Terms of Use

General Terms of Use

Last updated: 8 October 2026 (version 2.3.1). The French version is the legal and original version; the NL, DE and EN translations are courtesy translations. In the event of any discrepancy, the French version prevails.

These General Terms of Use (hereinafter the "Terms" or "ToU") govern access to and use of the bloo.Cards platform, as well as the ordering of the associated physical card. They are concluded with consumers and with business customers. Certain protective provisions apply only to consumers within the meaning of Article I.1, 2° of the Belgian Code of Economic Law ("CDE"), that is, any natural person acting for purposes outside their commercial, industrial, craft or professional activity.

Contents

1. Identification of the Publisher
2. Definitions
3. Purpose and scope
4. Acceptance of the Terms
5. Registration and account creation
6. Offers, pricing and billing
7. Right of withdrawal
8. Licence to use
9. User obligations
10. Prohibited content
11. Intellectual property and user content
12. Protection of personal data
13. Availability, maintenance and guarantee of conformity
14. Liability
15. Term, non-payment and termination
16. Data portability and export
17. Amendment of the Terms
18. Applicable law and jurisdiction
19. Amicable settlement and consumer mediation
20. Miscellaneous provisions and language primacy
21. Contact

Annex: Data Processing Agreement (Article 28 GDPR)

Article 1. Identification of the Publisher

The bloo.Cards platform and the associated physical card are published and operated by:

• MOLDEREZ-CONSULT SRL
• Company number (BCE): 0842.262.084, RLE Brussels
• Intra-community VAT number: BE 0842.262.084
• Registered office: Square Valère-Gille 13, box 5, 1050 Ixelles, Belgium
• Telephone: +32 2 808 30 30
• Controller of personal data: Molderez-Consult SRL
• General contact and support: hello@bloo.cards
• Legal contact: legal@bloo.cards
• "Data protection / privacy" contact: privacy@bloo.cards

The Service is accessible via the domains bloo.cards (website and information), blcrds.com (account and back office) and mybloo.cards (public cards), and their subdomains.

Molderez-Consult SRL has not appointed a Data Protection Officer (DPO) within the meaning of Article 37 of the GDPR, as such appointment is not mandatory given its activities. A privacy contact point is nevertheless made available to data subjects at the address indicated above.

Article 2. Definitions

For the purposes of these Terms, the following terms have the meaning defined below:

• Platform or Service: the bloo.Cards SaaS platform, including the website, the "Wallet" (progressive web application), the administration portal (backoffice) and the associated features.
• User or You: any natural or legal person who registers, creates an account or uses the Service.
• Consumer: any User who is a natural person acting for purposes outside their professional activity.
• Publisher or We: Molderez-Consult SRL.
• Digital card: a digital business card created and administered by the User, accessible via a unique link, a QR code or NFC contact.
• NFC PVC card: a physical PVC card, personalised with the User's data, equipped with an NFC chip and/or a QR code linking to the Digital card.
• Module: a configurable content element that the User can add to their Digital card (contact, gallery, reviews, opening hours, form, social media, etc.).
• User Content: any text, image, video, document, link or other content created, uploaded or published by the User via the Platform.
• Wallet / Network: a feature allowing contacts met to be saved, viewed and exported.
• Offer or Plan: one of the plans described in Article 6: FREE ("Free for life"), PRO, SIGNATURE, PREMIUM and CORPORATE (on quotation, under specific terms).
• Personal data: any information relating to an identified or identifiable natural person, within the meaning of Regulation (EU) 2016/679 ("GDPR").
• Mollie: Mollie B.V., a third-party payment service provider (Netherlands) providing payment processing.
• Terms or ToU: these General Terms of Use.

Article 3. Purpose and scope

3.1 Purpose of the Service

bloo.Cards is a SaaS platform allowing Users to:

• create and customise modular Digital cards;
• add modules (44 types as at the date of this version, including 4 business modules), depending on the Offer subscribed to, as detailed on the Pricing page;
• share their Digital card via a unique link, QR code or NFC contact;
• view aggregated access, view and scan statistics;
• save and export contacts via the Wallet / Network feature;
• order a personalised physical NFC PVC card.

3.2 Scope

These Terms apply to any User who accesses or uses the Platform, as well as to any order of an NFC PVC card. The main market for the Service is Belgium and Luxembourg, without prejudice to accessibility from other European Union countries.

3.3 Nature of the Service

The Service is provided in the form of a subscription to a digital service. The Publisher provides the Service with reasonable care and in accordance with the legal guarantee of conformity applicable to consumers (see Article 13). The availability objectives mentioned in Article 13 constitute best-efforts objectives and not a guarantee of result.

Article 4. Acceptance of the Terms

4.1 Consent

By creating an account, subscribing to an Offer or ordering an NFC PVC card, the User accepts these Terms. If the User does not accept the Terms, they may not use the Service.

4.2 Legal capacity

The User who is a natural person declares that they are at least 18 years old, or, if a minor, that they have the authorisation of their legal representative. The User that is a legal person declares that it is validly incorporated and the person registering declares that they are authorised to bind it.

Article 5. Registration and account creation

5.1 Registration conditions

Creating an account is free. To create an account, the User must provide a valid e-mail address, set a password of at least 8 characters, confirm their e-mail address or mobile number by means of a one-time code (OTC) sent by e-mail or by text message (SMS) (where confirmation is by SMS, the e-mail address is then confirmed by means of a link sent by e-mail), and accept these Terms as well as the Privacy Policy. Login via a Google, Apple or LinkedIn account (SSO) may be offered.

5.2 Credential security

The User is responsible for the confidentiality of their credentials. They undertake not to share them, to use a strong password and to notify the Publisher without delay of any unauthorised access at hello@bloo.cards. Passwords are stored in hashed form (Argon2id) and are never accessible in plain text by the Publisher.

5.3 Uniqueness of the account

In principle, each person may create only one personal account. In the event of multiple accounts manifestly created abusively, the Publisher may, after notification and a reasonable period for regularisation, suspend the account(s) concerned, except in the event of serious abuse justifying an immediate measure.

5.4 Account suspension

The Publisher may suspend an account, temporarily or permanently, in the event of: (a) a substantial breach of these Terms; (b) fraudulent or illegal activity; (c) publication of prohibited content (Article 10); or (d) a legal requirement or that of a competent authority. Except in an emergency (illegal activity, security breach, risk to third parties), suspension is preceded by a notification and a reasonable period for regularisation. Suspension for non-payment is governed by Article 15 and does not entail the deletion of data.

5.5 Sign-up through a partner reseller

When the User creates their account by following the sign-up link of a partner reseller of the Publisher, the account is attributed to that reseller when it is created; the reseller is shown on the sign-up page before the account is created. An attribution is never made afterwards. The reseller may support the User commercially; they only receive the data described in Article 5.6 of the Privacy Policy. The reseller's logo and name may appear, together with the words "Powered by bloo.cards", on the card, in the management area and in the Service's e-mails. The User's contract is concluded with the Publisher alone: prices, billing, payment, support and termination remain governed by these Terms. The reseller's remuneration is borne by the Publisher and has no effect on the prices paid by the User. The reseller has no power to bind the Publisher or to amend these Terms.

Article 6. Offers, pricing and billing

6.1 Available offers

The plan is carried by each Digital card. The prices indicated for consumers are inclusive of all taxes (Belgian VAT of 21% included). The detailed and up-to-date price list appears on the "Pricing" page of the Platform; in the event of a discrepancy on a legal point, these Terms prevail; in the event of a discrepancy on a price, the price displayed on the "Pricing" page at the time of the order prevails.

Offer	Price (incl. VAT, consumers)	Number of cards	Summary
Free for life	€0	Depending on the Platform	Essential features, free of charge and with no time limit.
Pro	€4.99/month (initial 12-month commitment), or €3.99/month billed annually (€47.88/year)	Per card	Extended professional features.
Signature	€6.99/month (initial 12-month commitment), or €5.99/month billed annually (€71.88/year)	Per card	Advanced features.
Premium	€44.99/month (initial 12-month commitment), or €39.99/month billed annually (€479.88/year)	Unlimited cards	Priority support and advanced options.
Corporate	On quotation (set-up fee + subscription), prices shown excluding and including VAT	As quoted	Tailor-made Premium plan for organisations: dedicated configuration, integration and support, governed by specific terms.
NFC PVC card	€14.99 (one-off purchase)	-	Personalised physical card, delivery in Belgium and Luxembourg included.

The "Free for life" Offer allows the Platform to be used free of charge and without commitment.

The monthly price of the paid Offers is that of a monthly subscription with an initial commitment of twelve (12) months, paid in monthly instalments (Articles 6.4 and 15.1); the annual price is that of a twelve (12) month subscription paid in advance.

6.2 VAT

For consumers and customers established in Belgium, Belgian VAT (21%) is included in the displayed price and detailed on the invoice. For taxable business customers established in another Member State of the European Union and holding a valid VAT number, the intra-community reverse charge mechanism may apply. For customers established outside the European Union, VAT may be adjusted or exempted in accordance with the applicable regulations. For the Corporate offer, reserved for organisations, the price is shown excluding and including VAT; Belgian VAT (21%) is calculated on the price excluding VAT.

6.3 Billing cycle and payment

Paid subscriptions are billed in advance, monthly or annually according to the User's choice, by recurring direct debit on the anniversary date of the subscription. Payments are processed exclusively via Mollie. The available payment methods are those offered by Mollie (for example Bancontact, Visa/Mastercard cards, iDEAL, SEPA transfer). The Publisher stores no payment card data or card security code: this data is processed and secured by Mollie; the Publisher retains only the transaction metadata necessary for billing.

6.4 Renewal

In accordance with Article VI.91 of the CDE, a consumer whose subscription has been tacitly renewed may, after the renewal, terminate it at any time without indemnity: the monthly subscription with effect at the end of the current month; the annual subscription subject to one month's notice (Article 15.2, c). The User may at any time switch from monthly to annual billing (or vice versa); the change takes effect at the next due date. Switching an existing subscription from annual to monthly billing does not create an initial commitment. Monthly subscriptions taken out before version 2.0 of these Terms have no initial commitment (Article 15.6).

6.5 Invoices

An invoice is issued after each payment and made available in the "Billing" area of the account; it is also sent by e-mail. For business customers, structured electronic invoices may be issued in accordance with Belgian regulations on electronic invoicing (Peppol). Invoices are kept by the Publisher for ten (10) years from 1 January following their date of issue, in accordance with the Belgian VAT Code (Article 60), including after the closure of the account.

6.6 Price changes

The Publisher may change its prices subject to at least 30 days' notice given by e-mail. For a subscribed User, the change only takes effect on the date of their next renewal. A User who does not accept the new price may terminate free of charge before it takes effect; failing termination, the new price applies at the next renewal. During the initial commitment of a monthly subscription (Article 15.1), the price of the subscribed Offer remains the one in force at subscription: a price change only applies to instalments after the end of the initial commitment.

6.7 Launch offer

As a launch offer and while stocks last, an NFC PVC card is offered to the first 500 paid annual subscriptions (Pro, Signature, Premium or Corporate Offers billed annually). Monthly subscriptions and the "Free for life" Offer do not give rise to entitlement to this offer. Only one NFC PVC card is offered per account or per company; it is ordered from the customer area once the first payment of the annual subscription has been confirmed, and delivered under the conditions of article 6.9. This offer comes in addition to the "Les 300 Pionniers" campaign, which has its own stock and its own conditions (Article 6.14). It is personal, non-transferable, cannot be combined with other promotions and is not convertible into cash. The Publisher reserves the right to end it at any time for the future.

6.8 Promotional codes

Any promotional codes or discounts are valid for the period indicated, cannot be combined unless otherwise stated and are not convertible into cash.

6.9 NFC PVC card: delivery

The NFC PVC card is delivered to an address in Belgium or Luxembourg, delivery costs included; other countries are not served. It is produced from the design composed and validated by the User when ordering, and delivered within 5 to 7 working days of the payment confirmation, and in any event no later than 30 days after the order. In the event of delay, the consumer may require the Publisher to deliver within an additional reasonable period; failing delivery within that period, the consumer may terminate the contract and be refunded. The risk of loss or damage passes to the consumer when they take physical possession of the card.

6.10 Business modules

The Restaurant booking, Loyalty, Quote request and Appointments modules are business modules, available with the Pro, Signature and Premium Offers. Each card includes one business module. Each additional business module activated on the same card is billed at €1.99 incl. VAT per month (€23.88 incl. VAT per year with annual billing); this amount is added to that of the subscription covering the card (for the Premium Offer: the company's subscription) and appears on the same invoice, from the due date following its activation, without pro rata apportionment. Activating an additional business module requires express confirmation of its price in the back office. The User may deactivate it at any time: it is then no longer billed from the next due date; the current period is not refunded. Business modules already activated on a card before 23 September 2026 remain included at no extra cost for as long as they are not deactivated.

6.11 Automatic translation

Automatic translation of a card's content into its other languages is reserved for the paid Offers (Pro, Signature and Premium); a card on the "Free for life" Offer is displayed in its default language. A card's content is translated automatically only when an administrator of the card (the card holder, a person with administrator rights on that card or an administrator of the account) requests it in the back office, after the number of characters to be translated and the estimated price have been displayed, and with that administrator's express confirmation. The card is never translated automatically when it is displayed to a visitor: without a saved translation, visitors see the text in the card's default language. Translations entered by the User personally are free of charge and always take precedence: the automatic translation engine never replaces them.

Automatic translation is billed at €0.25 incl. VAT per block of 10,000 translated characters, per calendar month, any block started being due (at least one block for a month in which a translation took place). Only characters actually sent to the translation service are counted: text that has already been translated and is unchanged is not billed again. The amount for past calendar months is added to the next renewal of the subscription covering the card (for the Premium Offer: the company's subscription) and appears on the same invoice; nothing is billed if the subscription is not renewed. Usage and its estimate can be viewed at any time in the "Billing › Translation" area of the account. The User controls the translated volume: no automatic translation takes place without their confirmation.

6.12 Multilingual chat

Multilingual chat is an option of the Chat module. The visitor chooses their language from 50 languages; each message is translated once, when it is sent, into the language of the other participant in the conversation, by an automatic translation provider. The original text remains available ("See original"). Only the text of the messages is sent to the translation provider, never the name, e-mail address or IP address of the participants. The translation is provided without any guarantee of accuracy or availability: if the provider is unavailable, the message is delivered in its original language.

The option is available with the Pro, Signature and Premium Offers, with no free trial. It is billed at €3.99 incl. VAT per month and per card (€47.88 incl. VAT per year with annual billing); this amount is added to that of the subscription covering the card (for the Premium Offer: the company's subscription) and appears on the same invoice, from the due date following its activation, without pro rata apportionment. Activating the option requires express confirmation of its price in the back office. The User may deactivate it at any time: it is then no longer billed from the next due date; the current period is not refunded. The option ends automatically when the Chat module is hidden or deleted, when the card returns to the "Free for life" Offer or when the card's Offer no longer includes it. The history of existing conversations keeps its translations. Translation is capped at 100,000 translated characters per card and per calendar month; beyond that, messages are delivered in their original language until the following month and the card holder is informed once.

6.13 AI assistant

The AI assistant suggests texts for empty fields in the back office (tagline, job title or hobby, catchphrase, SEO title, description and keywords). It is available with all Plans. To write its suggestions, the Publisher sends to its artificial intelligence provider, Anthropic (Claude model), only the card data needed for writing: card name and type, first name, last name, job title, company, department and tagline of the contact record, city, list of online modules and content of the other fields already filled in. No e-mail address, phone number, address-book contact or visitor data is sent. The provider acts as the Publisher's processor; the data is not used to train its models and is retained by it only for a limited period, in accordance with its commercial terms. As the provider may process this data outside the European Union, this transfer is governed by the European Commission's standard contractual clauses.

Suggestions are generated automatically: they may be inaccurate, incomplete or unsuitable. The User reviews them before inserting them and remains solely responsible for the content published on their card (Article 10.5). A suggestion is saved on the card only when the User clicks "Insert"; they may then freely edit or delete it. The Publisher claims no rights in the inserted texts.

Usage is counted in inserted words: only the words of the text the User inserts are deducted; suggestions that are not used are not. Each account (the company for an account linked to a company, otherwise the User) receives 100 free words, once. Beyond that, the User may buy prepaid packs of 1,000 words for €4.00 incl. VAT, paid in one go; an invoice is issued. Free words are used before purchased words; the balance is shown in the back office. The balance never becomes negative: the last insertion may exceed the remaining balance by a few words, which then drops to zero. Purchased words do not expire while the account exists; they are non-refundable, non-convertible and non-transferable to another account, and are lost when the account is deleted. To prevent abuse, suggestions are limited to five per minute per user.

The word pack is digital content supplied immediately after payment. In accordance with Article VI.53, 13° of the Belgian Code of Economic Law, a consumer who, before purchase, expressly requests that the words be credited immediately and acknowledges that they thereby lose their right of withdrawal can no longer withdraw once the words have been credited. This consent is obtained through a mandatory checkbox before payment. The AI assistant is provided without any availability guarantee; temporary unavailability gives no right to compensation, and purchased words remain available.

6.14 Pioneer terms of sale

The "Les 300 Pionniers" campaign (bloo.cards/pionniers) is an edition limited to 300 NFC PVC cards, separate from the launch offer in Article 6.7. It includes four offers, payable in a single payment via Mollie:

Offer	Price (incl. VAT)	Contents	Pro subscription included
Solo Pioneer	€29.99	1 NFC PVC card in the signature design	12 months
Custom Pioneer	€49.99	1 NFC PVC card with the customer's logo	24 months
Influencer Pack	€99.99	3 NFC PVC cards with logo; mini-CRM set up by the Publisher	12 months per card
Agency / Team Pack	€199.99	5 identical NFC PVC cards with logo; mini-CRM set up by the Publisher; team network dashboard	24 months per card

Counting per card. Each card in an offer takes one of the 300 places: an order counts for 1, 1, 3 or 5 places. An offer is only available if the remaining places cover all of its cards; this check is repeated when the order is placed and when the payment is confirmed.

Pro subscription included and activation codes. Once the payment is confirmed, the Publisher sends to the order's email address one "Pro offered" activation code per card, for the period stated above. Each code is activated on a Digital card on the "Free for life" offer of an active bloo.Cards account with a verified email address; an account can activate only one code. The Pro subscription period runs from the day the code is activated. For a Pack, the customer gives a code to each card holder, who activates it on their own account. The offered Pro subscription involves no direct debit and ends by itself when it expires: the Digital card then returns to the "Free for life" offer, with no loss of data.

No automatic renewal. At the end of the included period, the holder may extend their Pro subscription at the current Pro rate (Article 6.1), by taking out a subscription themselves, or stop. No renewal is automatic and no amount is charged without an express subscription.

Production and delivery. The printing lead times announced on the campaign page (72 hours for the Solo offer, 96 hours after design approval for the Custom offer, priority shipping for the Packs) run from the day the holder's profile is completed and, for a card with a logo, the design is approved. Delivery is made to Belgium or Luxembourg, under the conditions of Article 6.9.

Right of withdrawal. The cards of the Pioneer offers are made to the customer's specifications and clearly personalised (name and details of the holder and, for the Custom, Influencer and Agency offers, the customer's logo). In accordance with Article VI.53, 3° of the CDE, they are excluded from the right of withdrawal once the order has been confirmed and put into production (Article 7.3), without prejudice to the legal guarantee of conformity (Article 13.4) or to the consumer's other statutory rights.

Payment confirmed after the stock has run out. If a payment is confirmed when the remaining places no longer cover all the cards of the order (for example when the order's reservation expired during payment), the order is not performed: the amount paid is refunded in full, free of charge, to the payment method used, no code is issued and the customer is informed by email.

Terms of the order. The price, the number of cards and the Pro subscription period per card are those displayed when the order is placed and recorded with it; any later change to the campaign does not apply to orders already placed. By way of exception in the customer's favour, Custom Pioneer orders paid before version 2.3 of these Terms was published also receive twenty-four (24) months of Pro subscription per card: a code not yet activated is valid for twenty-four months; a Pro subscription already activated is extended by twelve (12) months.

Article 7. Right of withdrawal

This article applies to the consumer who contracts at a distance. It does not apply to business customers (legal persons or natural persons acting for professional purposes), who do not benefit from the right of withdrawal.

7.1 Principle: 14 days

In accordance with Articles VI.47 et seq. of the CDE (transposing Directive 2011/83/EU), the consumer has 14 calendar days to withdraw from the subscription (digital service), without giving any reason, from the conclusion of the contract. The NFC PVC card, which is always personalised, is governed by Article 7.3.

7.2 Subscription to a digital service: immediate performance and waiver

If the consumer wishes the subscription (access to paid features) to begin immediately, before the expiry of the 14-day period, the Publisher obtains at the time of the order:

• their express request that performance of the service begin during the withdrawal period; and
• their express acknowledgement that they will lose their right of withdrawal once the service has been fully performed by the Publisher.

Consequences (Articles VI.46 § 8, VI.51 and VI.53, 1° of the CDE):

• if the consumer withdraws before the full performance of the service, withdrawal remains possible; they are then liable for an amount proportionate to what has been supplied up to the communication of their withdrawal;
• the right of withdrawal is extinguished when the service has been fully performed after the consumer has given the consents above;
• if the consumer has not requested immediate performance, paid access begins upon expiry of the 14-day period.

7.3 Personalised NFC PVC card: exception

The NFC PVC card is a good made to the consumer's specifications and clearly personalised (name, function, data and elements specific to the User). In accordance with Article VI.53, 3° of the CDE, this good is excluded from the right of withdrawal: once the order for a personalised NFC PVC card has been confirmed and put into production, it cannot be subject to withdrawal. The consumer is informed of this and expressly accepts it before validating their order. This exclusion is without prejudice to the legal guarantee of conformity (Article 13.4): a defective or non-conforming card may be returned and replaced on that basis.

7.4 Exercise of the right of withdrawal

The consumer may withdraw:

• online, using the "Withdraw" function ("Se rétracter"), available at all times during the withdrawal period in their customer area under Billing › Subscriptions: after validation with the "Confirm withdrawal" button, the withdrawal is recorded immediately and an acknowledgement of receipt is sent to them by e-mail without delay;
• or by any other unambiguous statement sent to legal@bloo.cards or by post to MOLDEREZ-CONSULT SRL, Square Valère-Gille 13, box 5, 1050 Ixelles, Belgium, where appropriate using the model below.

The deadline is met if the statement is sent before it expires. The Publisher acknowledges receipt of the withdrawal without delay.

Model withdrawal form (complete and return this form only if you wish to withdraw from the contract)

• To MOLDEREZ-CONSULT SRL, Square Valère-Gille 13, box 5, 1050 Ixelles, Belgium, legal@bloo.cards:
• I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract of sale of the following goods (*)/for the provision of the following service (*):
• Ordered on (*)/received on (*):
• Name of consumer(s):
• Address of consumer(s):
• Signature of consumer(s) (only if this form is notified on paper):
• Date:

(*) Delete as appropriate.

7.5 Refund

In the event of a validly exercised withdrawal, the Publisher refunds the sums due (where applicable less the proportionate amount referred to in Article 7.2) within 14 days of receipt of the notification, by the same means of payment as that used for the initial transaction, free of charge.

Article 8. Licence to use

8.1 Grant of licence

The Publisher grants the User a limited, non-exclusive, non-transferable, revocable and personal licence to access the Platform, create and administer their Digital cards, and use the modules and features corresponding to their Offer.

8.2 Restrictions

The User undertakes not to: (a) resell or rent access to the Platform without written agreement; (b) access the Service by unauthorised automated means (bots, scrapers) in a manner that harms the Service; (c) circumvent security measures; (d) carry out reverse engineering beyond what the law mandatorily permits; (e) access the data of other Users without authorisation; or (f) disrupt the availability of the Service (for example by an excessive load or an attack). The User may not reuse the content of the Platform to train artificial intelligence systems without written authorisation.

Article 9. User obligations

9.1 Compliance with laws

The User uses the Service for lawful purposes and in accordance with applicable Belgian and European Union law, in particular in matters of electronic commerce, data protection and intellectual property.

9.2 Respect for third-party rights

The User warrants that they have all the necessary rights over the User Content they publish, that they do not infringe the intellectual property rights, image rights or privacy of third parties, and that they have obtained the required consents of persons appearing in the published content.

9.3 Accuracy of information

The User provides accurate and up-to-date information, refrains from impersonating a third party and from publishing false or misleading information.

Article 10. Prohibited content

10.1 Prohibited content

It is prohibited to create, upload or distribute via the Platform: any illegal content; any hateful or discriminatory content; any content inciting violence, terrorism or self-harm; any pornographic or sexually explicit content, as well as any non-consensual sexual offence; any content infringing intellectual property rights; spam and scams (pyramid schemes, phishing, identity theft); malicious software or code; confidential third-party data published without consent; harassment or threats; and disinformation likely to cause serious harm.

10.2 Reporting illegal content

Anyone may report content they consider illegal using the reporting form or at hello@bloo.cards. The report states: the reasons why the content is considered illegal; its exact URL; the name and e-mail address of the person reporting (except for the offences referred to in Article 16(2)(c) of Regulation (EU) 2022/2065); a statement of good faith. The Publisher acknowledges receipt of the report, examines it in a diligent, objective and non-arbitrary manner, and informs the person reporting of its decision and the available means of redress.

10.3 Moderation decisions

The Publisher may remove content that is manifestly illegal or contrary to these Terms, restrict its visibility, suspend or close the account concerned, and cooperate with the competent authorities. Any decision to remove, restrict visibility, suspend or close is notified to the User concerned with a clear and specific statement of reasons: facts, legal or contractual basis, scope and duration of the measure, and any use of automated means. The User may contest the decision by replying to hello@bloo.cards, without prejudice to their right to bring the matter before the competent courts.

10.4 Points of contact

Single point of contact for authorities (Article 11) and for recipients of the service (Article 12) of Regulation (EU) 2022/2065: hello@bloo.cards · telephone: +32 2 808 30 30. Languages: French, Dutch, German and English.

10.5 User liability

The User is responsible for the User Content they publish. The Publisher acts as a hosting provider for such content and does not exercise prior editorial control; its liability is governed by the law applicable to intermediary service providers.

Article 11. Intellectual property and user content

11.1 Rights in the Platform

All elements of the Platform (software, code, interfaces, visual elements, prefabricated themes and templates, "bloo.Cards" trademarks and logos, documentation) are protected by intellectual property rights belonging to the Publisher or used under licence. Any unauthorised reproduction or exploitation is prohibited.

11.2 Licence on themes

The Publisher grants a limited and non-exclusive licence to use the prefabricated themes and templates solely within the framework of the User's Digital cards. This licence is neither transferable nor resalable and ends upon closure of the account.

11.3 User Content

The User retains all their intellectual property rights over their User Content. Solely for the purpose of providing the Service, the User grants the Publisher a worldwide, non-exclusive and royalty-free licence to host, store, reproduce, technically adapt (optimisation for devices) and display the User Content via their Digital cards and the Wallet, as well as to make backup copies of it. This licence is strictly limited to the operation of the Service, ends with the deletion of the content or the account (subject to technical backups and legal retention obligations), and confers on the Publisher no right to sell the User Content or to exploit it outside the Service.

11.4 Trademarks

The use of the "bloo.Cards" name and logos is prohibited without prior written authorisation.

11.5 User warranty

The User indemnifies the Publisher against third-party claims resulting from an infringement, by the User Content, of intellectual property rights, image rights or privacy. This warranty applies within the limits of ordinary law and does not preclude the mandatory rights of the consumer.

Article 12. Protection of personal data

12.1 Framework

The Publisher processes personal data in accordance with the GDPR and the Belgian Act of 30 July 2018. The details of the processing (purposes, legal bases, recipients, processors, retention periods and the rights of data subjects) appear in the Privacy Policy, which supplements these Terms.

12.2 Rights of data subjects

In accordance with the GDPR, the User has the rights of access, rectification, erasure, restriction, portability and objection, as well as the right not to be subject to a decision based solely on automated processing producing legal effects. These rights are exercised with the privacy contact point at privacy@bloo.cards. The User may also lodge a complaint with the Data Protection Authority (APD), www.autoriteprotectiondonnees.be.

12.3 Data collected by the User through the Service (roles)

For all personal data that the User collects through their Digital card, their Modules and the Wallet / Network (in particular saved contacts, messages, reviews and quote requests, appointments, bookings and waiting-list registrations, chat conversations, job applications, call requests and the data of their loyalty programmes), the User acts as the data controller and the Publisher acts as a processor, on the User's documented instructions, within the meaning of Article 28 of the GDPR. This processing is governed by the Data Processing Agreement annexed to these Terms, which forms an integral part of them and is accepted together with them. The User is responsible for having a legal basis for the collection and use of this data and for informing the data subjects.

By way of exception, showing links between public Digital Cards to other users (network search and 3D graph, Article 17.7 of the Privacy Policy) is a feature of the Platform for which the Publisher is the data controller; the contacts that the User records remain governed by this article and by the Data Processing Agreement.

12.4 Cookies

The management of cookies and trackers (essential cookies, audience measurement subject to consent) is described in the Cookie Policy.

Article 13. Availability, maintenance and guarantee of conformity

13.1 Availability

The Publisher endeavours to keep the Service continuously accessible and aims for an availability rate of 99.5% on an annual basis, as a best-efforts objective, excluding scheduled maintenance periods and force majeure.

13.2 Maintenance

Scheduled maintenance likely to affect availability is, as far as possible, announced in advance and carried out outside peak usage hours.

13.3 Backups and data

The Publisher carries out regular backups. It is nevertheless recommended that the User keep their own copies of their important data. The Publisher remains liable, in accordance with ordinary law, for the loss or alteration of data resulting from its own fault; it is not liable for losses caused by force majeure, by a third party or by the User themselves.

13.4 Legal guarantee of conformity

The consumer benefits from the mandatory legal guarantees provided for by the CDE: the guarantee of conformity of the digital service (provision of the Service in conformity with the contract throughout its duration) and, for the NFC PVC card, the legal guarantee of conformity of goods (two years from delivery). These guarantees apply free of charge and independently of any commercial guarantee. They are neither excluded nor limited by these Terms.

Article 14. Liability

14.1 Publisher's liability

The Publisher is liable for the non-performance or improper performance of its obligations in accordance with Belgian law. The limitations provided for in this article do not apply, and can in no case be invoked, in the event of:

• fraud or gross negligence of the Publisher or its agents;
• harm to the life, physical integrity or health of a person;
• breach of an essential obligation of the contract;
• implementation of the legal guarantees of conformity (Article 13.4);
• any other case where the law prohibits the limitation or exclusion of liability.

14.2 Limitation

Within the limits permitted by law only and subject to Article 14.1, the Publisher's contractual liability for direct damage is limited, per event, to the total amount paid by the User for the Service during the 12 months preceding the triggering event. With respect to consumers, no provision of this article may have the effect of depriving them of a mandatory right or of reversing the burden of proof to their detriment.

14.3 Indirect damage

Within the limits permitted by law and subject to Article 14.1, the Publisher is not liable for indirect damage such as loss of profits, turnover, clientele or data, nor for operating losses.

14.4 User's liability

The User is responsible for the User Content and for the use they make of the Service, in accordance with ordinary law.

14.5 Force majeure

Neither party is liable for a failure resulting from an event of force majeure (in particular natural disaster, war, large-scale social movement, major network or power outage, large-scale cyberattack, epidemic). The affected party informs the other within a reasonable time.

Article 15. Term, non-payment and termination

15.1 Term

The monthly subscription is concluded for an initial term of twelve (12) months (the "initial commitment"), payable monthly in advance (twelve instalments). The initial commitment runs from the start of the service: payment of the first instalment or, for a consumer who did not request immediate performance, activation when the withdrawal period expires (Article 7.2). Its duration is shown before payment; its end date appears on the first invoice and in the "Billing › Subscriptions" area. At the end of the initial commitment, the monthly subscription continues by tacit renewal, for an indefinite term, from month to month. Moving to a higher Offer with monthly billing, which replaces the current subscription, does not start a new commitment: if the replaced subscription is still under its initial commitment, the end date of that commitment is kept; otherwise (a subscription without an initial commitment or whose commitment has expired), an initial commitment of twelve (12) months applies. Any other new monthly subscription, in particular for another Digital card, starts its own initial commitment of twelve (12) months. The annual subscription is concluded for twelve (12) months, payable in advance, and renews tacitly (Article 6.4). The FREE Offer ("Free for life") is concluded for an indefinite term, free of charge. Monthly subscriptions taken out before version 2.0 of these Terms remain governed by Article 15.6.

15.2 Termination by the User

The User may request termination at any time, without giving reasons, free of charge and without penalty, from their customer area (Billing › Subscriptions) or by e-mail to hello@bloo.cards. The Publisher confirms the termination by e-mail and states the date on which it takes effect.

• a) Monthly payment: during the initial commitment (Article 15.1), termination is registered as soon as it is requested and takes effect at the end of the initial commitment; the monthly instalments remain due until that date, access to the paid features is maintained until the end of the last paid period, and no payment is collected after the end of the initial commitment. After the initial commitment, and for a monthly subscription without an initial commitment (Article 15.6), termination takes effect at the end of the current billing month; no further payment is collected.
• b) Annual payment: termination takes effect at the end of the current annual period and prevents renewal. The current period, paid in advance, is not refunded, subject to Article 7 and point c).
• c) After a tacit renewal, the consumer may terminate at any time without indemnity (Article VI.91 of the CDE): the monthly subscription with effect at the end of the current month (point a); the annual subscription subject to one month's notice. The part of the price paid in advance corresponding to the period after termination takes effect is refunded within 14 days.
• d) When the termination takes effect, the Digital card concerned switches to the FREE Offer. Termination alone does not erase any data. Account closure is governed by Article 15.5.
• e) Initial commitment and other rights: the initial commitment does not limit the consumer's 14-day right of withdrawal, which is exercised under Article 7. Nor does it limit the right to terminate free of charge before an amendment to these Terms takes effect (Article 17.3): the termination, requested by e-mail to hello@bloo.cards, then takes effect no later than the date on which the amendment takes effect, with no instalment due beyond it.
• f) Deleting the Digital card or closing the account during the initial commitment: the User may at any time delete the Digital card covered by a monthly subscription still under its initial commitment, or close their account (Article 15.5); neither the deletion, nor the closure, nor the erasure of data is prevented. They count as termination of the subscription concerned, which takes effect at the end of the initial commitment: the remaining monthly instalments until that date remain due and are collected on their due dates; no payment is collected afterwards. The corresponding invoices are issued and sent to the User's billing identity, which is kept for that sole purpose after the other data is erased (Article 15.5).

15.3 Non-payment policy

Non-payment of a subscription entails neither the deletion of the account nor the erasure of the data. In the event of failure to pay for a paid Digital card:

• the Digital card remains online after the due date;
• it is only deactivated upon the expiry of a period of 14 days after the due date;
• no data is erased: the card switches to a minimalist version equivalent to the "Free for life" Offer;
• all features and content are fully restored as soon as payment is regularised.

A reminder is sent by e-mail before deactivation. This policy corresponds to that displayed on the "Pricing" page of the Platform. Non-payment does not end the initial commitment of a monthly subscription (Article 15.1): instalments that have fallen due remain payable.

15.4 Termination by the Publisher

The Publisher may terminate the contract in the event of: (a) a substantial breach of these Terms not remedied after notification and a reasonable period; (b) fraudulent or illegal activity (immediate termination possible); or (c) a requirement of a competent authority. For a free account that has remained inactive for more than 12 consecutive months, the Publisher may close the account after prior notification by e-mail and a period of at least 30 days allowing the User to object or export their data.

Where the Publisher terminates a monthly subscription during its initial commitment (Article 15.1) because of a breach by the User (reasons a or b above, or non-payment not regularised under Article 15.3), the remaining monthly instalments until the end of the initial commitment remain due; they are collected on their due dates or invoiced. Where the Publisher terminates for any other reason (in particular a requirement of a competent authority, discontinuation of the Service or a commercial decision), the subscription ends immediately: no instalment is due after that date and the part of the price paid in advance corresponding to the period not provided is refunded within 14 days. In both cases, the Publisher informs the User by e-mail of the reason for the termination and, where applicable, of the amount still due.

15.5 Consequences of account closure

In the event of account closure (at the User's initiative or for a reason referred to in Article 15.4):

• access to the features is disabled;
• the User has a period of 15 days to export their data (Article 16);
• at the end of a period of 30 days, the account data is securely deleted, with the exception of data that the Publisher is legally required to keep (in particular invoices, kept for ten (10) years from 1 January following their issue, Article 6.5);
• if the User closes their account during the initial commitment of a monthly subscription, the remaining monthly instalments until the end of the initial commitment remain due (Article 15.2, f); the billing identity (name, address, e-mail address, VAT number) is kept until they have been paid and invoiced, and thereafter with the invoices.

The deletion of data provided for in this article does not apply to mere non-payment, which is governed by Article 15.3.

15.6 Monthly subscriptions taken out before version 2.0 (transitional provision)

The twelve (12) month initial commitment of the monthly subscription (Articles 6.4, 15.1 and 15.2, a) applies only to monthly subscriptions taken out from the publication of version 2.0 of these Terms, the commitment then being shown before payment and accepted when ordering; from that publication it applies to every new subscription, including one taken out by a User whose account already existed. Monthly subscriptions taken out before that publication remain concluded for an indefinite term, with no minimum term: they may be cancelled at any time, with effect at the end of the current billing month, and are never subject to the initial commitment, including after version 2.0 takes effect for their holder (Article 17.2). Switching such a subscription to annual billing, or vice versa (Article 6.4), does not create an initial commitment; moving such a subscription to a higher Offer with monthly billing, however, starts an initial commitment of twelve (12) months, as the replaced subscription has no commitment in progress (Article 15.1). Monthly subscriptions resulting from the "Wheel of Fortune" (monthly Pro subscription accepted from the wheel's offer, following the free months) never have an initial commitment: they remain cancellable at any time, with effect at the end of the current month; the same applies to subscriptions resulting from any other promotional offer whose specific conditions provide for cancellation at any time. By contrast, a monthly subscription taken out through the usual ordering process, including by a User who received free months from the Wheel of Fortune, has the twelve (12) month initial commitment (Article 15.1).

Article 16. Data portability and export

16.1 Right to data portability

In accordance with Article 20 of the GDPR, the User may receive the personal data they have provided in a structured, commonly used and machine-readable format.

16.2 Formats and process

The Publisher makes available usual export formats (for example JSON, CSV, vCard). The export can be requested from the account or at privacy@bloo.cards and is provided within a reasonable time via a secure download link.

16.3 Limits

Certain technical or aggregated data may not be exportable where their extraction would be technically disproportionate or would infringe the rights of other persons.

Article 17. Amendment of the Terms

17.1 Principle

The Publisher may amend these Terms to comply with a legal obligation, improve or secure the Service, or clarify its provisions.

17.2 Notification

Any substantial amendment is notified by e-mail at least 30 days before it takes effect. Amendments imposed by law take effect on the date required by it, without retroactive effect to the User's detriment.

17.3 Acceptance or refusal

Continued use of the Service after entry into force constitutes acceptance. A User who refuses the new Terms may terminate free of charge before their entry into force.

17.4 History

Previous versions may be obtained on request at legal@bloo.cards.

Version 2.0 of 5 October 2026: initial commitment of twelve (12) months for new monthly subscriptions (Articles 6.1, 6.4, 6.6, 15.1, 15.2, 15.3, 15.4 and 15.5), kept when moving to a higher Offer; remaining monthly instalments due if the Digital card is deleted or the account is closed during the commitment, or if the Publisher terminates because of a breach by the User (Article 15.4); new Article 15.6 (monthly subscriptions taken out before version 2.0 and Wheel of Fortune subscriptions: no minimum term); right of withdrawal unchanged.

Version 2.1 of 5 October 2026: exception to Article 12.3 (the Publisher is the data controller for showing links between public Digital Cards in network search, Privacy Policy 1.12, Article 17.7).

Version 2.1.1 of 6 October 2026: formal correction with no change in substance: contact and appeal address replaced by hello@bloo.cards throughout the Terms, including Article 10.3.

Version 2.2 of 6 October 2026: price of the NFC PVC card raised to €14.99 incl. VAT (Article 6.1); new Article 6.14 "Pioneer terms of sale" (offers, Pro subscription period per card, activation codes, counting per card, no automatic renewal, extension at the current Pro rate, right of withdrawal, refund if the stock is exceeded) and cross-reference from Article 6.7. These changes apply to orders placed from that date.

Version 2.2.1 of 7 October 2026: verification of registration by SMS (Article 5.1), with no change to your rights.

Version 2.3 of 8 October 2026: the Custom Pioneer offer now includes twenty-four (24) months of Pro subscription per card, including for orders already paid (Article 6.14); invoice retention period aligned with the Belgian VAT Code: ten (10) years from 1 January following their issue (Articles 6.5 and 15.5); the initial twelve (12)-month commitment is stated with each monthly price, and Corporate prices are shown excluding and including VAT (Articles 6.1 and 6.2).

Version 2.3.1 of 8 October 2026: formal correction with no change in substance: number of module types updated in Article 3.1 (44, including 4 business modules).

Version 1.9 of 5 October 2026: Article 12.3 extended to all data collected through the Digital card, the Modules and the Wallet; addition of the annex "Data Processing Agreement (Article 28 GDPR)".

Article 18. Applicable law and jurisdiction

18.1 Applicable law

These Terms and the contract between the User and the Publisher are governed by Belgian law, in particular the Code of Economic Law. For a consumer having their habitual residence in another Member State of the European Union, this choice does not deprive them of the protection of the mandatory provisions of the law of their habitual residence (Article 6 of Regulation (EC) 593/2008, "Rome I").

18.2 Jurisdiction

Disputes fall within the competence of the competent Belgian courts of the judicial district of Brussels. However, the consumer may bring proceedings before the courts of their domicile and may only be sued before those courts, in accordance with Regulation (EU) 1215/2012 ("Brussels I bis"). This jurisdiction clause does not deprive the consumer of any mandatory forum.

Article 19. Amicable settlement and consumer mediation

19.1 Prior complaint

Any complaint may be sent to the Publisher at hello@bloo.cards or by post to the address given in Article 1. The Publisher endeavours to respond within a reasonable time.

19.2 Consumer mediation

If no solution is found, the consumer may make free use of consumer mediation. In Belgium, the competent body is the Consumer Mediation Service:

• Address: Boulevard du Roi Albert II 8, box 1, 1000 Brussels;
• Website: mediationconsommateur.be.

19.3 Cross-border disputes within the European Union

The European online dispute resolution (ODR) platform set up by the European Commission ceased operations on 20 July 2025. For a cross-border consumer dispute within the European Union, the consumer may contact the network of European Consumer Centres (European Consumer Centre Belgium, www.eccbelgique.be), without prejudice to recourse to the Consumer Mediation Service.

19.4 Protection of personal data

For a dispute relating to personal data, the User may refer the matter to the Data Protection Authority (www.autoriteprotectiondonnees.be).

19.5 Business customers

For commercial disputes (B2B), the parties may agree to resort to mediation or arbitration, in particular via CEPANI (www.cepani.be).

19.6 Judicial recourse

Recourse to mediation is optional and does not deprive any party of its right to bring the matter before the competent courts (Article 18).

Article 20. Miscellaneous provisions and language primacy

20.1 Entirety

These Terms, together with the Privacy Policy and the Cookie Policy, constitute the agreement between the User and the Publisher relating to the Service.

20.2 Partial invalidity

If a provision is found to be null or inapplicable, it is deemed unwritten or reduced to what is lawful, and the other provisions remain in force.

20.3 Non-waiver

Failure to exercise a right does not constitute a waiver of it.

20.4 Assignment

The User may not assign their rights without the written agreement of the Publisher. The Publisher may assign the contract to a successor or a related entity in the event of reorganisation, without such assignment being able to diminish the rights of the consumer; the User is informed of it and, if they are a consumer, may terminate free of charge if the assignment affects their rights.

20.5 Survival

The articles relating to intellectual property, data protection, liability, applicable law and jurisdiction survive the end of the contract.

20.6 Language primacy

The French version is the legal and original version; the NL/DE/EN versions are courtesy translations; in the event of any discrepancy, the French version prevails.

Article 21. Contact

• Molderez-Consult SRL · Square Valère-Gille 13, box 5, 1050 Ixelles, Belgium
• BCE / VAT: BE 0842.262.084, RLE Brussels
• Telephone: +32 2 808 30 30
• General contact and support: hello@bloo.cards
• Legal contact: legal@bloo.cards
• "Data protection / privacy" contact: privacy@bloo.cards

Annex. Data Processing Agreement (Article 28 GDPR)

Version 1.9 of 5 October 2026. This agreement (the "Agreement") is concluded between the User, acting as data controller (the "Controller"), and Molderez-Consult SRL, acting as processor (the "Processor"). It forms an integral part of the Terms and is accepted together with them (Article 4). In the event of a conflict between the Agreement and another provision of the Terms, the Agreement prevails as regards the protection of personal data. For CORPORATE accounts, a signable version of the Agreement may be obtained on request at privacy@bloo.cards.

A.1 Subject matter

The Processor processes, on behalf of the Controller, the personal data that the Controller collects or records through their Digital card, their Modules and the Wallet / Network (Article 12.3). The processing for which the Publisher is itself the controller (the User's account, billing, security of the Platform, statistics of the Service, communications) is described in the Privacy Policy and is not covered by the Agreement.

A.2 Duration

The Agreement applies for the entire period during which the Controller uses the Service and until the deletion of the data provided for in Article A.11.

A.3 Nature and purposes of the processing

Nature: hosting, recording, organisation, consultation and display in the back office and the Wallet, transmission to the Controller by e-mail and, where the Controller has enabled it, by SMS, automatic translation where the Controller has enabled it, export and erasure. Purposes: enabling the Controller to receive and manage the requests, appointments, bookings, conversations, job applications and contacts arising from their Digital card, and to manage their contact book and loyalty programmes. The Processor does not process this data for its own purposes, does not sell it and does not use it for advertising.

A.4 Types of data and categories of data subjects

Data subjects	Types of data
The Controller's contacts (persons whose details they save in the Wallet / Network: card exchange, scanned business card, manual entry)	Identity, job title, company, e-mail addresses, telephone numbers, address, website, VAT number, social networks, notes, tags, reminders, history of exchanges (date, channel, identity used), where applicable a photo of the scanned business card, kept with the contact record
Visitors who send a message, a review or a quote request	Name and contact details provided, content of the message, of the review (rating, comment) or of the request
Persons who book an appointment	Identity, contact details, chosen date and service, status of any deposit (paid via Mollie)
Restaurant guests (booking, waiting list)	Identity, contact details, date, number of guests, remarks; where applicable declared allergies (with express consent) and status of deposits
Participants in the card's chat	Name or first name provided, messages and their translations
Applicants for a job offer published on the card	Identity, contact details, message, link to the CV published on the applicant's bloo.Cards card
Persons who request a call, a call-back or a video call	Name provided, reason for the request, any voicemail message
Persons who request a meeting at an event announced on the card	Identity, company, contact details, message, preferred day and time
Persons who leave their contact details on the card or ask to be notified when it goes online	Contact details provided
Members of the Controller's loyalty programmes	First name and initial of the surname, joining and visit dates, stamps, points, cumulative amount of recorded purchases, status, reward vouchers, register of operations

Allergies declared when booking a restaurant table may constitute data concerning health (Article 9 GDPR): they are recorded only with the guest's express consent and are deleted automatically on the date set by the restaurant. The Service is not designed to process other special categories of data or data relating to criminal convictions; the Controller refrains from collecting such data through their Digital card. The detailed description is set out in Article 17 of the Privacy Policy (in particular 17.1, 17.3 and 17.6).

A.5 Documented instructions

The Controller's instructions consist of the Terms, the Agreement and the settings and actions that the Controller carries out in the back office and the Wallet (activation and configuration of Modules, deletion, export). Any other instruction is sent in writing to privacy@bloo.cards. The Processor immediately informs the Controller if, in its opinion, an instruction infringes the GDPR or other data protection provisions. If it is required to process data under Union or Belgian law, it informs the Controller before processing, unless that law prohibits it.

A.6 Confidentiality

The Processor ensures that persons authorised to process the data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality, and only have access to it to the extent necessary to provide the Service.

A.7 Security (Article 32 GDPR)

The Processor implements the technical and organisational measures described on the Security page and in Article 8 of the Privacy Policy, in particular:

• encryption of communications in transit (HTTPS, forced redirection and HSTS header);
• hourly encrypted (AES-256) backups of the database, kept on a rotation of 48 hours, 14 days, 8 weeks and 12 months;
• access control: hashed passwords (Argon2id), available two-step verification and passkeys, access rights per card and per role (holder, administrator, viewer);
• a chained and signed (HMAC) audit log of operations on accounts and cards;
• pseudonymisation of IP addresses (HMAC fingerprint computed with a secret key) in the audit log and in the traces of the card forms.

The Processor may change these measures provided that the level of protection is not reduced.

A.8 Sub-processors

The Controller gives a general written authorisation for the use of the sub-processors whose list, with their purpose, country and the safeguard applicable to transfers, is published on the Processors page. The Processor informs the Controller of any intended addition or replacement by e-mail to their account address at least 30 days before it is put into service, and updates the page on the same date. During this period, the Controller may object to the change in writing, stating reasons, at privacy@bloo.cards; the parties then seek a solution in good faith and, failing that, the Controller may terminate the Service or Services concerned free of charge before the change takes effect. The Processor imposes on each sub-processor, by contract, data protection obligations equivalent to those of the Agreement and remains liable to the Controller for their performance (Article 28(4) GDPR).

A.9 Assistance with data subjects' rights

The Service allows the Controller to view, rectify, delete and export the data in the back office and the Wallet. The Processor forwards to the Controller without delay any request to exercise rights that it receives directly from a data subject and does not respond to it itself without instructions, except to refer the person to the Controller. It assists the Controller, insofar as possible and taking into account the nature of the processing, in responding to such requests.

A.10 Personal data breaches and other obligations

The Processor notifies the Controller of any personal data breach affecting the data processed on their behalf without undue delay and at the latest 48 hours after becoming aware of it, by e-mail to their account address. The notification contains the information referred to in Article 33(3) GDPR available to it, supplemented as it becomes available. It documents the breach and assists the Controller in meeting their obligations to notify the supervisory authority and the data subjects. Taking into account the nature of the processing and the information available to it, it also assists the Controller with the security of processing, data protection impact assessments and prior consultation (Articles 32 to 36 GDPR).

A.11 Fate of the data at the end of the contract

When the account is closed, the Controller has 15 days to export their data (Articles 15.5 and 16); 30 days after the closure request, the data is deleted, except data that the law requires to be kept. Copies held in the encrypted backups are erased at the end of their rotation cycle (at most 12 months). During the contract, messages and quote requests deleted by the Controller are permanently erased 30 days after their deletion.

A.12 Audits

The Processor makes available to the Controller the information necessary to demonstrate compliance with Article 28 GDPR: on written request to privacy@bloo.cards, it answers a security questionnaire and provides the relevant documents (this Agreement, the list of sub-processors, the description of the security measures). The Controller may also have an audit carried out, including on site, by themselves or by an independent auditor bound by confidentiality, at the Controller's expense, with at least 30 days' written notice, no more than once per 12-month period except in the event of a personal data breach or at the request of a supervisory authority, during business hours and without access to other customers' data.

A.13 Transfers outside the European Union

The Processor transfers the data outside the European Economic Area only to the sub-processors published on the Processors page, on the basis of an adequacy decision of the European Commission or of the standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR), as indicated in Article 9 of the Privacy Policy.

A.14 Liability

The parties' liability is governed by Article 14 of the Terms, without prejudice to Article 82 GDPR.

A.15 Applicable law

The Agreement is governed by Belgian law. Disputes fall within the jurisdiction of the courts designated in Article 18.