Privacy policy

1. Controller and company data protection officer

Controller:

BLX GmbH Fuchseckstraße 7 70188 Stuttgart Germany Email: contact@blx.partners

You can contact our company data protection officer at the address above, marked for the attention of the data protection officer, or by email at contact@blx.partners.

2. Personal data collected, how it is stored and how it is used

a) When you visit the website

When you access www.blx.partners, the browser on your device automatically sends information to our website server. This information is stored temporarily in a log file. The following data is collected without any action on your part and retained until it is deleted automatically:

• IP address of the requesting device (stored only in anonymised form);
• date and time of access;
• name and URL of the file requested;
• website from which the request originated (referrer URL);
• browser and operating system used, and the name of your access provider.

We process this data for the following purposes:

• ensuring that the website establishes a reliable connection;
• providing a convenient website experience;
• evaluating system security and stability; and
• other administrative purposes.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes listed above. We do not use the data collected to draw conclusions about you, nor do we combine it with other data.

We also use cookies and analytics services when you visit our website. Further information is provided in Sections 3 and 4 of this privacy policy.

b) When you use our contact form

Contact form data

You can contact us using the general contact form on the website. A valid email address is required so that we can identify the sender and respond. You can also select a subject category to help us direct your message appropriately. Any further information is voluntary. Contact-form submissions are encrypted using SSL technology to protect your personal data against unauthorised access during transmission.

When you use the contact form, we process your data on the basis of your voluntary consent under Article 6(1)(a) GDPR. Where your enquiry concerns entering into a contract, Article 6(1)(b) GDPR provides an additional legal basis. We process the data in order to respond to your enquiry.

Personal data supplied through the contact form is deleted automatically once your enquiry has been dealt with. If a business relationship is established, we retain the data to the extent required for its continuation. Statutory retention periods remain unaffected.

If you contact us about a job application, we retain your data only for as long as required for that application. The legal basis is your consent under Article 6(1)(a) GDPR and, where the application includes special categories of personal data covered by Article 9(1) GDPR—such as data revealing racial or ethnic origin or concerning health—Article 9(2)(a) GDPR. We will retain your data for possible future vacancies only if you give separate, explicit consent for that purpose.

Use of reCAPTCHA

When you submit an enquiry, we use Google reCAPTCHA (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to distinguish submissions made by people from automated processing and to prevent misuse of the form.

When reCAPTCHA is used, your IP address and other data required by Google to provide the service are transferred to and processed on a Google server in the USA. The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is to identify genuine user actions and prevent misuse and spam.

Google has certified under the EU–US Privacy Shield, which is intended to ensure compliance with the level of data protection applicable in the EU: https://www.privacyshield.gov/EU-US-framework.

Further information about Google reCAPTCHA and Google’s privacy policy is available at https://www.google.com/intl/en/policies/privacy/.

3. Cookies

This cookie policy was last updated on 30 June 2022 and applies to residents of the European Economic Area and Switzerland.

3.1 Introduction Our website, https://www.blx.partners (the “Website”), uses cookies and similar technologies, all of which are referred to below as “cookies”. Cookies may also be placed by third parties acting on our behalf. The following information explains how cookies are used on our Website.

3.2 What are cookies? A cookie is a small file sent with pages from this Website and stored by your browser on your computer or other device. During a later visit, the information it contains may be returned to our servers or those of the relevant third party.

3.3 What are scripts? A script is program code that enables our Website to function correctly and interactively. It runs either on our server or on your device.

3.4 What is a web beacon? A web beacon, or pixel tag, is a small invisible item of text or an image used to monitor traffic on a website. Web beacons may store various data about you for this purpose.

3.5 Cookies 3.5.1 Technical or functional cookies Some cookies ensure that parts of the Website work correctly and that your preferences are remembered. Functional cookies make the Website easier to use—for example, by retaining information so that you do not have to enter it repeatedly. We may place these cookies without your consent.

3.5.2 Marketing and tracking cookies Marketing and tracking cookies are cookies or other forms of local storage used to create user profiles, display advertising, or track users on this Website or across several websites for similar marketing purposes.

3.6. Placed cookies Elementor – anonymous statistics Use: We use Elementor to create content. Read more Data sharing: This data is not shared with third parties.

Google AdSense – marketing and tracking Use: We use Google AdSense for advertising. Read more Data sharing: For further information, see the Google AdSense privacy policy.

Google reCAPTCHA – marketing and tracking Use: We use Google reCAPTCHA to prevent spam. Read more Data sharing: Further information is available in the Google reCAPTCHA privacy policy.

Vimeo Use: We use Vimeo to display video. Read more Data sharing: Further information is available in the Vimeo privacy policy.

Other cookies – under review Data sharing: Data-sharing practices are being reviewed.

3.7 Consent When you first visit the Website, we display a pop-up explaining our use of cookies. By selecting “Save settings”, you consent to our use of the cookie and plug-in categories selected in the pop-up, as described in this statement. You can disable cookies in your browser, but some parts of the Website may then cease to function correctly.

3.7.1 Managing your consent settings

Functional Access or technical storage is strictly necessary to provide a service expressly requested by the subscriber or user, or solely to transmit a communication over an electronic communications network. Always active

Marketing Technical storage or access is used to create user profiles, deliver advertising, or track users on one or more websites for similar marketing purposes.

3.8 Your rights regarding personal data You have the following rights in relation to your personal data:

• Right to information: you have the right to know why your personal data is required, how it is used and how long it is retained.
• Right of access: you have the right to access the personal data we hold about you.
• Right to rectification: you have the right to have your personal data supplemented, corrected, deleted or blocked at any time.
• Where processing is based on your consent, you have the right to withdraw that consent and have your personal data deleted.
• Right to data portability: you have the right to request your personal data from the controller and transfer it in full to another controller.
• Right to object: you may object to the processing of your data. We will comply unless there are legitimate grounds for continuing the processing.

Please contact us to exercise these rights, using the details at the end of this cookie statement. If you have concerns about how we handle your data, we would like you to contact us; you also have the right to lodge a complaint with the competent data protection authority.

3.9 Enabling, disabling and deleting cookies Your browser can delete cookies automatically or manually, and you can prevent certain cookies from being placed. You can also configure the browser to notify you whenever a cookie is placed. See your browser’s help documentation for further information.

Please note that the Website may not function correctly if all cookies are disabled. If you delete cookies from your browser, they will be placed again with your consent when you next visit our Website.

3.10 Contact details If you have questions or comments about this cookie policy and statement, please use the following contact details:

Germany Website: https://www.blx.partners Email:

To keep this cookie policy current, it was aligned with the cookiedatabase.org cookie database on 1 July 2022.

4. Analysis tools (tracking tools)

We use the tracking measures described below on the basis of Article 6(1)(f) GDPR. They help us design and continuously improve the Website in response to users’ needs, and record and evaluate Website use for statistical purposes. We regard these purposes as legitimate interests within the meaning of that provision.

The purpose of each processing activity and the categories of data concerned are described under the relevant tracking tool.

Google Analytics

This Website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies—text files stored on your device—to analyse your use of the Website. The information generated by a cookie is generally transferred to and stored on a Google server in the USA. If IP anonymisation is enabled on this Website, Google first shortens your IP address within the European Union or another state party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address sent to a Google server in the USA and shortened there. Acting on behalf of the Website operator, Google uses this information to evaluate Website use, compile reports on Website activity and provide other services relating to Website and internet use.

The IP address transmitted by your browser through Google Analytics is not combined with other Google data.

You can prevent cookies from being stored by changing your browser settings. Please note that you may then be unable to use all Website functions in full. You can also prevent Google from collecting and processing cookie-generated data about your use of the Website, including your IP address, by downloading and installing the browser plug-in available at:

https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, including on a mobile device, use the following link to set an opt-out cookie that prevents future collection by Google Analytics on this Website. The opt-out cookie applies only to this browser and domain. If you delete cookies in the browser, you will need to use the link again: Deactivate Google Analytics.

This Website uses Google Analytics with the anonymizeIp() extension. IP addresses are therefore shortened before further processing, removing their direct personal reference. Where collected data has a personal reference, that reference is removed immediately and the personal data deleted. For exceptional cases in which personal data is transferred to the USA, Google has certified under the EU–US Privacy Shield: https://www.privacyshield.gov/EU-US-framework.

Further privacy information about Google Analytics is available in Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=en.

5. Other tools and plug-ins

a) Integration of Google Maps

We use Google Maps, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to display interactive maps on the Website and help you find us. The processing of personal data described below is based on our legitimate interest under Article 6(1)(f) GDPR in providing a user-friendly online presence that supports our business.

When you open a page containing Google Maps, information about your use of our Website—particularly your IP address—is transmitted to and stored on Google servers in the USA. This happens whether or not you have a Google account or are signed in. If you are signed in, Google associates the data directly with your account. To prevent this association, sign out before opening a page containing Google Maps. Google stores the data as usage profiles and uses it for advertising, market research and designing its services in response to users’ needs. This evaluation may take place even when users are not signed in, including to provide targeted advertising and inform other users about activity on our Website. You have the right to object to the creation of these profiles and must contact Google to exercise that right.

Google also processes personal data in the USA and has certified under the EU–US Privacy Shield, https://www.privacyshield.gov/EU-US-framework, which is intended to ensure compliance with EU data protection standards.

Further information about the purpose and scope of data collection and processing by Google Maps is available in Google’s privacy policy, together with information about your rights and privacy settings: http://www.google.de/intl/de/policies/privacy.

b) Embedded Vimeo videos

We use the third-party service Vimeo (Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA) to embed videos on the Website.

When you visit a page containing an embedded Vimeo video, a plug-in establishes a connection to Vimeo’s servers in the USA. Vimeo receives information about which of our pages you visited, together with the data listed in Section 2(a). If you are signed in to Vimeo, Vimeo associates this information with your user account. Active use of the plug-in—for example, playing a video—may also be associated with that account. You can prevent this by signing out of Vimeo before using our Website and deleting the relevant Vimeo cookies.

The processing described above is based on our legitimate interests under Article 6(1)(f) GDPR. These interests lie in making our online content more useful and engaging by providing easily accessible visual information, thereby supporting our business activities.

Further information about Vimeo’s data processing and privacy practices is available at https://vimeo.com/privacy.

6. Data erasure and storage time

We delete personal data when the purpose for retaining it no longer applies or you withdraw your consent, unless a statutory retention obligation prevents deletion. If data must be retained for another legally permitted purpose, its processing is restricted. It is then blocked and not used for other purposes—for example, where commercial or tax law requires its retention.

7. Your rights as a data subject

Where we process your personal data, you are a data subject within the meaning of the GDPR and have the following rights in relation to the controller:

• under Article 15 GDPR, to request information about the personal data we process. In particular, you may request details of the purposes of processing; the categories of personal data; the categories of recipients to whom it has been or will be disclosed; the planned retention period; your rights to rectification, erasure, restriction of processing and objection; your right to complain; the source of data not collected from you; and the existence and relevant details of automated decision-making, including profiling;
• under Article 16 GDPR, to request without undue delay the correction of inaccurate data or completion of personal data stored by us;
• under Article 17 GDPR, to request erasure of personal data stored by us, unless processing is required to exercise the right to freedom of expression and information, comply with a legal obligation, serve the public interest
• or establish, exercise or defend legal claims;
• under Article 18 GDPR, to request restriction of processing where you dispute the accuracy of the data; the processing is unlawful but you oppose erasure; we no longer require the data but you need it to establish, exercise or defend legal claims; or you have objected to processing under Article 21 GDPR;
• under Article 20 GDPR, to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or request its transfer to another controller;
• under Article 7(3) GDPR, to withdraw your consent at any time, in which case we may no longer continue the processing based on that consent; and
• under Article 77 GDPR, to lodge a complaint with a supervisory authority, usually in your place of residence, place of work or the location of our registered office.

8. Right to object

Under Article 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR. This also applies to profiling based on that provision. If you object, you must explain the grounds arising from your particular situation. We will review your objection and either stop or modify the processing, or demonstrate compelling legitimate grounds on which it may continue.

Where personal data is processed for direct marketing on the basis of Article 6(1)(f) GDPR, Article 21(2) GDPR gives you the right to object at any time, without stating reasons, to processing for that purpose. This also applies to profiling related to direct marketing. If you object, we will no longer process your personal data for direct-marketing purposes.

To exercise your right to object, email contact@blx.partners.

Specific technical methods of withdrawing consent or objecting may be available for individual processing activities. Where applicable, these are explained under the relevant activity.

9. Right to withdraw consent

You may withdraw consent to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of that consent before it was withdrawn.

10. Data security

We use appropriate technical and organisational measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction and unauthorised access by third parties. We improve these measures continuously in line with technological developments.

Contact-form submissions are encrypted using SSL technology to protect your personal data against unauthorised access during transmission.

11. Date and changes to this privacy policy

This privacy policy is currently valid and was last updated in July 2022. We may need to change it as the Website develops or legal and regulatory requirements change. The current version is available at www.blx.partners/en/privacy/.