Privacy Policy

Information pursuant to § 5 DDG (German Digital Services Act)

Data Collection and Purpose

We collect personal data when you use one of our forms — the contact form or the AI Quick Check (requesting a recommendation). Depending on the form, this includes your name, email address, company, optionally your phone number, and the details you voluntarily provide in free-text and selection fields (e.g. use case or interest). The purpose is exclusively to process your request (Art. 6(1)(b) GDPR). To prevent abuse and diagnose errors, we additionally process technical data (IP address, browser identifier, UTM parameters where present) based on our legitimate interest (Art. 6(1)(f) GDPR).

Data Storage

All collected data is stored on servers located within the European Union that are not publicly accessible. Our data storage mechanisms ensure maximum privacy and security.

Data Sharing

We do not share personal data with third parties for advertising purposes and we do not sell data. To operate the website we use service providers as processors: hosting and database (Railway), bot protection of our forms via Cloudflare Turnstile (technical data such as your IP address is transmitted to Cloudflare), and email delivery via our email provider. Reach measurement with Umami runs on our own infrastructure without any third party (see the Web Analytics section).

Data Retention

Form submissions are stored for as long as processing requires and deleted at your request at the latest. Newsletter data is stored until you unsubscribe. Technical data (IP address, browser identifier) is deleted or anonymised after 90 days at the latest.

Web Analytics

This website does not set cookies. For reach measurement we use the open-source software Umami, which we self-host on our own infrastructure in Germany; Umami itself writes nothing to your device. The following is processed in pseudonymized form: pages visited, referrer, browser, operating-system and device type, the country derived from your IP address, and a timestamp. Your IP address is used only transiently to generate a pseudonymous, non-traceable identifier (a hashed value with a daily-rotating salt) and is not stored in plain text. No combination with other data and no disclosure to third parties takes place; there is no transfer to third countries. The legal basis is our legitimate interest in a data-minimizing analysis of website usage (Art. 6(1)(f) GDPR). You may object to this processing at any time with effect for the future (Art. 21 GDPR). For appointment booking we use the open-source software Cal.com, which we self-host on our own infrastructure; the booking widget is only loaded after an explicit click (noted on the button) and embeds no third-party content. Two items are written to your browser's session storage: the path you last opened on this website and, once you open the chat, a randomly generated conversation identifier. We read the last path when you submit a form and pass it to our own Umami instance so we can tell which page an enquiry came from; the conversation identifier keeps your chat messages together as one thread. Neither item contains anything you typed, neither is shared with third parties, and both are discarded when you close the browser tab. They do not outlive your session.

AI Chat

This website offers an AI chat. We process what you type there solely in order to answer your question. What we transmit is your current question plus up to six earlier messages from the running conversation (each truncated to 600 characters) so that follow-up questions can be understood in context; your IP address is not passed on to the chat system. The chat runs on our own instance of the open-source software LightRAG, which we operate at our hosting provider Railway. The answer itself is generated by a language model we have integrated. The language model is provided by Mistral AI, based in Paris, France; processing takes place within the European Union and no transfer to third countries occurs. The conversation is not stored in this website's database, and the messages are not persisted in your browser either; reloading the page clears them. Before your first message we use Cloudflare Turnstile to check that the request comes from a human; your IP address is transmitted to Cloudflare in the process. Please do not enter sensitive data or personal data about other people into the chat. The legal basis is our legitimate interest in answering enquiries submitted through our website (Art. 6(1)(f) GDPR).

User Rights

Should you wish to access, rectify, or erase your data, please send an email to [email protected] with the subject 'data deletion' or a similar request. We commit to addressing your request within a one-week period.

Contact

While we do not have a designated Data Protection Officer, you can direct all your privacy-related concerns to [email protected].

Security Measures

We protect your data with technical and organisational measures. Traffic between your browser and our servers is encrypted via HTTPS. Our database is not publicly reachable, and access to the site's administration area is password-protected and limited to authorised people.

Links to Other Websites

Our website contains links to other websites. BlockBuilder UG (haftungsbeschränkt) is not responsible for the privacy practices or content of these external sites.

Children's Privacy

While individuals under the age of 18 could technically subscribe to our newsletter, we do not actively collect data from them. We only engage with entities over the age of 18.

Updates to Privacy Policy

For any changes to our Privacy Policy, please regularly check this page.