Privacy Policy

Last updated: March 17, 2026

BlaLabs, registered at the Dutch Chamber of Commerce under number 83772499 ("BlaLabs", "we", "us", or "our"), provides managed infrastructure services. In the course of delivering our services and operating our website, we process personal data. We are committed to protecting the privacy of our website visitors, customers, and business contacts.

This privacy policy explains what data we collect, for what purposes, how long we retain it, and what rights you have.

In short

When processing personal data, we comply with applicable privacy legislation. This means that we:

  • Clearly define our purposes before processing your personal data, as described in this policy.
  • Collect and store as little personal data as possible, limited to what is necessary.
  • Ask for explicit consent when required.
  • Take appropriate security measures to protect your personal data and require the same from parties that process data on our behalf.
  • Respect your rights, including the right to access, correct, or delete your personal data.

1. Data controller

BlaLabs
Goudensteinstraat 54, 6825CS, The Netherlands
KvK: 83772499
Email: support@blalabs.io

2. What personal data do we process and why?

Contact and communication

When you send us an email or otherwise contact us, we process your data to respond to your inquiry and, if applicable, to enter into an agreement with you. The legal basis is the performance of a contract or pre-contractual measures.

We process the following data:

  • Name
  • Email address
  • Any other information you include in your message

Service delivery and invoicing

When you become a customer, we process your data to deliver our services, manage your account, and handle billing. The legal basis is the performance of a contract.

We process the following data:

  • Company name and business details
  • Contact person name and email address
  • Billing address
  • Payment information (processed via Mollie)
  • Invoice and transaction history (processed via Moneybird)

Website analytics

We use a self-hosted Matomo instance to analyze how our website is used, in order to improve our services and user experience. Matomo is configured to respect your privacy: IP addresses are anonymized and no tracking cookies are used for analytics. The legal basis is our legitimate interest in improving our website.

We process the following data:

  • Anonymized IP address
  • Pages visited and time of visit
  • Referring website
  • Browser type and device information

Security and infrastructure monitoring

To detect and prevent misuse, attacks, or unauthorized access, and to monitor the performance and availability of our infrastructure, we process technical data from traffic to and from systems we manage. This does not include the content of files or data you store on your infrastructure. The legal basis is our legitimate interest in securing our services.

We process the following data:

  • Anonymized IP addresses
  • Timestamps
  • Request URLs and headers (including user agent and device type)
  • Error messages and server/network logs

Support

When you contact us for support, we use Jelly (letsjelly.com) to manage support conversations. The legal basis is the performance of a contract.

We process the following data:

  • Name and email address
  • Content of support conversations

3. Cookies

Our website uses only functional session cookies that are strictly necessary for the website to operate. These cookies do not track you and are automatically deleted when you close your browser. We do not use advertising or third-party tracking cookies. Because these cookies are strictly necessary, no consent is required under applicable law.

4. How long do we retain your data?

We retain your personal data only for as long as necessary for the purposes described in this policy:

  • Contact and communication data: for the duration of the business relationship, and deleted within a reasonable period after the relationship ends, unless further retention is required.
  • Invoicing and financial data: 7 years after the end of the financial year in which the transaction took place, in accordance with Dutch fiscal retention requirements.
  • Server and access logs: maximum 90 days.
  • Analytics data: maximum 26 months.
  • Support conversations: for the duration of the business relationship and up to 12 months after termination.

5. Sharing data with third parties

We never sell your personal data. We only share your data with third parties when necessary for the purposes described in this policy, when permitted by law, or when you have given consent.

The categories of third-party processors we use include:

  • Infrastructure and hosting providers (EU)
  • Payment processing provider (EU)
  • Invoicing and accounting provider (EU)
  • Support email provider (EU)

A complete list of our subprocessors is available upon request by contacting support@blalabs.io.

All data is stored and processed within the European Union. We do not transfer personal data outside the European Economic Area (EEA).

6. How do we protect your data?

We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, alteration, or disclosure. All infrastructure is hosted in EU data centers. Access to personal data is limited to those who need it to perform their duties. We require the same level of protection from third parties that process data on our behalf.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: you can request to see the personal data we hold about you.
  • Right to rectification: you can request correction of inaccurate or incomplete data.
  • Right to erasure: you can request deletion of your personal data, where legally permitted.
  • Right to object: you can object to the processing of your personal data.
  • Right to data portability: where technically feasible, you can request that your data be transferred to a third party.
  • Right to restriction: in certain cases, you can request that we restrict the processing of your data.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@blalabs.io. We may ask you to verify your identity. We will respond to your request within one month. This period may be extended if the request is complex, in which case we will inform you in advance.

8. Filing a complaint

If you believe we are not handling your personal data correctly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can find more information on their website at autoriteitpersoonsgegevens.nl.

9. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our services or applicable legislation. We recommend reviewing this page periodically for the most current information.

10. Contact

For questions about this privacy policy or to exercise your rights, contact us at support@blalabs.io.

BlaLabs
Goudensteinstraat 54, 6825CS, The Netherlands