Legal

Privacy statement

Last updated: 24 August 2026

Blue River values your privacy. This statement explains which personal data we process when you visit our website or contact us, why we do so, on what legal ground, who we share data with and which rights you have.

1. Data controller

Blue River, Dijle 1, 2800 Mechelen, Belgium. Email: coffee@blueriver.be — Phone: +32 2 898 30 50. Blue River is the controller for the data collected through this website.

2. What data we process

  • Contact details you provide yourself (name, email address, phone number, company, message) via the contact form, newsletter sign-up, self-scan or a meeting request.
  • Answers and results of the online self-scan, if you complete it.
  • Technical and usage data: IP address, browser and device type, pages visited, time and duration of the visit, referring website.
  • Company data derived from your IP address (company name, industry, size, public company contact details) via Leadinfo, based on our legitimate interest.

3. Purposes and legal grounds

PurposeDataLegal ground
Answering questions and following up on enquiriesContact details, messagePerformance of, or steps prior to, a contract
Sending the newsletterEmail address, nameConsent (art. 6(1)(a) GDPR)
Producing and sending your self-scan reportAnswers, email addressConsent
Operating and securing the websiteTechnical data, necessary cookiesLegitimate interest (a working, secure website)
Website statistics and usage analysis (Google Analytics)Pseudonymous usage data, IP addressConsent
B2B company recognition for commercial follow-up (Leadinfo)IP address, derived company data, pages visitedLegitimate interest
Marketing and remarketing cookiesUsage dataConsent

You can withdraw consent at any time through the cookie settings at the bottom of every page or by emailing coffee@blueriver.be. Withdrawal does not affect the lawfulness of processing before withdrawal.

4. Cookies and tracking technologies

We only place necessary cookies without your consent. Analytics and marketing cookies are placed only after you accept that category in the cookie banner. We use Google Consent Mode v2: until you consent, analytics and advertising cookies remain blocked.

CategoryExamplesPurposeRetention
NecessaryConsent preference (br_consent_v2)Remembering your cookie choice, security12 months
AnalyticsGoogle Analytics (_ga, _ga_*)Measuring page visits and usageUp to 14 months
Analytics — company recognitionLeadinfo (_li_id, _li_ses)Recognising the company behind a visitSession up to 12 months
MarketingAdvertising and remarketing cookiesMore relevant content and adsUp to 13 months

5. Leadinfo

This website uses Leadinfo, a B2B lead generation service of Leadinfo B.V., Rotterdam (the Netherlands). Based on your IP address, Leadinfo recognises which company is visiting our website and shows us the matching company profile and page views. Leadinfo enriches that profile with publicly available company information (such as company name, address, industry, chamber of commerce data and general contact details).

  • Purpose: recognising business visitors and commercially following up with relevant companies (B2B marketing and sales).
  • Legal ground: our legitimate interest (art. 6(1)(f) GDPR) in knowing which companies show interest in our services. Leadinfo identifies companies, not individual visitors. You can object via the opt-out link below.
  • Role: Leadinfo B.V. acts as a processor on our behalf; a data processing agreement is in place.
  • Data: IP address (stored truncated/anonymised after matching), derived company data, pages visited, timestamps and referrer. Leadinfo identifies companies, not individual visitors by name.
  • Processing location: European Union (the Netherlands). In principle no transfer outside the EEA takes place.
  • Retention: visit data remains available in our Leadinfo account for a maximum of 12 months.
  • Objection/opt-out: withdraw your consent through the cookie settings or opt out directly at www.leadinfo.com/en/opt-out.
  • More information: the Leadinfo privacy statement is available at www.leadinfo.com/en/privacy.

6. Recipients and processors

We never sell your data. We do use service providers acting as processors, each under a data processing agreement:

  • Leadinfo B.V. (the Netherlands) — B2B company recognition.
  • Google Ireland Ltd. — Google Analytics (website statistics).
  • Our hosting and database provider — website hosting and storage of form, newsletter and self-scan data within the EU.
  • Our email service provider — sending confirmation, report and newsletter emails.
  • Calendly — scheduling meetings, if you book a call.
  • Microsoft — our office and communication environment.

Where a provider processes data outside the European Economic Area, this is based on the European Commission's standard contractual clauses or an adequacy decision.

7. Retention periods

  • Contact enquiries: up to 24 months after the last contact.
  • Newsletter: until you unsubscribe.
  • Self-scan results: up to 24 months.
  • Analytics and Leadinfo data: as stated in the table above.
  • Customer relationship data: as long as legally required (including 7 years for accounting records).

8. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest or direct marketing. Send your request to coffee@blueriver.be; we reply within 30 days. You may also lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels (contact@apd-gba.be).

9. Changes

We may update this privacy statement when our services or legislation change. The most recent version is always available on this page, stating the date of the last change.