Privacy Statement

Last updated: June 2025

1. Who we are

This website is operated by Blue-White Projects, a sole trader registered in the Netherlands, trading under the names Blue-White Healthcare Innovation and Blue-White AI Solutions.

2. What data we collect

This website does not use tracking cookies, analytics software or advertising tools. We collect only the data you actively provide to us:

• Your name and email address when you contact us via email
• Any information you voluntarily include in a message to us

We do not collect any data automatically, and we do not use third-party tracking services.

3. Why we process your data

We use your contact information solely to respond to your enquiry. We do not use it for marketing purposes, and we do not share it with third parties.

4. Legal basis (GDPR / AVG)

Processing is based on your consent (Article 6(1)(a) GDPR) when you initiate contact with us, or on legitimate interest (Article 6(1)(f) GDPR) in the context of an existing professional relationship.

5. How long we keep your data

We retain contact correspondence for a maximum of two years, unless a longer retention period is required by law (e.g. for tax or accounting purposes: seven years under Dutch law).

6. Clinical / psychological data

Data shared in the context of psychological sessions is handled in accordance with professional confidentiality obligations (beroepsgeheim) and the relevant Dutch healthcare legislation (WGBO, NIP code of conduct). Such data is never shared with third parties without your explicit consent, except where legally required.

7. Your rights

Under the GDPR / AVG, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl)

To exercise any of these rights, contact us at info@blue-white.org.

8. Security

This website is served over HTTPS. Email communication is handled via our own domain. We take reasonable technical and organisational measures to protect any data you share with us.

9. Changes to this statement

We may update this privacy statement from time to time. The current version is always available at this URL. Significant changes will be communicated where applicable.

10. Contact

For any questions about this privacy statement or how we handle your data: