Skip to main content

Privacy policy

1. Introduction

This privacy policy describes how we process your personal data in connection with your use of our dating platform, Celsius ("Platform"), available through our mobile application ("App"). This is the new version of the original dating functionality on the Campus platform. The Celsius dating platform is operated by Hexagons BV, a company registered under Belgian law with company/VAT number BE1009.785.044 ("Hexagons," "Celsius," "we," "us").

Protecting your privacy is of the utmost importance to us. This privacy policy explains how, why, and on what legal grounds we process your personal data. It also ensures that you retain control over your data while being informed about any data sharing practices.

Your data is processed in accordance with Belgian and European data protection regulations, including the General Data Protection Regulation 2016/679 ("GDPR"), as well as applicable national laws.

We encourage you to read this privacy policy carefully. It outlines your rights regarding your personal data, provides details about our data processing practices, and explains how you can exercise your rights.

Important notes:

  • This privacy policy does not apply to the practices or conditions of third-party services.

  • Our app is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we discover that a user is under the age of 18, we will take appropriate steps to deactivate their account immediately.

  • By using our Celsius Dating Platform, you agree to the terms of this privacy policy.


2. Data Controller Responsibilities

As a data controller, we determine the purposes and means of processing your personal data, either independently or in cooperation with our clients (companies).

For personal data processed on the App in relation to Students, Hexagons BV and the Business User act as joint data controllers. In accordance with Article 26 of the GDPR, we have made clear agreements with Business Users to define responsibilities and ensure compliance with GDPR requirements.

Important notes:

Hexagons BV is not responsible for how your personal data is handled once processed outside the App. The Business User’s privacy policy applies and will be made available to you.


3. Data Collection and Purposes

 

Purpose

Collected data

Legal basis

App functionality, including but not limited to: registration and user management; your use of the App; the provision of the App, the global Celsius platform and any related Celsius services.

· User IDs

· Email address

· Password

· First name

· Last name

· Gender identity

· Date of birth

· School

· Field of study

· Profile picture and optional additional uploaded photos

· Location

· Device ID

· Matches with other users

· Degree (if relevant)

· Chat messages

· Dating preferences (including orientation)

Execution of a contract or actions related to a contract with the user.

Analytics and crash analysis, including but not limited to: anonymized and aggregated app user data; analysis of user-specific crash reports.

· User IDs

· Operating system

· Device ID

· Location

· App crash information

· Log information

 

Legitimate interests to improve the performance of the app.

Fraud prevention, security and compliance.

· User IDs

· Operating System

· Device ID

· Location

· Email Address

· Date of Birth

 

Legal obligation and legitimate interests for fraud prevention, security and compliance.

 


4. Third-party Processors and Data Sharing

Cloud Data Storage

All user data collected through the platform is securely stored on servers of Google Cloud Platform (GCP) in the European Economic Area (EEA). Google ensures compliance with EU data protection standards and provides robust security and privacy measures for your personal data.

For more information on how Google processes and protects your data, please refer to the Google Cloud Privacy Policy.

Additional Third-Party Processing

We collaborate with carefully selected third-party service providers ("processors") who help us deliver our platform and services. We only share what is necessary for the processors to perform their specific services. We only work with processors who provide sufficient guarantees that they will protect your data in accordance with the GDPR and other applicable data protection laws.

List of third-party processors with whom your personal data may also be shared by Hexagons BV:

Data Processor Purpose & Activity Shared Data Location
Google Analytics & Monitoring · User IDs· Operating System· Location· App crash data· Log info EEA
HubSpot CRM Platform · User IDs· Email Address· First Name· Last Name EEA

Data Sharing

Hexagons BV only shares personal data that is relevant and necessary for your use of the platform and to operate our services. When we transfer your personal data to third parties or processors, we ensure that appropriate safeguards and security measures are in place to protect your information.

In addition, we may disclose your personal data if required by law or when we in good faith determine that such disclosure is necessary to:

  • Comply with a request from a supervisory authority, a legal investigation, court order, or legal proceedings related to the Celsius Platform.

  • Address claims against Hexagons BV regarding personal data that may infringe the rights of third parties.

  • Protect the rights, property, or safety of Hexagons BV, our employees, contractors, users, or the general public.

Access to Your Data

Your personal data will only be accessed by processors, employees, or contractors of Hexagons BV, and by third parties on a strict "need-to-know" basis. Access is limited to the extent necessary to perform their specific tasks or services.

No Unauthorized Sale or Sharing

Hexagons BV will never sell or lend your personal data to third parties without your explicit consent. In the event of a significant change in the business structure—such as a merger, acquisition, reorganization, asset sale, or bankruptcy—Hexagons BV may transfer your personal data as part of the transaction. In such cases, we will make reasonable efforts to ensure the recipient adheres to this privacy statement.


5. Data Location and Transfer

We do not transfer your personal data outside the European Economic Area (EEA).

If a transfer outside the EEA becomes necessary in the future, we will ensure appropriate safeguards are in place to comply with applicable data protection laws. These safeguards may include, but are not limited to:

  • Use of Standard Contractual Clauses approved by the European Commission.

  • Implementation of additional measures to adequately protect your data.

You will be informed of such transfers and the applicable safeguards in accordance with legal requirements.


6. Data Protection

At Celsius, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with processing your personal data. These measures include, but are not limited to:

  • Technical controls and protections such as encryption, authentication, and authorization to secure your data.

  • Data recovery and backup systems to minimize the impact of potential incidents.

  • Incident response plans to efficiently address data breaches.

  • Regular testing and evaluation of our security measures to ensure effectiveness.

Important note:
While we strive to protect your personal data, it is important to understand that data transmission over the internet inherently carries risks. Despite taking all precautions to secure your information, we cannot guarantee absolute security.


7. Data Retention

We will only process, store, or retain your personal data as long as necessary to fulfill the purposes described in section 3 of this privacy policy, including compliance with legal, regulatory, tax, accounting, or reporting obligations.

We may retain your personal data for a longer period if legally required, or in case of a complaint, or if we reasonably believe there is a dispute or potential legal action regarding our relationship with you or your company or organization. After that, data may remain in our backups or archives but will no longer be actively processed.

Retention periods may vary depending on the purposes of processing and our legal obligations.

The Celsius Dating Platform applies the following retention periods:

  • All data will be deleted 24 hours after account closure. Student accounts must complete an annual email verification to confirm that the user is still a student. If this verification fails or is ignored, the account will be automatically closed.

All technical data that is (pseudo-)anonymized or aggregated will be deleted 12 months after collection.


8. Your Rights and How to Exercise Them

Your Rights

Under Articles 15–22 of the GDPR, you have the following rights regarding the processing of your personal data via the Celsius Dating Platform:

  • Right of Access
    You have the right to request confirmation of whether we process your personal data. If so, you may access the data, understand how and why it is processed, and request a copy.

  • Right to Rectification
    You may request correction of inaccurate personal data or completion of incomplete data we process about you. As a student, you may exercise this right by submitting a data change request in the app for fields not editable via self-service, such as first or last name.

  • Right to Erasure ("Right to be Forgotten")
    You may request the deletion of your personal data under certain conditions. As a student, you can exercise this right by submitting a deletion request via the app.

  • Right to Restrict Processing
    You may request restriction of processing in specific cases, such as when data accuracy is contested or processing is unlawful.

  • Right to Data Portability
    You may receive the personal data you provided to us in a structured, commonly used format (e.g., JSON).

  • Right to Object
    You may object to the processing of your personal data when it is based on our legitimate interest. You may also object at any time, free of charge, to the processing of your data for direct marketing purposes.

Exercising Your Rights

The Celsius Dating Platform offers self-service access to view, update, or delete data linked to your account—either directly or through a request submission.

To exercise any rights not supported by self-service, you can contact us via: privacy@campusapp.app

Exercising these rights is generally free of charge. However, we may charge an administrative fee for repeated or excessive requests.
To verify your identity, we may request proof such as a copy of your ID. Please ensure non-essential information (e.g., photo, ID number) is hidden before submission.

Complaints

If you believe your rights have been violated, you have the right to lodge a complaint with the appropriate data protection authority.

In Belgium, you can contact:

Data Protection Authority
Email: contact@apd-gba.be
Address: Drukpersstraat 35, 1000 Brussels

We recommend contacting us first at privacy@campusapp.app so we can address your concerns directly before involving the authority.


9. Governing Law and Jurisdiction

This privacy policy is governed by and interpreted in accordance with Belgian law. Any disputes arising from this privacy policy fall under the exclusive jurisdiction of the courts of Ghent.
We encourage you to contact us first via privacy@campusapp.app so we can address your concerns directly before pursuing legal action.


10. Changes to This Privacy Policy

Hexagons BV reserves the right to update this privacy policy at any time. The date of the last revision is indicated at the top of this document.

Notice of Changes: We will notify you explicitly of significant updates through the platform and, if necessary, request your consent for major changes.
Effective Date: Updates take effect 7 days after publication unless required to comply with legal obligations, in which case they take effect immediately.