PRIVACY POLICY

1: Privacy at a Glance

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you visit this website, various personal data of yours are collected. Personal data is data by which you can be personally identified. This policy explains what data we collect, what we use it for, and how we protect it.

2: Controller

BLIKS IO GmbH

Johannstr. 37

40476 Düsseldorf

Email: info@bliks.io

The entity responsible (controller) in the sense of the General Data Protection Regulation (GDPR) is the above-mentioned organization.

3: Data Protection Contact Person

For questions regarding data protection, our external data protection service provider is available to you:

LCube – Datenschutz & IT-Sicherheit e.K.

Hardenbergstr. 15 31275 Lehrte

Tel.: +49 5132 92197 0 Fax: +49 5132 92197 99

Email: datenschutz@lcube.de

Web: https://www.lcube-datenschutz.de

4: Collection and Storage of Personal Data

On the one hand, your data is collected because you communicate it to us – e.g., by writing an email or filling out one of our forms. Other data is recorded automatically by our IT systems when you visit the website (e.g., browser type, operating system, time of page view). This data is technically necessary to provide the website without errors.

To store your cookie settings, we use your browser's LocalStorage (see Section 6).

5: Hosting

This website is hosted via the Framer service, operated by Framer B.V., Singel 542, 1017 AZ Amsterdam, Netherlands. Framer uses the infrastructure of Amazon Web Services (AWS) to deliver the content. The server location used is within the European Union (Netherlands); the infrastructure operator AWS is part of a US group, meaning that access from a third country cannot be ruled out.

When the website is accessed, technically necessary data (in particular, IP address, date and time of access, retrieved content) is processed in order to guarantee the delivery of the page and the security of operations.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and reliable provision of our website. There is a data processing agreement with the provider in accordance with Art. 28 GDPR. To the extent that personal data is transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the respective provider is certified, otherwise on the standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.

6: Consent Management (Cookie Banner)

On our website, we only use non-essential services (e.g. Google Analytics, HubSpot tracking, LinkedIn Insight Tag) after you have given your explicit consent. When you first visit the website, a cookie banner will be displayed where you can accept or decline these services. As long as you do not grant consent, the respective services will not be loaded and no cookies requiring consent will be set.

Your choice is stored in your browser's LocalStorage so that the banner does not reappear on subsequent visits. You can withdraw or change your consent at any time with effect for the future by opening the "Cookie Settings" menu in the page footer and making your choice again.

The legal basis for storing consent is Art. 6 para. 1 lit. c GDPR in conjunction with our obligation to provide proof; the placement of the respective services takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

7: Fonts (Google Fonts, locally integrated)

This website uses the fonts "Plus Jakarta Sans" and "Raleway" for the uniform display of fonts. The fonts are provided locally via the infrastructure of our hosting provider (Framer) and loaded from there when the page is accessed. No connection is established to Google servers, and no IP address is transmitted to Google.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the uniform and appealing presentation of our website.

8: Google Analytics

This website uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies (including _ga, _ga_<Container-ID>), which allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The associated measurement code is delivered via Google's tag infrastructure (domain googletagmanager.com).

The storage of Google Analytics cookies and the use of this analytical tool take place exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You grand your consent via our cookie banner and can withdraw it at any time with effect for the future.

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other sovereign states party to the Agreement on the European Economic Area prior to transmission to the USA.

To the extent that data is transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. There is a data processing agreement with Google in accordance with Art. 28 GDPR.

You can find more information in Google's privacy policy: https://policies.google.com/privacy

9: LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The LinkedIn Insight Tag enables the collection of statistical data on the use of our website by LinkedIn members as well as the evaluation and optimization of our LinkedIn advertising campaigns (conversion tracking). For this purpose, cookies are set (including bcookie, li_gc, lidc, li_adsId) and data is transmitted to LinkedIn, including the IP address, device and browser-related information, and pages accessed.

Its deployment is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. As long as you do not give your consent via our cookie banner, the LinkedIn Insight Tag will not be loaded. You can withdraw your consent at any time with effect for the future.

To the extent that data is transferred to the USA (LinkedIn Corporation), the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.

Find more details in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

10: HubSpot

We use the HubSpot service, operated by HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, for several purposes. HubSpot also processes personal data partially on servers of HubSpot, Inc. in the USA.

a) Forms (Contact, Trial Access, Newsletter, Calculator)

On our website, we offer various forms (e.g. contact and demo requests, trial access, newsletter registration as well as our interactive calculators). The data entered into these forms (e.g. name, email address, company) will be transmitted to HubSpot and stored there to process your request. Processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. You actively give your consent by sending the respective form and completing the confirmation process provided there.

b) Reach and Behavior Analysis (HubSpot Tracking)

If you have consented, we use HubSpot's analysis and tracking script. In this context, cookies are set (including hubspotutk, __cf_bm, _cfuvid) and information about your usage behavior is processed in order to evaluate the use of our website and improve our content. This tracking is loaded only after your consent via our cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR.

c) Appointment Booking (HubSpot Meetings)

For scheduling appointments, we integrate the calendar service "HubSpot Meetings". The calendar is not loaded automatically, but only when you actively click the corresponding button ("Load calendar"). With this click, you consent to the loading of the service. In doing so, a connection to HubSpot is established, data (including your IP address) is transmitted and cookies are set. The legal basis is Art. 6 para. 1 lit. a GDPR.

To the extent that data is transferred to the USA within the scope of the aforementioned functions, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. You can withdraw given consent at any time with effect for the future, in the case of the newsletter e.g. via the unsubscribe link in every email.

For further information, please see the privacy policy of HubSpot: https://legal.hubspot.com/de/privacy-policy

11: Legal Bases of Processing

The processing of your personal data takes place on the following legal bases:

Art. 6 para. 1 lit. a GDPR – Consent (e.g. newsletter, Google Analytics, LinkedIn Insight Tag, HubSpot tracking, and appointment booking) Art. 6 para. 1 lit. b GDPR – Performance of a contract or pre-contractual measures (e.g. processing requests via forms) Art. 6 para. 1 lit. c GDPR – Compliance with legal obligations (e.g. proof of consent) Art. 6 para. 1 lit. f GDPR – Legitimate interest (e.g. technically necessary data, hosting, local fonts)

12: Storage Period

Personal data is stored only as long as necessary to achieve the respective purpose or as required by statutory retention periods. As soon as the purpose ceases to apply and there are no statutory retention obligations, the data will be deleted.

13: Your Rights as a Data Subject

You have the following rights at any time towards us:

Access to your data stored by us (Art. 15 GDPR) Rectification of inaccurate data (Art. 16 GDPR) Erasure of your data (Art. 17 GDPR) Restriction of processing (Art. 18 GDPR) Objection to processing (Art. 21 GDPR) Data portability (Art. 20 GDPR) Withdrawal of given consent (Art. 7 para. 3 GDPR)

To exercise these rights, please contact info@bliks.io or our data protection contact person (see Section 3).

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for BLIKS IO UG is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de.

14: SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption to transmit confidential content securely. You can recognize an encrypted connection by the padlock icon in your browser line as well as the prefix "https://".

15: Objection to Promotional Emails

The use of contact data published under the imprint obligation to transmit promotion and information materials not explicitly requested is hereby objected to. The operators reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as through spam emails.