Privacy Policy

Updated 4th October 2023


Below is our Privacy Policy, which outlines many legal goodies, but the bottom line is that it’s our aim invariably to preserve your privacy and data.

This policy explains how BlueTeam uses and processes the personal data we collect from you when interacting at any stage to provide services. Data processing is any operation that includes data collection, storage, modification, and preservation. The processing of personal data requires explicit consent or lawful rights. We process collected personal data within the European Economic Area (EEA) and Switzerland (collectively called EEA+CH). When processing personal data, we uphold the highest data protection standards in compliance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Topics

What data do we collect?

BlueTeam collects data from you related to the following:

In the administrative tasks of provisions of services:

  • first and last name
  • name of the company you work for and job title
  • complete address where you conduct business
  • business email address
  • business phone number
  • business tax code
  • signature

In the technical tasks of provisions of services:

  • service settings
  • operations logs
  • technical logs
  • screenshots

In service-related communication and activities from you:

  • feedback
  • comments
  • questions
  • screenshots

Only while doing maintenance to improve our site's performance and user experience:

  • IP address
  • activities on our website

How do we obtain your consent?

We obtain your consent before collecting and processing your personal data. This consent is freely given, specific, informed, and unambiguous. You have the right to withdraw your consent at any time. To withdraw your consent, please get in touch with us at .

How do we collect your data?

We collect personal data in the following ways:

we receive your data when you order services or goods, sign up as a client, are a user of a service or an e-environment, send us an information inquiry, and in other similar situations;

we also receive personal data from other sources (e.g., from official documents you sent to us) if necessary to achieve a purpose.

Our website does not use cookies or any other tracking technologies. We respect your privacy and do not collect any data from your visit to our website beyond the personal data that you willingly provide to us. We do not use any form of automated data collection systems, including cookies, web beacons, or other similar technologies.

We maintain active profiles on Linkedin and Telegram. If you submit any information, communication, or material to us via these social media platforms, you do so at your own risk, as we cannot guarantee privacy. We do not have control over the actions of other users on these platforms, nor the platforms themselves. These companies' privacy policies dictate your interactions with their features and platforms.

You may find links to other websites of interest on our website. However, we do not take responsibility for the content on any linked website. The terms and conditions and privacy policies of these external sites govern your use.

How will we use your data?

We use data for the purpose we collected and to the extent necessary to achieve the intent of the collection.

The composition of personal data collected depends on which specific services you are using, what kind of data is needed to provide them, and the extent to which information is being transmitted to us for this purpose (e.g., subscription to the service, registration as a user, etc.). When collecting data, we adhere to the principle of collecting as little as needed, i.e., only collecting data necessary to attain an objective.

Personal data is necessary for providing services and, according to the client's request/ services, to present to authorities. The legal basis to process data is outlined below:

Keeping our promise to you - GDPR Article 6(1)(b) – Providing you with requested services.

Promoting our business interest - GDPR Article 6(1)(f) – Operating, evaluating, and promoting our business. Responding to your request, instructions, and inquiry. Maintaining adequate security measures. Protecting against liability, including industry standards.

Complying with the law and legal process - GDPR Article 6(1)(c) – Complying with applicable statutes, regulations, and court orders.

We do not use, and will never engage in, automated decision-making processes, including profiling, under any circumstances. Likewise, we do not use, either directly or indirectly, any Personal Data collected or processed to train, refine, or improve the functionality of artificial intelligence or machine learning models.

At BlueTeam, we are committed to the principles of "Privacy by Design" and "Privacy by Default". This means that we integrate the protection and respect of users' privacy into the very structure of our products or services that collect personal data. Furthermore, we ensure that the highest level of security is applied by default without user intervention.

According to Article 12 of the FADP, BlueTeam is not required to keep a record of processing activities. This exemption applies because we have a team of fewer than 250 members, and our data processing presents a minimal risk to personal rights.

How long do we retain your data, and where do we store it?

It depends on the legal basis relied upon to process. For example, we must keep the data collected to fulfill a contract with the client for its entire life cycle, even after its termination.

The data processed to promote the interests of BlueTeam's business are kept only for the time necessary for the purposes for which we collected data. For example, to perform analysis to improve our services, or to record the questions asked or about our services to enhance the customer service experience.

Although BlueTeam aims to keep the data for the time described above, we can extend the data processing according to the applicable laws' provisions. For example, suppose a specific statute requires data to be requested. In that case, we comply with that provision and retain the data until the required retention period expires.

For the time BlueTeam keeps data, it will always be subject to appropriate safeguards.

What happens in the event of a data breach?

In the event of a data breach, we will notify the relevant supervisory authority within 48 hours of becoming aware of the breach. We will notify you immediately if the breach is likely to result in a high risk to your rights and freedoms.

Who do we share your information with?

We will disclose your information to our team, which includes entities and employees related to providing requested services, and also with the following entities:

Service providers: external accounting and legal services suppliers selected to provide data protection equivalent to ours.

Other parties, when required by the law or to protect BlueTeam, may be necessary by law, legal process, or court order.

Other parties in connection with a corporate transaction: for example, as a part of a merger, transfer, acquisition, or sale, or in the event of bankruptcy.

BlueTeam only shares your data with third parties besides those indicated above with separate consent. The client's permission to share logs or screenshots could be necessary to provide technical support on third-party services subscribed by the client.

As a standard practice, we do not transfer your data outside the EEA+CH. However, we ensure the best-effort safeguard if you use our service outside the EEA+CH, which requires transferring personal data outside these regions.

What are your data protection rights?

Our company wants to ensure you fully know your data protection rights. Every user is entitled to the following:

The right to access – You can request copies of your data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to ask us to complete the information you think is incomplete.

The right to erasure – You can request that we erase your data under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your data under certain conditions.

The right to object to processing – You have the right to object to our company's processing of your data under certain conditions.

The right to data portability – You have the right to request that we transfer the data collected to another organization or directly to you under certain conditions.

If you make a request, we have 15 working days to answer you. If you want to exercise these rights, don't hesitate to contact us at .

Who is responsible for ensuring that we respect your rights?

Our Data Protection Officer ensures we respect your rights and follow regulations. If you have any questions or concerns about how we handle your data, contact our Data Protection Officer Andrea Benetton at .

In line with Article 14 in subpoints (b) and (d) of the FADP, BlueTeam is exempted from the obligation to designate a representative in Switzerland. Specifically:

  • (b) Our data processing activities are occasional and do not include, on a large scale, the processing of special categories of personal data or personal data relating to criminal convictions and offenses.
  • (d) Our data processing activities are unlikely to result in a risk to the rights and freedoms of data subjects, considering the nature, context, scope, and purposes of the processing.

Changes to our privacy policy

Within the limits of applicable law, BlueTeam reserves the right to review and unilaterally change this Privacy Policy at any time. As a user of our consultancy services, you must regularly review this Privacy Policy to stay informed about our data protection practices. Your ongoing interaction with our services following any changes signifies your acceptance of these updates.

How to contact us

If you have any questions about our company’s privacy policy or the data we hold on you or would like to exercise one of your data protection rights, please do not hesitate to contact us at .

How to contact the appropriate authority

Should you report a complaint or feel that our company needs to address your concern adequately, you may contact the Estonian Data Protection Inspectorate at info[at]aki.ee, 39 Tatari St., 10134 Tallinn.

Have a question?

Not sure exactly what we’re looking for or just want clarification? We’d be happy to chat with you and clear things up for you. Anytime!

Email us

Logo
WE RESPECT THE ENVIRONMENT WITH A SMALL ACTION

This screen allows your monitor to consume less power when your computer is idle or when you walk away.

To resume browsing, click anywhere on the screen.