Your professional data in Bluelake
If you work in Data & AI, or lead or buy IT at a company we follow, your professional data may be in our database. This page explains what we process, why, and how to exercise your rights.
Last updated November 15, 2026.
Bluelake operates a platform focused on the Data & AI ecosystem, built by structuring publicly available professional information about professionals in the field and about the IT leaders and buyers of the accounts we follow.
What data we process
Public professional data: name, job title, employment history, experience, skills and technologies, industry sector, education, professional location, and public professional profile URL. When one of our clients asks for it, also your professional contact details: work email address and mobile number. We never look for a personal email address, and we process no sensitive data.
Where this data comes from
This data is not collected directly from you. It comes from publicly accessible professional information and from third-party providers specialized in professional data. Contact details come from a provider specialized in professional contact data, based in the United States, which we ask only when a client requests them: we send it what identifies you at work, such as your name, current employer, public profile link or the domain of your work email.
Purpose and legal basis
We use this data to map the Data & AI ecosystem and identify relevant profiles for our clients' and users' needs (sourcing and market intelligence). A client who contacts you about a job or an engagement must tell you who they are, where your data comes from and how to object; you can also object with Bluelake, by writing to our privacy team. The IT leaders and buyers of the accounts we follow (CIOs, CTOs, IT and data directors, buyers of IT and professional services, vendor management) appear in the reading of those accounts, as their decision-makers and buyers: the people our clients deal with. This processing relies on our legitimate interest (Article 6.1.f of the GDPR) in mapping the Data & AI ecosystem, balanced against your rights and freedoms. We may also contact some of these professionals ourselves, about Bluelake, in connection with their role, including through our ads on LinkedIn: see Prospects in our privacy policy.
Who has access
Bluelake and the authenticated users of our platform, within the limits of their plan. Access always requires an account and acceptance of our terms, except in the demo of Billy that we open to the people we write to, which shows the same professional data without a person's name (role, headline, technologies, certifications, projects, city or area, and moves by company and month). Our website shows only some recent appointments, never with a person's name: the company, the role, the month, and whether it was a promotion or an arrival. Your contact details, once a client has requested them, are visible only to the users of that client's company. The users of a client company can also copy your profile into their company's CRM, or download it in an export. Billy, our agent in Bluelake, reads this data to answer our users' questions: the data it needs is sent to our AI provider, which does not use it to train its models and deletes it within 30 days, unless a legal obligation or a breach of its usage policy requires keeping it longer. We do not sell your data. Our technical providers act on our behalf and comply with the GDPR.
How long we keep it
Profiles are kept while they remain current in public sources. Profiles that become inactive (no public activity for 24 months or more) are deleted. Contact details are deleted with the account of the client company that requested them; that provider keeps a history of its searches for 3 months. If you object, your data is deleted within one month.
Transfers outside the European Union
Where data is transferred outside the EU/EEA, those transfers are framed by the safeguards provided for by the GDPR (standard contractual clauses or equivalent mechanisms). The search for contact details by that provider, based in the United States, is framed by standard contractual clauses. The AI model behind Billy involves processing in the United States, framed by the standard contractual clauses provided for by the GDPR.
Your rights
You have the right to access, rectify, erase, object to, restrict and port your data under the GDPR. If you ask us to correct or delete your data, we pass your request on to the client companies that unlocked your profile in Bluelake. To object or request removal, write to our privacy team with your name and your public profile URL; we process the request within one month. You may also lodge a complaint with the CNIL (the French supervisory authority).
See also our approach to data and our Privacy Policy.