |
5. Leadinfo
This website uses Leadinfo, a B2B lead generation service of Leadinfo B.V., Rotterdam (the Netherlands). Based on your IP address, Leadinfo recognises which company is visiting our website and shows us the matching company profile and page views. Leadinfo enriches that profile with publicly available company information (such as company name, address, industry, chamber of commerce data and general contact details).
- Purpose: recognising business visitors and commercially following up with relevant companies (B2B marketing and sales).
- Legal ground: our legitimate interest (art. 6(1)(f) GDPR) in knowing which companies show interest in our services. Leadinfo identifies companies, not individual visitors. You can object via the opt-out link below.
- Role: Leadinfo B.V. acts as a processor on our behalf; a data processing agreement is in place.
- Data: IP address (stored truncated/anonymised after matching), derived company data, pages visited, timestamps and referrer. Leadinfo identifies companies, not individual visitors by name.
- Processing location: European Union (the Netherlands). In principle no transfer outside the EEA takes place.
- Retention: visit data remains available in our Leadinfo account for a maximum of 12 months.
- Objection/opt-out: withdraw your consent through the cookie settings or opt out directly at www.leadinfo.com/en/opt-out.
- More information: the Leadinfo privacy statement is available at www.leadinfo.com/en/privacy.
6. Recipients and processors
We never sell your data. We do use service providers acting as processors, each under a data processing agreement:
- Leadinfo B.V. (the Netherlands) — B2B company recognition.
- Google Ireland Ltd. — Google Analytics (website statistics).
- Our hosting and database provider — website hosting and storage of form, newsletter and self-scan data within the EU.
- Our email service provider — sending confirmation, report and newsletter emails.
- Calendly — scheduling meetings, if you book a call.
- Microsoft — our office and communication environment.
Where a provider processes data outside the European Economic Area, this is based on the European Commission's standard contractual clauses or an adequacy decision.
7. Retention periods
- Contact enquiries: up to 24 months after the last contact.
- Newsletter: until you unsubscribe.
- Self-scan results: up to 24 months.
- Analytics and Leadinfo data: as stated in the table above.
- Customer relationship data: as long as legally required (including 7 years for accounting records).
8. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest or direct marketing. Send your request to coffee@blueriver.be; we reply within 30 days. You may also lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels (contact@apd-gba.be).
9. Changes
We may update this privacy statement when our services or legislation change. The most recent version is always available on this page, stating the date of the last change.