Privacy Notice

This notice describes how the TEConnect partner portal handles personal data about the people who register for and use it.

For users in Europe, the data controller is BlueStar Europe Distribution BV, Koninginnegracht 19, 2514 AB Den Haag, The Netherlands, which complies with the EU General Data Protection Regulation (GDPR) and applicable national legislation such as the Dutch GDPR Implementation Act (UAVG).

BlueStar's global operations are conducted by United Radio Incorporated dba BlueStar, headquartered at 3345 Point Pleasant Road, Hebron KY 41048, USA.

Account data you provide when registering: name, business email address, job title, country and password credentials handled by our authentication provider.

Profile data you choose to add: photo, biography, areas of expertise and a LinkedIn profile URL.

Organization data: the company you belong to, your role in it, and the partner application content your organization submits.

Activity data generated by using the portal: posts, discussion replies, events you add, and private messages you send to other members.

Technical data required to operate the service: sign-in timestamps and session information.

Consent records: when you accept the Terms, acknowledge this notice, or change your marketing preference, we record what you agreed to, when, where in the product, and which version of the wording you saw.

Creating and administering your account, verifying that you belong to the organization you claim, and reviewing partner applications — performance of a contract and our legitimate interest in operating the partner program.

Providing the directory, messaging, events and discussion features you use — performance of a contract and legitimate interest.

Sending service email such as account verification, security notices and application decisions — performance of a contract and legitimate interest. These are part of running your account and do not require marketing consent.

Sending marketing email about TEConnect news, partner opportunities, events and program updates — only with your explicit, separately given consent, which you can withdraw at any time.

This per-purpose mapping follows BlueStar Europe's published policy of relying on contract execution, legitimate interest and explicit consent for marketing. BlueStar legal/privacy should confirm it before EMEA launch.

We use third-party service providers to host the platform, store data, send email and support the partner program. These include our cloud hosting and database provider, the managed email delivery service that sends account and service email from our notify.teconnect.com domain, and our CRM and marketing platform (HubSpot), where your contact record and marketing preferences are administered.

Where a provider processes personal data on our behalf, it does so under contract and on our instructions. We may share personal data within the BlueStar group of subsidiaries and affiliates for administrative or commercial purposes, always on an appropriate legal basis and with legally enforceable safeguards.

We do not sell your personal data.

Personal data may be processed outside the country where you are located, including outside the European Economic Area, within the BlueStar group and by the providers described above.

Where personal data is transferred internationally, BlueStar relies on adequacy decisions, Standard Contractual Clauses or other valid transfer mechanisms.

We keep personal data only as long as necessary for the purposes described in this notice and to meet legal, tax and contractual obligations, after which it is securely deleted or anonymised.

As general BlueStar Europe reference points: customer and supplier data may be retained during the business relationship and up to 10 years after it ends under tax regulations, and event participant data up to 1 year after an event.

The portal does not delete any category of portal data on an automatic schedule today. Portal-specific retention periods per data category are being set with BlueStar legal/privacy, and no automatic deletion will be switched on before they are agreed.

Subject to applicable law you may request access to your personal data (Art. 15 GDPR), correction of inaccurate data (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), portability of data you provided (Art. 20), and you may object to processing based on legitimate interest or direct marketing (Art. 21). You may also withdraw consent at any time (Art. 7.3) without affecting the lawfulness of prior processing.

Where processing is based on consent — including marketing email — withdrawing it does not affect your account or the service email required to run it.

You can change your marketing preference and raise a deletion request directly in Your Profile, under Privacy & communications. Deletion may not apply where we must retain data to comply with legal obligations.

We respond to privacy requests within one month of receipt; in complex cases this may be extended to two months, and we will tell you if that happens. We may ask for additional information to confirm your identity.

You can raise a request in Your Profile under Privacy & communications, or contact BlueStar's privacy teams directly:

Data Protection Coordinator, BlueStar Europe Distribution BV, Koninginnegracht 19, 2514 AB Den Haag, The Netherlands — compliance@eu.bluestarinc.com.

BlueStar Europe data protection team (consent withdrawal, complaints, retention questions) — eu-gdpr@eu.bluestarinc.com.

US legal department — legal@bluestarinc.com, +1 (800) 354-9776 ext. 3395.

If you believe your request has not been handled appropriately, you have the right to lodge a complaint with the data protection authority for your country, for example the Autoriteit Persoonsgegevens (Netherlands) or the Spanish Data Protection Agency (AEPD).

The portal stores only what is strictly necessary to sign you in and keep you signed in. It does not currently run advertising, cross-site tracking, product analytics or session-recording technologies, so no consent banner is required by the current product implementation.

If non-essential tracking is introduced, it will be placed behind an explicit consent control before it runs.