Privacy Policy Overview

For a quick overview, we have summarized our data protection premises here. These apply to our website as well as to eBlockerOS, our privacy protection technology.

We love and live data protection – and this is not a slogan, but our DNA!
Data minimization is our top priority.
We delete received IP addresses as soon as possible.
We do not use tracking services.
We only set technically necessary cookies.
We do not pass on any data to third parties.
Our servers are located in Germany.

Data processing by eBlockerOS

All details how eBlockerOS itself processes data can be found here.

German Privacy Policy

The official legal Privacy Policy for our website is available in German only. It explains all details and the legal basis of our data processing.

Following you find an automatic translation of the German Privacy Policy as a courtesy for non German readers. Legally the German version has always precedence over the English translation.

Legal privacy policy

Translated from German with www.DeepL.com

Information about the collection of personal data according to the EU Data Protection Regulation (EU-DSGVO, short DSGVO).

Thank you for your interest in our website and our services and offers.

Of course, the protection of your personal data during the collection, processing and use on the occasion of your visit to our website is an important concern for us in particular. With the following declaration, we comply with our legal obligation to inform you in detail about the storage of data, the type of data, its purpose, its storage period and us as the responsible party.

Responsible party according to Art. 4 para. 7 DSGVO

Important: If you have a support question, please ask it in our Community Forum only. Unfortunately, we cannot answer technical questions via email.

Data protection officer

No data protection officer has been appointed, as fewer than 10 people are entrusted with the regular processing of personal data. We welcome questions and will help with any data protection concerns:
en-privacy@eBlocker.org

1. Subject of data protection and storage location

The subject of data protection is personal data. In this context, personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. In particular, name, postal address or e-mail address are personal data.

All personal data is processed and stored by us exclusively on servers in Germany.

2. Automatic anonymous data collection, processing and use of technical data.

We process non-personal information that your browser automatically transmits to us when you visit our website. This information includes, but is not limited to:

IP address of the requesting computer (anonymized or shortened when stored),
Browser type/version,
Operating system,
Referrer URL (URL of the page referring to eBlocker that you followed),
Time of the server request
Preferred website language

The mentioned data are processed by us for the following purposes:

Ensuring a smooth connection setup of the website,
Ensuring a comfortable use of our website,
evaluation of system security and stability as well as for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO (“Legitimate Interest”). Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if legal storage and documentation obligations exist.

3. Initiated personal data collection, processing and use

In principle, no collection or transmission of personal data is required for the use of our Internet pages.

Your personal data will only be processed or used if you voluntarily provide us with your personal data. This may be necessary in the following cases:

3.1 Inquiries, donations and contract fulfillment

We collect and process your personal data to the extent necessary in each case, insofar as you provide it to us in connection with inquiries or other individual transactions/donations.

We use the data you provide to fulfill our obligations to you and to process the contracts concluded between us and you. In doing so, it may be necessary to pass on your personal data to companies that we use to provide our services or to process contracts. These are, for example, service providers such as DHL which are named in this data protection declaration.

In the case of inquiries by e-mail (for example, for technical questions), the data you provide (your e-mail address, your name, if applicable, and your telephone number) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations. The legal basis for such processing is Art. 6 (1) p. 1 lit. f DSGVO (“Legitimate Interest”), whereby our legitimate interest is to provide you with an appropriate and sufficient response to your inquiry. If your inquiry is contract-related and serves to establish, maintain, implement or settle a contractual relationship, the legal basis of the processing is Art. 6 (1) p. 1 lit. b DSGVO.

3.2 When donating via our website

If you make a donation via our website, we collect personal data via a web form. All data is always encrypted in transit according to the state of the art. The following data is collected:

Salutation,
First name,
Last name,
Email address,
Address (if applicable),
IP address

The collection of this data is done,

to be able to identify you as our donor;
to be able to process, fulfill and handle your donation;
to correspond with you;
to confirm your donation;
to process any liability claims that may exist, and to assert any claims against you;
for fraud prevention and forensics in the event of suspected fraud; to manage our donor data.

As part of the donation process, consent is obtained from you to process this data by accepting our donation terms and conditions including this Privacy Policy.

The data processing is carried out in response to your donation and/or registration and is necessary for the aforementioned purposes for the appropriate processing of your donation and for the mutual fulfillment of obligations in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO.

The personal data collected by us for the processing of your donation will be stored until the expiry of the legal obligation to retain data and then deleted, unless we are obliged to store data for a longer period pursuant to Article 6 (1) sentence 1 lit. c DSGVO due to tax and commercial law retention and documentation obligations (e.g. from the German Commercial Code (HGB) or the German Fiscal Code (Abgabenordnung)) or you have consented to storage beyond this pursuant to Article 6 (1) sentence 1 lit. a DSGVO.

3.3 Newsletter, Donation, Website Registration / Your Email Address and Username

If you subscribe to a newsletter with us or if you have provided your e-mail address when making a donation or registering on the website, we will store your e-mail address and any additional personal information you have voluntarily provided (last name, first name, title) for the purpose of sending e-mails.

Any other use or disclosure to third parties will only take place in accordance with the legal provisions if you expressly agree to this. Of course, e-mail newsletters or similar information will only be sent after your consent (so-called “double opt-in”). You have the option in each newsletter to object to the future sending of e-mail newsletters.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO (“Legitimate Interest”).

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if legal storage and documentation obligations exist.

3.4 Application for a position at eBlocker (applicant data)

We process personal data about you for the purpose of your application for an employment relationship, as far as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Section 26 (1) BDSG in conjunction with Article 88 DSGVO.

Furthermore, we may process personal data about you insofar as this is necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 (1), letter f DSGVO; the legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Insofar as an employment relationship arises between you and us, we may further process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG, if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).

We process data related to your application. This may be general personal data (such as name, address and contact details), information on your professional qualifications and school education or information on further professional training or other information that you provide to us in connection with your application. In addition, we may process job-related information that you have made publicly available, such as a profile on professional social media networks.

We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the scope of the purposes and legal bases set out in Section 3. In addition, personal data is processed on our behalf on the basis of contracts pursuant to Art. 28 DSGVO, this in particular by host providers or providers of applicant management systems.

A transfer to a third country is not intended.

We store your personal data for as long as is necessary to make a decision about your application. Insofar as an employment relationship between you and us does not come about, we may continue to store data beyond this, insofar as this is necessary for the defense against possible legal claims. In this case, the application documents will be deleted three months after notification of the rejection decision, unless longer storage is required due to legal disputes. With your separate consent, we will store your data for up to 12 months from the date of your consent in order to be able to consider your application again for any positions that may come up at a later date.

If you have obtained a restriction on processing, we will inform you before the restriction is lifted.

The provision of personal data is not required by law or contract, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract for employment with us. This means that if you do not provide us with personal data when applying for a job, we will not enter into an employment relationship with you.

There is no automated decision in individual cases within the meaning of Art. 22 DSGVO, which means that the decision about your application is not based exclusively on automated processing.

4. Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies as part of our online services. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser the next time you visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

We only use cookies that are technically necessary. Tracking or AdTech cookies are not used.

For website visitor counting, we use the privacy-friendly WordPress plugin Koko-Analytics, which does not use cookies. With Koko-Analytics, no data is given to third parties and the counting is completely local. The analysis only includes aggregated visitor numbers and page views per day. Click paths, visit durations or analysis related to individual visitors are not possible.

5. Data transmission and processing by third parties

Data transfer to third party companies only takes place in the following cases:

5.1 PayPal (only for donations via PayPal).

In the case of a donation and payment via PayPal, credit card via PayPal, direct debit via PayPal or “purchase on account” via PayPal, we will pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. All data is transmitted exclusively encrypted according to the state of the art. Further information on data protection at PayPal can be found in the PayPal data protection principles: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

5.2 Stripe (only for donations via credit card, ApplePay)

When making a donation by credit card or using ApplePay, the payment is processed via the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. All data is transmitted exclusively encrypted according to the state of the art. eBlocker does not receive credit card numbers or account data at any time. For more information about data protection at Stripe, please visit https://stripe.com/de/privacy#translation.

5.3 GLS Bank (only for donations via IBAN transfer)

If you donate by IBAN transfer, the payment is processed directly by the German GLS Gemeinschaftsbank eG, 44774 Bochum and we do not store any payment information on this website. For more information on data protection at GLS Bank, please visit https://www.gls.de/privatkunden/datenschutz/.

5.4 DHL shipping service

We use DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, to ship packages that are sent, for example, as a gratuity for a donation. In doing so, the address data can be transmitted to DHL in order to carry out electronic franking. You can find more information on data protection at DHL at https://www.dhl.de/de/toolbar/footer/datenschutz.html.

6. Disclosure to state institutions and authorities

We only pass on data to state institutions and authorities entitled to receive information within the scope of legal obligations or on the basis of a court decision.

7. Data transfer to other third parties

We do not transfer your personal data to third parties for purposes other than those mentioned above.

We also only pass on your personal data to third parties if:

you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
the disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO, and
this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.

In the context of website registration or donations, consent is obtained from you to share your data with third parties in accordance with this privacy policy as part of the acceptance of our terms of use.

8. Your rights

You have the right:

In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if it was not collected from me, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 DSGVO, to demand the immediate correction of incorrect or completion of your personal data stored by us;
pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;

If you have given us consent for data processing, you also have the right to withdraw your consent at any time. All data processing that we have carried out until your revocation will remain lawful in this case.

You also have the right to complain about our processing of your personal data to the data protection supervisory authority responsible for us (Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str 22, 7th floor, 20459 Hamburg, https://www.datenschutz-hamburg.de/).

9. Technical and organizational measures

We undertake to take the technical and organizational measures that are necessary to ensure the implementation of the regulations on data protection, provided that the effort is in reasonable proportion to the intended protective purpose. In the case of unencrypted communication by e-mail, complete data security cannot be guaranteed by us, so we recommend that you send confidential information by post. Alternatively, we offer encrypted e-mail communication via PGP or S/MIME as described below.

9.1 Confidential communication via S/MIME and PGP

To maintain confidentiality, we support both S/MIME and PGP for encrypted email communication.

S/MIME

For S/MIME key exchange, please send us an informal (ideally S/MIME signed) email to (office at eBlocker dot org). We will reply with our S/MIME encryption key, which can then be used to encrypt communication to us.

PGP

For PGP encryption please use the email address (office at eBlocker dot org) and the public PGP key below.
It has the fingerprint: 3CA696944A39ED1C6F5484004324681E9A6932FA

10. Your questions

For all questions regarding data protection, please contact us at our contact address listed in the provider identification at the top (responsible party) of this page or by e-mail at en-privacy@eBlocker.org.
Version of this Privacy Policy: ENv1.1 dated 2022-07-29

Translated from German with www.DeepL.com. In case of doubt the official German Privacy Policy has legal precedence.