Privacy Policy
This policy explains how we handle personal data when you visit blockstruct.io and use our contact and chat features. It covers this marketing website. Our product applications on separate subdomains and our client project work are governed separately, as noted below.
Controller
The controller responsible for processing personal data on this website is:
Blockstruct GmbH, Zwölfergasse 10/8/3, 1150 Wien, Österreich · srdjan@blockstruct.io
Our two roles
For personal data collected through this website, Blockstruct GmbH acts as controller. When we deliver software and AI projects for clients, we typically act as a processor on the client's instructions under a separate data-processing agreement; that project data is not governed by this website policy.
What we collect
- Contact and enquiry forms: your name, email address and any details you submit, so we can respond and manage the enquiry.
- Live chat: the messages you send and the technical data needed to run the chat session.
- Server and security logs: IP address, request time, browser identifier and similar data, kept briefly to operate and secure the site.
- Spam protection: data processed by our anti-abuse challenge when you submit a form.
Why we may process it (legal bases)
- Consent (Art. 6(1)(a) GDPR): optional marketing communication and non-essential cookies.
- Contract or pre-contractual steps (Art. 6(1)(b) GDPR): answering enquiries and preparing an engagement.
- Legitimate interests (Art. 6(1)(f) GDPR): operating, securing and improving the site, and preventing abuse.
Processors we use
We use the following processors for this website. Each acts on our instructions under a data-processing agreement.
| Processor | Purpose | Location / hosting |
|---|---|---|
| IONOS | Server hosting (VPS) for the website and our self-hosted services | EU (Germany/Austria) |
| Odoo (self-hosted) | CRM and live chat, running on our own server | EU (our VPS) |
| n8n (self-hosted) | Workflow automation that delivers enquiries to our CRM | EU (our VPS) |
| Sweego | Sending transactional email (confirmations and notifications) | EU (France) |
| Cloudflare | Anti-spam challenge (Turnstile) on public forms | EU / global (standard contractual clauses where applicable) |
Our product applications, such as parking.blockstruct.io, run on separate infrastructure (Scalingo for hosting and Supabase for the database, both with EU servers) and have their own privacy terms. Payment processing for purchases, for example masterclass tickets or product subscriptions, is handled by Revolut and will be described when checkout goes live.
Transfers outside the EU
We keep processing in the EU wherever we can. Where a processor may transfer data outside the EU, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
How long we keep data
We keep personal data only as long as needed for the purpose it was collected for or as required by law. Enquiry and CRM records are kept for the duration of the business relationship and applicable retention periods; server logs are kept only briefly.
Your rights
- Access to the data we hold about you.
- Rectification of inaccurate data.
- Erasure, where the legal conditions are met.
- Restriction of processing.
- Data portability.
- Objection to processing based on legitimate interests.
- Withdrawal of consent at any time, without affecting past processing.
To exercise any of these rights, contact us at the address above.
Right to complain
If you believe we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority. The competent authority is the Österreichische Datenschutzbehörde.
Cookies
We use only necessary cookies by default. Details and your choices are on the Cookies.
Changes to this policy
We may update this policy as our services or legal requirements change. The current version applies from the date shown above.
The German-language version of this document is legally binding. Translations are provided for convenience only.