EnglishEN
030 207 2509

Bluefeed privacy statement

Who are we?

Bluefeed respects the privacy of all customers and visitors to our website. We promise to handle your personal data with care and thank you for the trust you place in us. Bluefeed is responsible for the processing of personal data as described in this privacy statement (Bluefeed acts as controller within the meaning of the GDPR). In this statement, we explain which personal data we collect, why we do so and how we protect it. You will also find information about your rights regarding your personal data and how to exercise them.

Contact details: Bluefeed is established in the Netherlands and can be reached via or by phone on 030 207 2509. For privacy-related questions, you can contact us using these contact details.

has not appointed a formal Data Protection Officer (DPO), as this is not mandatory for our organisation.

This privacy statement may be amended from time to time if our services or the relevant legislation require it. The most recent version is published on our website. We recommend that you check this page regularly for changes. In the event of major changes, we will do our best to inform you separately.

Which personal data do we process?

Bluefeed processes personal data that you provide to us yourself or that we obtain through your use of our services. This concerns various categories of data, including:

We process no special categories of personal data (such as race, religion, health data, etc.) and do not intend to collect data from children under 16 without the consent of a parent/guardian. We also never ask for sensitive information such as a citizen service number (BSN), financial passwords or full credit card numbers via our site. If you think that we are nevertheless processing personal data of a minor by mistake or hold unnecessary sensitive data, please contact us so that we can delete it.

How do we obtain your data?

In most cases, we receive your personal data directly from you, for example when you fill in a form on our website, call or email us, or provide us with information during a quotation or advice process. Sometimes we obtain additional data via third parties or partners, but this only happens when necessary to perform our services and with your knowledge. For example, we may receive technical information about your system via an installation partner or look up limited data from public sources (such as land registry data about your home) to make a proper analysis. If we do not obtain personal data from you yourself, we will inform you separately of the source, if required by law.

In addition, certain usage data is collected automatically when you visit our website, as mentioned earlier (under Website and usage data). This is done via cookies or similar techniques for analytical purposes.

You are never obliged to provide us with personal data. However, if you do not want to share certain data with us, we may not be able to provide our services, or not in full. For example, we need your contact details and address to issue a quotation and to schedule an installation or maintenance; without that data we cannot help you. We will always indicate clearly which data is required (for example with asterisks (*) on mandatory fields in forms) and which is optional.

For what purposes and on what legal grounds do we process data?

We process your personal data only for legitimate purposes. Below we explain the purposes, with the corresponding legal basis as referred to in the General Data Protection Regulation (GDPR):

Bluefeed makes no use of automated decision-making or profiling in which decisions that significantly affect you are taken on the basis of your data without human intervention. All decisions (for example whether your roof is suitable for an installation, or which quotation is issued) are taken by our staff, possibly with the help of supporting software but always with human assessment.

Who do we share your data with?

Within our organisation: Only those Bluefeed staff who need your data for their work have access to your personal data. They are bound by confidentiality and make sure information is not viewed or shared unnecessarily.

External – no sale, only necessary sharing: We never sell or rent your personal data to third parties for commercial purposes. Data is only shared with third parties (other companies or institutions) if this is necessary to provide our services, on the basis of a legal obligation, or if you have given us explicit consent. Below we explain which types of third parties we share data with and why:

In all cases where we provide personal data to third parties, we make sure appropriate safeguards are in place to protect your data. With external parties that process personal data on our behalf (processors), we conclude agreements to ensure they handle your data as carefully as we do. These agreements meet the requirements of the GDPR and include, among other things, that the data may not be used for other purposes, that confidentiality is mandatory and that adequate security measures must be taken.

Bluefeed remains responsible for these processing operations. Should a third party be established outside the European Economic Area (EEA), we ensure an appropriate transfer basis (such as the EU Standard Contractual Clauses, or the recipient being established in a country with an adequacy decision). For questions about this, you can contact us.

Cookies & Analytics

Our website currently makes limited use of cookies. A cookie is a small text file that is stored on your computer or mobile device when you visit our site. At present we use no tracking or advertising cookies. We do use some functional cookies and possibly analytical cookies:

For full details of which cookies we use and how you can manage your cookie settings, see our Cookie statement (if available on the website) or contact us. You can always delete or disable cookies yourself via your browser settings. Please note that certain parts of the website may not work optimally without cookies.

How long do we keep your data?

We do not keep personal data longer than necessary for the purposes for which we collected it, unless we are required by law to keep certain data longer. In practice, this means the following:

After the relevant retention periods have expired, we delete or anonymise the personal data. Anonymising means that data can no longer be traced back to a person (for example by aggregating it in statistics). Please note that after a deletion request we may always check whether certain data still has to be kept on the basis of a legal obligation – in that case we will inform you which data this concerns.

How do we secure your data?

Bluefeed takes the security of your personal data very seriously and has taken various measures to prevent misuse, loss, unauthorised access and unauthorised alteration or disclosure. We apply an appropriate internal security policy. Some of the measures we apply include:

Although we make every effort to ensure security, no method of data transfer or storage is 100% secure. Should a security incident (data breach) nevertheless occur that affects your data, we will act in accordance with our data breach notification obligation. This means we will investigate the incident, take the necessary measures and – if required – report it to the Dutch Data Protection Authority and to those concerned (including you, if your data is affected).

Do you have the impression that your data is not properly secured, or are there signs of misuse? Then please contact us immediately using the contact details above. We take reports very seriously.

Your privacy rights

Under the GDPR, you have various rights regarding the personal data we process about you. Below is an overview of these rights. You can exercise them (usually free of charge) by contacting us. We will respond to your request as quickly as possible, and no later than within the statutory period (usually 1 month).

  1. Right of access: You have the right to ask which personal data we hold about you and to see how and why we use it. If you ask, we will give you a copy of the data we hold about you.
  2. Right to rectification: If your personal data is incorrect or incomplete, you have the right to have it corrected or completed.
  3. Right to erasure: Also known as ‘the right to be forgotten’. You can ask us to erase (certain) personal data if it is no longer needed for the purposes for which it was collected, or if you withdraw consent previously given and we no longer have another legal basis, or if you object to processing on valid grounds, etc. Please note: sometimes we may or must keep certain data (e.g. because of legal obligations such as the tax retention obligation) and cannot fully grant your request – in that case we will explain this.
  4. Right to restriction of processing: You have the right to ask us to restrict the processing of your data, for example while we assess an objection or correction request you have submitted, or if you want us not to delete data but also not to use it actively (for example because you need it later for a legal claim).
  5. Right to data portability: Insofar as we process your personal data on the basis of your consent or an agreement, and this is done by automated means, you have the right to ask us to provide that data to you in a structured, commonly used and machine-readable format, so you can easily pass it on to another service provider if you wish. In practice, this will often mean that we send you a digital file (e.g. CSV/Excel) with the relevant data.
  6. Right to object: You may object to the processing of your personal data if we base it on a legitimate interest or task carried out in the public interest. If you object, we will weigh our interests against your privacy interest again. With direct marketing, you always have the right to object; if you indicate that you no longer want to be contacted, we will honour this.
  7. Right to withdraw consent: Where we process your personal data on the basis of your consent, you always have the right to withdraw that consent. From the moment of withdrawal, we will stop the processing concerned. Withdrawing consent does not affect the lawfulness of the processing before the withdrawal.

To make sure that a request is made by you (the data subject) and not by someone else, we may ask for proof of your identity or for additional information. For example, we may ask you to make the request from the email address known to us, or in some cases to show a copy of an ID (in which you may cover your passport photo and citizen service number). We only do this to prevent us from providing your data to the wrong person or changing it wronglyn. Of course, we treat this verification information confidentially and delete it as soon as it is clear that the request is legitimate.

Complaints or questions: We aim to help you as well as possible and give you control over your data. If you have questions about this privacy statement or the processing of your data, or if you are dissatisfied with how we handle your privacy, please contact us first. We are open to your feedback and will try to find a solution together.

If you nevertheless believe that we are not handling your personal data correctly or are not handling your requests/complaints adequately, you have the right to lodge a complaint with the supervisory authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP). You can do this via the AP website (www.autoriteitpersoonsgegevens.nl).

Questions and contact

After reading this privacy statement, do you still have questions about how Bluefeed handles your personal data? Or do you want to exercise one of your rights? You can contact us via contact@bluefeed.nl or 030 207 2509. Written requests can be sent to Bluefeed, attn. Privacy, Bilderdijkstraat 35b, 3532 VB Utrecht. We are happy to help.

This privacy statement was last updated on 27-10-2025. Bluefeed reserves the right to make changes to this statement where necessary. In the event of significant changes, we will inform you via the website and/or by email. You can see at the bottom of the statement when it was last amended.

Sources: This privacy statement has been drawn up in accordance with the requirements of the General Data Protection Regulation (GDPR) and with due regard to the guidelines of the Dutch Data Protection Authority.