PRIVACY POLICY

1: Privacy at a Glance

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you visit this website, various personal data are collected. Personal data is data with which you can be personally identified. This statement explains what data we collect, what we use it for, and how we protect it.

2: Controller

BLIKS IO GmbH

Johannstr. 37

40476 Düsseldorf

Email: it@bliks.io

The entity responsible for data processing in the sense of the General Data Protection Regulation (GDPR) is the above-mentioned organization.

3: Data Protection Contact

If you have any questions regarding data protection, please contact our external data protection service provider:

LCube – Datenschutz & IT-Sicherheit e.K.

Hardenbergstr. 15, 31275 Lehrte

Tel.: +49 5132 92197 0, Fax: +49 5132 92197 99

Email: datenschutz@lcube.de

Web: https://www.lcube-datenschutz.de

4: Collection and Storage of Personal Data

Your data is collected on the one hand because you communicate it to us – e.g. by writing an email or filling out one of our forms. Other data is collected automatically when you visit the website by our IT systems (e.g. browser type, operating system, time of page view). This data is technically necessary in order to provide the website without errors.

We use the LocalStorage of your browser to store your cookie preferences (see Section 6).

5: Hosting

This website is hosted via the Framer service, operated by Framer B.V., Singel 542, 1017 AZ Amsterdam, Netherlands. Framer uses the infrastructure of Amazon Web Services (AWS) to deliver the content. The server location used is within the European Union (Netherlands); the infrastructure operator AWS is part of a US-American corporate group, meaning that access from a third country cannot be excluded.

When accessing the website, technically necessary data (in particular IP address, date and time of access, retrieved content) are processed in order to ensure the delivery of the site and the security of operation.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a secure and reliable provision of our website. A contract for processing has been concluded with the provider in accordance with Art. 28 GDPR. Insofar as personal data is transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the respective provider is certified, otherwise on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR.

6: Consent Management (Cookie Banner)

On our website, we use non-essential services (e.g. Google Analytics, HubSpot Tracking, LinkedIn Insight Tag) exclusively after your explicit consent. When you first visit our website, you will be shown a cookie banner where you can accept or decline these services. As long as you do not grant consent, the respective services will not be loaded and no cookies requiring consent will be set.

Your selection will be stored in the LocalStorage of your browser so that the banner does not appear again on subsequent visits. You can withdraw or change your consent at any time with effect for the future by opening the "Cookie Settings" in the page footer and making your selection again.

The legal basis for storing the consent is Art. 6 para. 1 lit. c GDPR in conjunction with our obligation to provide proof; the integration of the respective services is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

7: Fonts (Google Fonts, locally integrated)

This website uses the fonts "Plus Jakarta Sans" and "Raleway" for uniform presentation of typography. The fonts are provided locally via the infrastructure of our hosting provider (Framer) and loaded from there when the page is called up. No connection is established to Google servers and no IP address is transmitted to Google.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a uniform and appealing presentation of our website.

8: Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies (including _ga, ga<Container-ID>) that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The associated measurement code is delivered via Google's tag infrastructure (googletagmanager.com domain).

The storage of Google Analytics cookies and the use of this analysis tool are based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You grant your consent via our cookie banner and can withdraw it at any time with effect for the future.

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA.

Insofar as data is transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR. A data processing agreement has been concluded with Google in accordance with Art. 28 GDPR.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy

9: LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The LinkedIn Insight Tag enables the collection of statistical data on the use of our website by LinkedIn members, as well as the evaluation and optimization of our LinkedIn advertising campaigns (conversion tracking). For this purpose, cookies are set (including bcookie, li_gc, lidc, li_adsId) and data is transmitted to LinkedIn, including the IP address, device and browser-related information, as well as pages visited.

Its use is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR. As long as you do not grant consent via our cookie banner, the LinkedIn Insight Tag will not be loaded. You can withdraw your consent at any time with effect for the future.

Insofar as data is transferred to the USA (LinkedIn Corporation), the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR.

Further information can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

10: HubSpot

We use the service HubSpot, operated by HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, for several purposes. HubSpot also partially processes personal data on servers of HubSpot, Inc. in the USA.

a) Forms (Contact, Trial Access, Newsletter, Calculator)

On our website, we offer various forms (e.g. contact and demo requests, trial access, newsletter registration, as well as our interactive calculators). The data entered into these forms (e.g. name, email address, company) will be transmitted to HubSpot for processing your request and stored there. The processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR. You actively grant your consent by submitting the respective form and completing the confirmation provided there.

b) Range and Behavior Analysis (HubSpot Tracking)

If you have consented, we use HubSpot's analysis and tracking script. In doing so, cookies are set (including hubspotutk, __cf_bm, _cfuvid) and information about your usage behavior is processed in order to evaluate the use of our website and to improve our content. This tracking is loaded exclusively after your consent via our cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR.

c) Appointment Booking (HubSpot Meetings)

For scheduling appointments, we integrate the calendar service "HubSpot Meetings". The calendar is not loaded automatically, but only when you actively click on the corresponding button ("Load Calendar"). By doing so, you consent to the loading of the service. In the process, a connection to HubSpot is established, data (including your IP address) is transmitted, and cookies are set. The legal basis is Art. 6 para. 1 lit. a GDPR.

Insofar as data is transferred to the USA within the framework of the aforementioned functions, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR. You can withdraw your consent at any time with effect for the future, in the case of the newsletter e.g. via the unsubscribe link in every email.

Further information can be found in HubSpot's privacy policy: https://legal.hubspot.com/de/privacy-policy

11: Calendly (Appointment Booking)

For scheduling appointments, we also use the scheduling service Calendly, operated by Calendly LLC, 271 17th St NW, Atlanta, Georgia 30363, USA.

When you book an appointment with us via Calendly, the data you enter (in particular name, email address, phone number if applicable, company, and other voluntary information) as well as technical data (including IP address, date and time of booking, cookie and metadata) are transmitted to Calendly and processed there. The data processing takes place on servers in the USA.

The appointment booking service is not loaded automatically. You only reach Calendly by actively clicking on the corresponding button or the booking link; by doing so, you consent to the processing of your data by Calendly. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and – insofar as the appointment arrangement serves to initiate or execute a contractual relationship – Art. 6 para. 1 lit. b GDPR. You can withdraw your consent at any time with effect for the future.

Calendly LLC is certified under the EU-US Data Privacy Framework (DPF). The transfer of personal data to the USA is therefore based on the adequacy decision of the EU Commission pursuant to Art. 45 GDPR, and additionally on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR. A data processing agreement has been concluded with Calendly in accordance with Art. 28 GDPR (Data Processing Addendum).

The data will be stored as long as necessary for processing the appointment and your request or as long as statutory retention periods exist. Thereafter, they will be deleted.

Further information can be found in Calendly's privacy policy: https://calendly.com/privacy

12: YouTube Videos

On our website, we integrate videos from the platform YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

These videos are loaded exclusively after your explicit consent via our cookie banner. As long as you do not grant consent, the YouTube videos will not be integrated and no connection will be established to YouTube or Google servers. Once consent is granted, when accessing the relevant page, data (including your IP address, device and browser information) will be transmitted to Google and cookies will be set, which can be used by Google for video playback as well as for analysis and personalization purposes.

The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw this at any time with effect for the future by opening the "Cookie Settings" in the page footer and changing your selection.

Insofar as data is transferred to the USA, the transfer is based on an adequacy decision of the EU Commission (EU-US Data Privacy Framework), provided the provider is certified, otherwise on the standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy

13: Legal Basis of Processing

The processing of your personal data is carried out on the following legal bases:

Art. 6 para. 1 lit. a GDPR – Consent (e.g. newsletter, Google Analytics, LinkedIn Insight Tag, HubSpot tracking, and appointment booking via HubSpot Meetings and Calendly) Art. 6 para. 1 lit. b GDPR – Performance of a contract or pre-contractual measures (e.g. processing requests via forms, scheduling appointments) Art. 6 para. 1 lit. c GDPR – Compliance with a legal obligation (e.g. proof of consent) Art. 6 para. 1 lit. f GDPR – Legitimate interest (e.g. technically necessary data, hosting, local fonts)

14: Storage Period

Personal data are only stored as long as necessary to achieve the respective purpose or as long as statutory retention periods exist. As soon as the purpose no longer applies and there are no statutory retention obligations, the data will be deleted.

15: Your Rights as a Data Subject

You have the following rights at any time in relation to us:

Information about your data stored by us (Art. 15 GDPR), rectification of incorrect data (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), objection to processing (Art. 21 GDPR), data portability (Art. 20 GDPR), withdrawal of consent granted (Art. 7 para. 3 GDPR)

To exercise these rights, please contact info@bliks.io or our data protection contact (see Section 3).

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for BLIKS IO GmbH is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de.

16: SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption to securely transmit confidential content. You can recognize an encrypted connection by the lock symbol in your browser address bar and the prefix "https://".

17: Objection to Promotional Emails

The use of contact data published within the scope of the legal notice obligation for sending advertising and information materials that are not explicitly requested is hereby objected to. The operators of the pages reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as through spam emails.