Privacy Policy

Effective Date: December 20, 2024

If copies of this privacy policy have been made in languages other than German, only the German version is binding.

This privacy policy applies to the use of the website bluepic.io as well as the subdomains social.bluepic.io, studio.bluepic.io, embed.bluepic.io, and all other subdomains of bluepic.io.





1. Privacy at a Glance

General Information

The following provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to data that can personally identify you. Detailed information on data protection can be found in this privacy policy.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. The operator’s contact details can be found in the website's legal notice (Impressum).

How do we collect your data?

  • Your data is collected when you provide it to us (e.g., by entering it into a contact form).
  • Other data is automatically collected or obtained with your consent when you visit the website through IT systems (e.g., technically necessary cookies, log files).

Why do we use your data?

  • Some data is collected to ensure the error-free provision of the website.
  • Other data may be used for analyzing user behavior or providing additional functionalities.

What rights do you have regarding your data?

  • You have the right to request information about the origin, recipient, and purpose of your stored personal data free of charge at any time.
  • You also have the right to request correction, deletion, or restriction of processing of this data.
  • You can revoke any given consent at any time with effect for the future.
  • Additionally, you have the right to file a complaint with a relevant data protection supervisory authority.

For further questions regarding data protection, you can contact us at any time.





2. Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to file a complaint with a supervisory authority. The competent authority is usually the data protection supervisory authority of your place of residence, workplace, or the place of the alleged violation.

For Bluepic, headquartered in Cologne, the competent supervisory authority is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia





3. General Information and Mandatory Disclosures

Data Protection

We (Bluepic) take the protection of your personal data very seriously and treat it confidentially in accordance with legal regulations and this privacy policy.

Responsible Entity

FellowBlue GmbH
Im Mediapark 5
50670 Cologne
Germany
Email: [email protected]

Data Protection Officer
Elya Maurice Conrad
Email: [email protected]

The responsible entity is the natural or legal person that decides on the purposes and means of processing personal data.

Data Retention Period

Unless a specific retention period is stated in this policy, your personal data will remain with us until the purpose for data processing ceases or you exercise your rights (e.g., deletion). Legal retention periods remain unaffected.

Legal Basis for Data Processing

  • Consent: Art. 6(1)(a) GDPR
  • Contract fulfillment/pre-contractual measures: Art. 6(1)(b) GDPR
  • Legal obligation: Art. 6(1)(c) GDPR
  • Legitimate interest: Art. 6(1)(f) GDPR

Data Transfer to Third Countries

When using certain services (e.g., hosting providers, cloud services), personal data may be transferred to third countries such as the USA. We rely on recognized safeguards, particularly EU Standard Contractual Clauses (SCCs).

Revoking Your Consent

You can revoke granted consent at any time with future effect. The processing carried out before the revocation remains lawful.

Right to Object

If your data is processed based on Art. 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.





4. Data Collection on This Website

Cookies and Consent Management

Our website uses cookies.

  • Technically necessary cookies: Required for the operation of the website (Art. 6(1)(f) GDPR).
  • Non-essential cookies (analytics and marketing cookies): Used only with your prior consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG).

Server Log Files

The provider of the pages automatically collects and stores information in server log files.

Contacting Us via Form, Email, or Phone

If you contact us, we process your personal data to handle your inquiry (Art. 6(1)(b) and/or (f) GDPR).





5. Hosting and Content Delivery Networks (CDN)

Hosting Providers Used:

  • Cloudflare
  • Hetzner
  • AWS
  • DigitalOcean
  • NeonDB (NeonTech)
  • Google Cloud Functions




6. Analytics and Tracking

PostHog

We use PostHog to analyze user behavior (Art. 6(1)(f) GDPR; if cookies are used: Art. 6(1)(a) GDPR).
Privacy Policy





7. Plugins and Tools

The following tools are used to provide certain functions:





8. Payment Processing

Stripe

Payments are processed via Stripe (Art. 6(1)(b) GDPR).
Privacy Policy





9. Processing of Customer and Contract Data

We process personal data only to the extent necessary to establish, execute, or terminate the contractual relationship (Art. 6(1)(b) GDPR). After contract termination or upon request, we delete the data unless legal retention periods apply.





10. Updates and Changes to This Privacy Policy

We reserve the right to adjust this privacy policy if changes in legal requirements, regulatory mandates, or expansions of our services necessitate it. The latest version of this policy applies to your renewed visit.

Effective Date of This Privacy Policy: December 20, 2024

If you have any questions or comments regarding this privacy policy, please contact us at [email protected].