Privacy Policy


Privacy Notice

Version: May 2018

 

I. Name and address of the data controller

 

The data controller as defined by the General Data Protection Regulation and other national data protection laws of the member states as well as any other regulations pertaining to data protection is:
BLOKS. GmbH
Lindberghstraße 3
80939 München
Deutschland
+49 89 5505 4610
info@bloks.de
www.bloks.de

 

II. Name and address of the Data Protection Officer

 

The Data Protection Officer of the data controller is:
DataCo GmbH
Kıvanç Semen
Siegfriedstraße 8
80803 München
Deutschland
+49 89 740045840
datenschutz@dataguard.de
www.dataguard.de

 

III. General information pertaining to the processing of data

 

1. Scope of the processing of personal data

We basically only process the personal data of our users if this is necessary for providing a functional website and our contents and services. The processing of the personal data of our users is performed regularly with the consent of the user only. An exception applies in those cases whereby the prior obtaining of a consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.


2. Legal basis for the processing of personal data

Art. 6 para. 1 figure 1 point a of the GDPR serves as the legal basis for obtaining the consent of the data subject for the processing of personal data.

Article 6 para. 1 figure 1 point b of the GDPR serves as the legal basis for the processing of personal data necessary for performing a contract whose contractual party is the data subject. This also applies to processing operations necessary for implementing the pre-contractual measures.

Art. 6 para. 1 figure 1 point c of the GDPR serves as the legal basis for the processing of personal data for complying with a legal obligation that applies to our company.

Art. 6 para. 1 figure 1 point d of the GDPR serves as the legal basis if crucial interests of the data subject or another natural person necessitate the processing of personal data.

Art. 6 para. 1 figure 1 point f of the GDPR serves as the legal basis if the processing is necessary for protecting a justified interest of our company or of a third party and if the interests, basic rights and fundamental freedoms of the data subject do not outweigh the aforementioned interest.


3. Deletion of data and storage period

The personal data of the data subject are deleted or blocked as soon as the purpose behind the storage is no longer applicable. Moreover, the storage of data can result if provided for by the European or the national legislator in Union ordinances, laws or other regulations that apply to the data subject. The blocking or deletion of the data is also performed if a prescribed storage deadline expires due to the aforementioned standards, unless the continued storage of the data is necessary for the purposes of the conclusion of a contract or for the fulfilment of a contract.

 

IV. Rights of the data subject

 

If your personal data are processed, you are the data subject as defined by the GDPR and you have the following rights vis à vis the data controller:


1. Right to information

You can request from the data controller a confirmation whether personal data pertaining to you are processed by us.

If such processing occurs, you can request from the data controller information pertaining to the following information:

  1. The purposes for which the personal data are being processed;
  2. The categories of personal data which are being processed;
  3. The recipient / the categories of recipients to whom the pertinent personal data have been disclosed / will be disclosed;
  4. The planned storage period of your personal data in question or, if specific information in this regard is not possible, criteria for determining the storage period;
  5. The existence of the right to correct or to delete your personal data in question, a right to restrict the processing by the data controller or of a right of objection to this processing;
  6. The existence of the right to lodge a complaint with a supervisory authority;
  7. All available information about the origin of the data if the personal data are not collected from the data subject;
  8. The existence of automatic decision making including profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and – at least in these cases – meaningful information about the logic involved as well as the extent and the intended effects of the processing of this type for the data subject.

You are entitled to request information about whether your personal data in question are being transmitted to a third country or to an international organization. In this regard, you can request information about the suitable guarantees in accordance with Art. 46 of the GDPR in conjunction with the transmission.


2. Right to correction

You have a right to request the correction/completion of your personal data from the data controller if the processed personal data in question are incorrect or incomplete. The data controller is to correct such data immediately.


3. Right to restrict the processing

Under the following conditions, you can request the restriction of the processing of your personal data in question:

  • If you dispute the correctness of your personal data in question for a period which enables the data controller to check the correctness of the personal data;
  • If the processing is unlawful and you refuse the deletion of the personal data and, instead, you request the restriction to the use of the personal data;
  • If the data controller no longer requires the personal data for the processing purposes, yet you require them for the assertion, exercising or defense of legal claims; or
  • If you have filed an objection against the processing in accordance with Art. 21 para. 1 of the GDPR and it has not yet been ascertained whether the legitimate grounds of the data controller outweigh your grounds.

If the processing of your personal data in question has been restricted, these data – apart from their storage – may only be processed with your consent or for the assertion, exercising or defense of legal claims or for the protection of the rights of another natural or legal person or for grounds of an important public interest of the Union or a member state.

If the restriction to the processing has been restricted in accordance with the aforementioned conditions, you will be informed of such by the data controller before the restriction is lifted.


4.Right to deletion

a) Obligation to delete

You can request the data controller to immediately delete your personal data in question: the data controller is obliged to immediately delete these data if one of the following grounds applies:

  1. Your personal data in question are no longer required for the purposes for which they were collected or otherwise processed;
  2. You revoke your consent which forms the basis for the processing in accordance with Art. 6 para. 1 figure 1 point a or Art. 9 para. 2 point a of the GDPR and there is no other legal basis for the processing.
  3. You lodge an objection against the processing in accordance with Art. 21 para. 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you lodge an objection against the processing in accordance with Art. 21 para. 2 of the GDPR.
  4. The personal data in question was processed unlawfully.
  5. The deletion of the personal data in question is necessary for complying with a legal obligation in accordance with European Union law or the law of the member states which applies to the data controller.
  6. The personal data in question were collected in conjunction with services offered by the information society in accordance with Art. 8 para. 1 of the GDPR.


b) Information to third parties

If the data controller has published the personal data in question and they are obliged to delete the data in accordance with Art. 17 para. 1 of the GDPR, taking into consideration the available technology and the implementation costs, they are to take appropriate measures, including of a technical nature, in order to inform the data controller that processes the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.


c) Exceptions

There is no right to deletion if the processing is necessary

  1. For exercising the right to the freedom of expression and information;
  2. or complying with a legal obligation which requires the processing in accordance with European Union law or the law of the member states which applies to the data controller, or for performing a task which is in the public interest or for exercising public authority which has been transferred to the data controller;
  3. For reasons pertaining to public interest in the field of public health in accordance with Art. 9 para. 2 point h and i as well as Art. 9 para. 3 of the GDPR;
  4. For archiving purposes, scientific or historic research purposes, or for statistics purposes which are in the public interest in accordance with Art. 89 para. 1 of the GDPR provided the law quoted in section a) is expected to render impossible or considerably impair the realization of the objectives of this processing; or
  5. For asserting, exercising or defending legal claims.


5. Right to information

Haben Sie das Recht auf Berichtigung, Löschung oder Einschränkung der Verarbeitung gegenüber dem Verantwortlichen geltend gemacht, ist dieser verpflichtet, allen Empfängern, denen die Sie betreffenden personenbezogenen Daten offengelegt wurden, diese Berichtigung oder Löschung der Daten oder Einschränkung der Verarbeitung mitzuteilen, es sei denn, dies erweist sich als unmöglich oder ist mit einem unverhältnismäßigen Aufwand verbunden.

You are entitled to be informed about these recipients by the data controller.


6. Right to the transferability of data

You are entitled to receive the personal data which you have provided to the data controller in a structured, common and machine-readable format. Furthermore, you are entitled to transfer to a different data controller, without hindrance by the data controller provided with the personal data, these data, provided

  1. The processing is based on consent in accordance with Art. 6 para. 1 figure 1 point a of the GDPR or Art. 9 para 2 point a of the GDPR or on an agreement in accordance with Art. 6 para 1 figure 1 point b of the GDPR; and
  2. The processing is performed with the aid of automated processes.

In exercising this right, you are further entitled to have the personal data in question transmitted directly from one data controller to a different data controller provided this is technically possible. Freedoms and rights of other people may not be impaired by this.

The right to data transferability does not apply to the processing of personal data transferred to the data controller which are necessary for the exercising of a task which is in the public interest or in the exercising of public authority.


7. Right of objection

You are entitled to lodge an objection to the processing of the personal data in question at any time for reasons arising from your particular situation which arise due to Art. 6 para. 1 figure 1 point e or f of the GDPR: this also applies to profiling based on these provisions.

The data controller no longer processes the personal data in question unless they can furnish legitimate reasons for the processing worth protecting which override your interests, rights and freedoms or if the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data in question are processed for the purposes of direct advertising, you are entitled to file an objection against the processing of the personal data in question for the purposes of this type of advertising at any time: this also applies to profiling if it is associated with such direct advertising.

If you object to the processing for the purposes of direct advertising, the personal data in question will no longer be processed for these purposes.

In conjunction with the use of services of the information society you may – irrespective of Guideline 2002/58/EU – exercise your right of objection by means of an automated process whereby technical specifications are used.


8. Right to revoke the declaration of consent pertaining to data protection

You are entitled to revoke your declaration of consent pertaining to data protection at any time. The revocation of the consent will not affect the legitimacy of the processing which has been performed to date based on the consent.


9. Automated decision in the individual case including profiling

You are entitled to not be subject to a decision taken based exclusively on automated processing – including profiling – which has a legal consequence for you or which considerably impairs you in a similar manner. This does not apply if the decision

  1. Is necessary for the conclusion or the performance of an agreement between you and the data controller;
  2. Is permissible based on the legal regulations of the European Union or the member states which apply to the data controller and these legal regulations contain appropriate measures for the protection of your rights and freedoms as well as your legitimate interests; or
  3. Has your express consent.

However, these decisions may not be based on particular categories of personal data in accordance with Art. 9 para. 1 of the GDPR if Art. 9 para. 2 point a or g of the GDPR applies and appropriate measures for the protection of rights and freedoms and your legitimate interests have been taken.

In the cases specified in (1) and (3), the data controller takes appropriate measures in order to protect the rights and freedoms and your legitimate interests, which includes at least the right to have a person on the side of the data controller intervene, the representation of your point of view and the right to challenge the decision.


10. Right to complain to a supervisory authority

Irrespective of any other administrative law or judicial legal remedy, you are entitled to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your workplace or the place of the alleged violation, if you are of the opinion that the processing of your personal data in question is in violation of the GDPR.

The supervisory authority where the objection was lodged instructs the complainant about the status and the results of the complaint, including the option of a judicial legal remedy including the option of a judicial legal remedy in accordance with Art. 78 of the GDPR.

 

V. Provision of the website and the generation of log files


1. Description and scope of the data processing

Every time our website is called up, our system automatically collects data and information from the computer system of the computer retrieving the data.

The following data are collected:

  • Information about the browser type and the version used
  • The operating system of the user
  • The Internet service provider of the user
  • The IP address of the user
  • The date and time of the access
  • Web pages from which the user’s system guides the user to our website
  • Web pages which are called up by the user’s system via our website

The data are also saved in the log files of our system. These data are not saved along with other personal data of the user.


2. Legal basis for the data processing

Art. 6 para. 1 figure 1 point f of the GDPR forms the legal basis for the temporary storage of the data and the log files.


3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To this end, the IP address of the user must be stored for the duration of the session.

The data are stored in log files in order to guarantee the functionality of the website. Furthermore, the data enable us to optimize the website and to protect the security of our IT systems. No evaluation of the data for marketing purposes is carried out in this context.

The purposes further cover our legitimate interest in the data processing in accordance with Art. 6 para. 1 figure 1 point f of the GDPR.


4. Storage period

The data will be deleted as soon as they are no longer required for achieving the purpose of their collection. In the event of the collection of the data for providing the website, this is the case once the pertinent session has ended.

In the case of the storage of the data in log files, this is the case within seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the user will be deleted or anonymized so that the allocation of the retrieving client is no longer possible.


5. Chance to lodge an objection and deletion option

The collection of the data for the purposes of providing the website and the storage of the data in log files is mandatory for the operation of the website. The user does not have any chance to lodge an objection.

 

VI. Use of cookies


1. Description and scope of the data processing

Our website uses cookies. Cookies are text files which are stored in the Internet browser / Internet browser on the computer system of the user. If a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic sequence of characters which enables the clear identification of the browser should the website be called up anew.

We use cookies in order to design our website in a more user-friendly manner. Some elements of our website require the retrieving browser to be identified even after a page change.
The following data are stored in and transmitted by the cookies:

  • Language settings

We also use on our website cookies which enable an analysis of the surfing behavior of the user.
In this way, the following data can be transmitted:

  • Frequency of the site views
  • Utilization of website functions

The user data collected in this manner are pseudonymized by technical means. Hence, the allocation of the data to the retrieving user is no longer possible. The data are not stored together with other personal data of the user.
When calling up our website, the users are informed by means of an information banner about the use of cookies for analysis purposes and referred to this Privacy Notice. In this context, information is also provided regarding how to prevent the installation of cookies in the browser settings.

When calling up our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of personal data in connection with this is obtained. Reference is also made to this Privacy Notice in this regard.


2. Legal basis for the data processing

Art. 6 para. 1 figure 1 point f of the GDPR forms the legal basis for the processing of personal data using cookies.


3. Purpose of the data processing

The purpose of the use of technically necessary cookies is to simplify the use of web pages for the user. It would not be possible to offer some of the functions of our website without the use of cookies. For this, it is necessary for the browser to be recognized even after a page change.

We need cookies for the following applications:

  • For accepting the language settings

The user data collected by technically necessary cookies are not used to generate user profiles.

The use of the analysis cookies serves the purpose of improving the quality of our website and its contents. The analysis cookies enable us to experience how the website is used, meaning that we can continually optimize our offer.

For improving the quality and the content of our website.

The purposes further cover our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 figure 1 point f of the GDPR.


4. Storage period, chance to lodge an objection and deletion option

Cookies are stored on the user’s computer, which sends them to our website. For this reason you, as the user, have complete control over the use of cookies. You can deactivate or limit the transmission of cookies by making changes to the settings in your Internet browser. Cookies already installed on your computer can be deleted at any time. This can also be carried out in an automated manner. If cookies are deactivated for our website, you may not be able to use the full functionality of the website.

 

VII. Newsletter


1. Description and scope of the data processing

Our website offers users the chance to subscribe to a free newsletter. If you subscribe to the newsletter, the data from the input mask are transmitted to us.

  • e-mail address
  • IP address of the retrieving computer
  • Date and time of the registration

During the registration process, your consent is obtained for the processing of the data and reference is made to this Privacy Notice.

No data are forwarded to third parties associated with the data processing for sending the newsletters. The data are used exclusively for the purposes of sending the newsletter.


2. Legal basis for the data processing

The user’s consent in accordance with Art. 6 para. 1 figure 1 point a of the GDPR forms the basis for the processing of the data following subscription to the newsletter by the user.


3. Purpose of the data processing

The e-mail address of the user is collected in order to send the newsletter.

The collection of other personal data as part of the registration process serves the purpose of preventing misuse of the services or of the e-mail address used.


4. Storage period

The data will be deleted as soon as they are no longer required for achieving the purpose of their collection. The user’s e-mail address will be saved for as long as the subscription of the newsletter is active.

The other personal data collected as part of the registration process will generally be deleted within a period of seven days.


5. Chance to lodge an objection and deletion option

The subscription of the newsletter can be terminated by the user in question at any time. Each newsletter contains a corresponding link to this effect.

This also enables the revocation of the consent to store the personal data collected during the registration process.

 

VIII. E-mail contact


1. Description and scope of the data processing

There is the option of contacting us via an e-mail featured on our website. In this case, the user’s personal data sent with the e-mail are stored.

This data will not be forwarded to third parties. The data will be used exclusively for the processing of the conversation.


2. Legal basis for the data processing

The consent of the user in accordance with Art. 6 para. 1 point a of the GDPR serves as the legal basis for the processing of the data.

Art. 6 para. 1 point f of the GDPR serves as the legal basis for the processing of the data transferred during the sending of an e-mail. Art. 6 para. 1 point b of the GDPR serves as the legal basis for the processing if the objective of the e-mail contact is to conclude a contract.


3. Purpose of the data processing

In the case of contact made by e-mail, there is a necessary legitimate interest in the processing of the data.

Any other personal data processed during the sending process serves the purpose of preventing the misuse of the contact form and of guaranteeing the security of our IT systems.


4. Storage period

The data will be deleted as soon as they are no longer required for achieving the purpose of their collection. For personal data sent by e-mail, this is the case once the relevant conversation with the user is over. The conversation is over once it becomes clear from the status that the pertinent issue has been conclusively resolved.

The personal data collected during the sending process will be deleted within seven days at the latest.


5. Chance to lodge an objection and deletion option

The user has the chance of revoking their consent to the processing of the personal data at any time. If the user contacts us via e-mail, they can revoke the storage of their personal data at any time. In such a case, the conversation cannot be continued.

In this case, all personal data stored while making contact with us will be deleted.

 

IX. Plug-ins used

 

Use of Google Analytics

1. Scope of the processing of personal data

We use Google Analytics, a web analysis service of Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043 United States (“Google”), on our website. Google Analytics uses so-called “cookies”, which are text files stored on your computer to help the analysis of your use of the website. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA, where it is stored. In the case of the activation of the IP anonymization on this website, your IP address will however be abridged in advance by Google within the member states of the European Union or in other contractual states of the Agreement on the European Economic Area. It is only in exceptional cases that the full IP address is sent unabridged to a Google server in the USA, where it is abridged. The IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activities and providing the operator of the website with other services relating to website activity and Internet usage. Google will not amalgamate the IP address transmitted as part of Google Analytics by your browser with other Google data. You can prevent the storage of cookies by selecting the appropriate setting of your browser software: however, please note that if you do this you may not be able to use the full functionality of our website.


2. Legal basis for the processing of personal data

Article 6 para. 1 figure 1 point f of the GDPR serves as the legal basis for the processing.


3. Purpose of the data processing

The purpose of the processing of the personal data is in the targeted addressing of a target group which has already manifested an initial interest by visiting the website.


4. Storage period

Advertising data in server protocols are anonymized by Google which, by their own account, delete parts of the IP address and cookie information after 9 or 18 months.


5. Chance to lodge a complaint and deletion option

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of these data by Google by downloading and installing a browser plug-in available from the following link: http://tools.google.com/dlpage/gaoptout?hl=de. You can find further information at: https://www.google.com/intl/de/policies/privacy/ .

 

This Privacy Notice was prepared with the support of DataGuard .