Privacy Policy

BlockBuilder UG (haftungsbeschränkt) Auweg 5 85386 Dietersheim Germany Phone: +49 151 19103009

Email: [email protected]

This privacy policy applies to the websites block-builder.de and alois.bayern, including their subpages. Both are operated by BlockBuilder UG (haftungsbeschränkt) from the same technical environment. Forms, the AI chat and the cost estimator exist only on block-builder.de, appointment booking on cal.block-builder.de; alois.bayern links there.

Hosting and database: Railway Corporation (San Francisco, USA) as processor, on the basis of a data processing agreement under Art. 28 GDPR. The servers are located in a data centre in the EU. As Railway is a US company, we cannot rule out access from the USA; we base this transfer on the EU Standard Contractual Clauses. The database is not publicly reachable.

Our websites are delivered via the content delivery network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). As a processor, on the basis of a data processing agreement under Art. 28 GDPR, Cloudflare handles technical connection data such as IP address, requested address, browser identifier and time in order to deliver the websites quickly, reliably and protected against attacks. The legal basis is our legitimate interest in secure and efficient delivery (Art. 6(1)(f) GDPR). Processing in the USA is possible. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); the EU Standard Contractual Clauses apply in addition.

When you open our websites, we and our service providers (Railway, Cloudflare) automatically process data your browser sends: IP address, date and time, requested address, referrer, browser and operating system. This is required to deliver the pages and to fend off attacks (Art. 6(1)(f) GDPR). These access logs are kept only as long as needed for that purpose.

Email delivery: we send replies and confirmations regarding your enquiries via our own mailbox at United Domains (Germany).

We collect personal data when you use one of our forms on block-builder.de: the contact form, the AI Quick Check, the cost estimator, the funding check and the AI competence kit. Depending on the form, this includes your name, email address, company, optionally your phone number, and the details you voluntarily provide in free-text and selection fields (e.g. use case or interest). The purpose is to process your request (Art. 6(1)(b) GDPR). To prevent abuse and diagnose errors, we store technical data (IP address, browser identifier, UTM parameters where present) together with the request, based on our legitimate interest (Art. 6(1)(f) GDPR). On submission, our web analytics also records which external site brought you to us and which of our pages you came from; your browser reads both from the referrer, and nothing is stored on your device for this.

Newsletter: if you explicitly consent in a form, we occasionally send you information on AI compliance and funding to your email address (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, e.g. by email to [email protected].

If you share an estimate from the cost estimator by email, we use the recipient address and name you enter only for that one message.

Providing your data is neither required by law nor by contract. Without your name and email address, however, we cannot answer your request. There is no automated decision-making, including profiling.

We do not share personal data with third parties for advertising purposes and we do not sell data. Recipients are only the service providers named in this policy, acting on our behalf. We protect the forms and the AI chat on block-builder.de against automated requests with Cloudflare Turnstile; technical data such as your IP address is transmitted to Cloudflare (for the transfer to a third country see "Hosting and Delivery"). Turnstile's access to your device is strictly necessary to fend off automated requests (Section 25(2) no. 2 TDDDG).

Processing of personal data within our products (e.g. Alois) is governed by the data processing agreements we conclude with our customers; the sub-processors used are listed there.

Form submissions are stored for as long as processing requires and deleted at your request at the latest, unless a statutory retention obligation applies. Technical data stored with a request (IP address, browser identifier) is deleted together with the request. We keep your newsletter consent until you withdraw it.

We do not set cookies for analytics or advertising. We only use technically necessary cookies when you explicitly use a feature: if you save an estimate in the cost estimator, we set the cookie "estimator_session" so you can find your saved estimates again (retention 90 days). The administrators' login area uses session cookies. Legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(b) or (f) GDPR.

We only store information in your browser (session storage or local storage) that is required for a feature you use (Section 25(2) no. 2 TDDDG): your light/dark and colour choice, whether you have already closed a hint, a jump target on the home page, the identifier of a running chat, unlocked content on our resource pages, and a draft of your cost estimator input so it is not lost when you return. On alois.bayern this is only the light/dark choice. Session storage is cleared when you close the tab; local storage remains until you delete it in your browser settings. This information is not transmitted to us or to third parties.

For reach measurement we use the open-source software Umami in our own instance at analytics.block-builder.de. alois.bayern uses the same instance; we analyse the two websites separately. On alois.bayern we also count clicks on demo links and on links to block-builder.de as events, without any further information about you. Umami sets no cookies and stores nothing on your device. The following is processed in pseudonymised form: pages visited, referrer, browser, operating-system and device type, the country derived from your IP address, and a timestamp. Your IP address is only used to create a hashed, pseudonymous identifier and is not stored in plain text. No combination with other data and no disclosure to third parties takes place. If "Do Not Track" is enabled in your browser, no measurement takes place. The legal basis is our legitimate interest in a data-minimising analysis of website usage (Art. 6(1)(f) GDPR).

You can book appointments with us at cal.block-builder.de. We run the open-source software Cal.com ourselves on our own server in Germany. On block-builder.de the booking widget is only loaded after an explicit click; alois.bayern only links to the booking page. We process your name, email address, chosen slot and what you enter in the notes field, in order to prepare and hold the appointment (Art. 6(1)(b) GDPR). There is no connection to external calendar services. Confirmations are sent via our mailbox at United Domains (Germany). For video appointments we use Jitsi Meet at meet.jit.si, operated by 8x8, Inc. (USA). If you join a video appointment, 8x8 processes connection data such as your IP address as well as audio and video during the call; processing in the USA is possible. We delete booking data once it is no longer needed for the appointment and no retention obligation applies.

This website offers an AI chat. We process what you type there solely in order to answer your question. What we transmit is your current question plus up to six earlier messages from the running conversation (each truncated to 600 characters) so that follow-up questions can be understood in context; your IP address is not passed on to the chat system. The chat runs on our own instance of the open-source software LightRAG, which we operate at our hosting provider Railway. The answer itself is generated by a language model we have integrated. The language model is provided by Mistral AI, based in Paris, France; processing takes place within the European Union and no transfer to third countries occurs. The conversation is not stored in this website's database, and the messages are not persisted in your browser either; reloading the page clears them. Before your first message we use Cloudflare Turnstile to check that the request comes from a human; your IP address is transmitted to Cloudflare in the process. Please do not enter sensitive data or personal data about other people into the chat. The legal basis is our legitimate interest in answering enquiries submitted through our website (Art. 6(1)(f) GDPR).

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3)). Please write to [email protected]. We respond without undue delay and within one month at the latest.

Right to object (Art. 21 GDPR): where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

We are not required to appoint a data protection officer. Please send any privacy concerns to [email protected].

We protect your data with technical and organisational measures. Traffic between your browser and our servers is encrypted via HTTPS. Our database is not publicly reachable, and access to the site's administration area is password-protected and limited to authorised people.

Our websites contain links to other websites. BlockBuilder UG (haftungsbeschränkt) is not responsible for their privacy practices or content.

Our offering is aimed at businesses and adults. We do not knowingly collect data from persons under 16.

We update this privacy policy when our websites or the legal situation change. The version published here applies.