PRIVACY POLICY

1: Data protection at a glance

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you visit this website, various personal data are collected. Personal data is data with which you can be personally identified. This policy explains what data we collect, what we use it for, and how we protect it.

2: Controller

BLIKS IO GmbH

Johannstr. 37

40476 Düsseldorf

Email: it@bliks.io

The controller within the meaning of the General Data Protection Regulation (GDPR) is the entity named above.

3: Data Protection Contact

If you have any questions about data protection, our external data protection service provider is at your disposal:

LCube – Datenschutz & IT-Sicherheit e.K.

Hardenbergstr. 15, 31275 Lehrte

Tel.: +49 5132 92197 0, Fax: +49 5132 92197 99

Email: datenschutz@lcube.de

Web: https://www.lcube-datenschutz.de

4: Collection and Storage of Personal Data

Your data is collected on the one hand when you communicate it to us – e.g. by writing an email or filling out one of our forms. Other data is collected automatically by our IT systems when you visit the website (e.g. browser type, operating system, time of page view). This data is technically necessary to provide the website without errors.

To store your cookie settings, we use your browser's LocalStorage (see Section 6).

5: Hosting

This website is hosted via the Framer service, operated by Framer B.V., Singel 542, 1017 AZ Amsterdam, Netherlands. Framer uses the infrastructure of Amazon Web Services (AWS) to deliver content. The server location used is within the European Union (Netherlands); the infrastructure operator AWS is part of a US group, so that access from a third country cannot be ruled out.

When accessing the website, technically necessary data (in particular IP address, date and time of access, retrieved content) are processed in order to ensure the delivery of the page and the security of operation.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and reliable provision of our website. There is a contract for hosting and processing with the provider in accordance with Art. 28 GDPR. Insofar as personal data are transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the respective provider is certified, otherwise on standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.

6: Consent Management (Cookie Banner)

On our website, we only use non-essential services (e.g. Google Analytics, HubSpot tracking, LinkedIn Insight Tag) with your explicit consent. When you first visit the website, a cookie banner will be displayed enabling you to accept or decline these services. As long as you do not grant consent, the respective services will not be loaded and no cookies requiring consent will be set.

Your selection is saved in the LocalStorage of your browser so that the banner does not appear again on subsequent visits. You can withdraw or change your consent at any time with effect for the future by clicking on "Cookie Settings" in the page footer and making your selection again.

The legal basis for storing consent is Art. 6 para. 1 lit. c GDPR in conjunction with our obligation to provide proof; the placement of the respective services is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

7: Fonts (Google Fonts, locally integrated)

This website uses the "Plus Jakarta Sans" and "Raleway" fonts for uniform display. The fonts are provided locally via the infrastructure of our hosting provider (Framer) and loaded from there when the page is called up. There is no connection to Google servers and no IP address is transmitted to Google.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the uniform and appealing presentation of our website.

8: Google Analytics

This website uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies (including _ga, ga<Container-ID>) that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The associated measurement code is delivered via Google's tag infrastructure (googletagmanager.com domain).

The storage of Google Analytics cookies and the use of this analytical tool are based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You give your consent via our cookie banner and can withdraw it at any time with effect for the future.

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA.

Insofar as data are transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. There is a contract for data processing with Google in accordance with Art. 28 GDPR.

For more information, please see Google's privacy policy: https://policies.google.com/privacy

9: LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The LinkedIn Insight Tag enables the collection of statistical data on the use of our website by LinkedIn members as well as the evaluation and optimization of our LinkedIn advertising campaigns (conversion tracking). For this purpose, cookies are set (including bcookie, li_gc, lidc, li_adsId) and data is transmitted to LinkedIn, including the IP address, device and browser-related information, and pages visited.

Its use is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. As long as you do not grant consent via our cookie banner, the LinkedIn Insight Tag will not be loaded. You can withdraw your consent at any time with effect for the future.

Insofar as data are transferred to the USA (LinkedIn Corporation), the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.

For more information, please see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

10: HubSpot

We use the HubSpot service, operated by HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, for several purposes. HubSpot also processes personal data partially on servers of HubSpot, Inc. in the USA.

a) Forms (Contact, Demo/Test Access, Newsletter, Calculators)

We offer various forms on our website (e.g. contact and demo requests, test access, newsletter registration, as well as our interactive calculators). The data entered into these forms (e.g. name, email address, company) is transmitted to HubSpot for processing your request and stored there. Processing is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. You actively give your consent by sending the respective form and confirming it there.

b) Reach and Behavior Analysis (HubSpot Tracking)

If you have consented, we use HubSpot's analysis and tracking script. Cookies are set (including hubspotutk, __cf_bm, _cfuvid) and info about your usage behavior is processed in order to evaluate the use of our website and improve our content. This tracking is only loaded after your consent via our cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR.

c) Appointment Booking (HubSpot Meetings)

To schedule appointments, we integrate the calendar service "HubSpot Meetings". The calendar is not loaded automatically, but only when you actively click the corresponding button ("Load calendar"). With this click, you consent to the loading of the service. A connection to HubSpot is established, data (including your IP address) is transmitted and cookies are set. The legal basis is Art. 6 para. 1 lit. a GDPR.

Insofar as data are transferred to the USA within the scope of the aforementioned functions, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. You can withdraw your consent at any time with effect for the future, in the case of the newsletter, for example, via the unsubscribe link in any email.

For more information, please see HubSpot's privacy policy: https://legal.hubspot.com/de/privacy-policy

11: Calendly (Appointment Booking)

To schedule appointments, we also use the scheduling service Calendly, operated by Calendly LLC, 271 17th St NW, Atlanta, Georgia 30363, USA.

When you book an appointment with us via Calendly, the data you enter (in particular name, email address, telephone number if applicable, company, and other voluntary information) as well as technical data (including IP address, date and time of booking, cookie and metadata) are transmitted to Calendly and processed there. Data processing takes place on servers in the USA.

The appointment booking service is not loaded automatically. You only reach Calendly by actively clicking on the corresponding button or the booking link; with this, you consent to the processing of your data by Calendly. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and – insofar as the appointment scheduling serves to initiate or execute a contract – Art. 6 para. 1 lit. b GDPR. You can withdraw your consent at any time with effect for the future.

Calendly LLC is certified under the EU-US Data Privacy Framework (DPF). The transmission of personal data to the USA is therefore based on the adequacy decision of the EU Commission pursuant to Art. 45 GDPR, and supplementally on the standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR. A data processing agreement is exists with Calendly in accordance with Art. 28 GDPR (Data Processing Addendum).

The data will be stored as long as necessary for the processing of the appointment and your request, or as long as statutory retention periods exist. Afterwards, they will be deleted.

For more information, please see Calendly's privacy policy: https://calendly.com/privacy

12: Legal Bases of Processing

The processing of your personal data is carried out on the following legal bases:

Art. 6 para. 1 lit. a GDPR – Consent (e.g. Newsletter, Google Analytics, LinkedIn Insight Tag, HubSpot tracking, and appointment booking via HubSpot Meetings and Calendly) Art. 6 para. 1 lit. b GDPR – Performance of a contract or pre-contractual measures (e.g. processing of requests via forms, appointment scheduling) Art. 6 para. 1 lit. c GDPR – Compliance with legal obligations (e.g. proof of consents) Art. 6 para. 1 lit. f GDPR – Legitimate interest (e.g. technically necessary data, hosting, local fonts)

13: Storage Period

Personal data will only be stored for as long as is necessary to achieve the respective purpose or as long as statutory retention periods exist. As soon as the purpose no longer applies and there are no statutory retention obligations, the data will be deleted.

14: Your Rights as a Data Subject

You have the following rights towards us at any time:

Information about your data stored by us (Art. 15 GDPR), Rectification of incorrect data (Art. 16 GDPR), Erasure of your data (Art. 17 GDPR), Restriction of processing (Art. 18 GDPR), Objection to processing (Art. 21 GDPR), Data portability (Art. 20 GDPR), Withdrawal of consent granted (Art. 7 para. 3 GDPR)

To exercise these rights, please contact us at info@bliks.io or contact our data protection officer (see Section 3).

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for BLIKS IO GmbH is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de.

15: SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption to securely transmit confidential content. You can recognize an encrypted connection by the lock symbol in your browser line and the prefix "https://".

16: Objection to Promotional Emails

We hereby object to the use of contact details published within the scope of our legal notice obligation for sending unsolicited advertising materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as through spam emails.