[{"data":1,"prerenderedAt":755},["ShallowReactive",2],{"legal-page-en-privacy":3},{"id":4,"title":5,"body":6,"description":741,"extension":742,"meta":743,"navigation":749,"path":750,"seo":751,"stem":752,"toc":749,"updatedAt":753,"__hash__":754},"pages_en\u002Fprivacy.md","Privacy policy",{"type":7,"value":8,"toc":708},"minimark",[9,18,22,25,32,35,48,56,63,66,71,96,100,111,115,135,142,145,172,175,182,185,236,242,245,252,255,287,290,297,300,303,307,483,487,490,494,497,504,507,527,530,534,537,540,544,547,551,554,558,561,568,571,574,577,584,587,590,593,606,609,616,619,622,629,632,658,661,668,682,685,692,695,698,705],[10,11,13,17],"h2",{"id":12},"foreword",[14,15],"heading-icon",{"name":16},"lucide:text"," Foreword",[19,20,21],"p",{},"This policy explains how we process personal data when you visit the Blazelock website, use our services or contact us. Blazelock is operated by Schnittger Digits UG (haftungsbeschränkt) (\"we\", \"us\"), the controller identified below.",[19,23,24],{},"When scanning files on a customer's behalf, we act as a processor under the customer's instructions and the applicable data processing agreement. The customer is responsible for informing the individuals concerned. Uploaded files are not retained after scanning.",[10,26,28,31],{"id":27},"controller",[14,29],{"name":30},"lucide:user"," Controller",[19,33,34],{},"The controller responsible for the processing described in this policy is:",[19,36,37,38,41,42,44,45,47],{},"Schnittger Digits UG (haftungsbeschränkt)",[39,40],"br",{},"\nLeopoldstraße 2-8",[39,43],{},"\n32051 Herford",[39,46],{},"\nGermany",[19,49,50,51],{},"E-mail: ",[52,53,55],"a",{"href":54},"mailto:privacy@schnittger-digits.de","privacy@schnittger-digits.de",[10,57,59,62],{"id":58},"overview-of-processing",[14,60],{"name":61},"lucide:scan-text"," Overview of processing",[19,64,65],{},"We collect information you provide and technical data generated when you use the website and our services. If you sign in with Google or GitHub, or pay through our payment provider, we also receive the account or transaction information described below.",[67,68,70],"h3",{"id":69},"types-of-data-processed","Types of data processed:",[72,73,74,78,81,84,87,90,93],"ul",{},[75,76,77],"li",{},"Identity and account data (e.g. names, account identifiers and authentication information)",[75,79,80],{},"Payment and billing data (e.g. transaction references, payment status, invoices)",[75,82,83],{},"Contact data (e.g. e-mail address, telephone number, postal address)",[75,85,86],{},"Contract data (e.g. subject matter of the contract, duration of the contract)",[75,88,89],{},"Usage data (e.g. page views and access times)",[75,91,92],{},"Meta, communication and process data (e.g. browser information)",[75,94,95],{},"Log data (e.g. log files relating to logins)",[67,97,99],{"id":98},"categories-of-data-subjects","Categories of data subjects:",[72,101,102,105,108],{},[75,103,104],{},"Website visitors and users of our services",[75,106,107],{},"Prospective customers, customers and business partners, including their contact persons",[75,109,110],{},"People who contact us",[67,112,114],{"id":113},"purposes-of-the-processing","Purposes of the processing:",[72,116,117,120,123,126,129,132],{},[75,118,119],{},"Provision of contractual services and fulfilment of contractual obligations",[75,121,122],{},"Communication and responding to contact requests",[75,124,125],{},"Provision of our online offer and user-friendliness",[75,127,128],{},"Prevention of spam and misuse of our forms",[75,130,131],{},"Information technology infrastructure",[75,133,134],{},"Business processes and business management procedures",[10,136,138,141],{"id":137},"legal-basis-of-the-processing",[14,139],{"name":140},"lucide:section"," Legal basis of the processing",[19,143,144],{},"We rely on the following legal bases, as specified for each processing activity below:",[72,146,147,154,160,166],{},[75,148,149,153],{},[150,151,152],"strong",{},"Consent (Art. 6(1)(a) GDPR):"," Where you agree to processing for a specified purpose.",[75,155,156,159],{},[150,157,158],{},"Contract (Art. 6(1)(b) GDPR):"," Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.",[75,161,162,165],{},[150,163,164],{},"Legal obligation (Art. 6(1)(c) GDPR):"," Where we must process data to comply with a legal obligation, including applicable accounting and tax requirements.",[75,167,168,171],{},[150,169,170],{},"Legitimate interests (Art. 6(1)(f) GDPR):"," Where processing is necessary for a legitimate interest, such as secure service operation or business communication, and your interests and fundamental rights do not override that interest.",[19,173,174],{},"German data protection law, including the Federal Data Protection Act (BDSG), also applies. Storage of, or access to, information on your device is subject to Section 25 of the Telecommunications Digital Services Data Protection Act (TDDDG), separately from the GDPR.",[10,176,178,181],{"id":177},"rights-of-the-data-subjects",[14,179],{"name":180},"lucide:shield-user"," Rights of the data subjects",[19,183,184],{},"Subject to the conditions in the GDPR, you have the following rights:",[72,186,187,193,199,205,211,217,223],{},[75,188,189,192],{},[150,190,191],{},"Access (Art. 15):"," Obtain confirmation of whether we process your personal data, information about the processing and a copy of your data.",[75,194,195,198],{},[150,196,197],{},"Rectification (Art. 16):"," Have inaccurate data corrected and incomplete data completed.",[75,200,201,204],{},[150,202,203],{},"Erasure (Art. 17):"," Have your data deleted where the legal conditions are met.",[75,206,207,210],{},[150,208,209],{},"Restriction (Art. 18):"," Have processing restricted where the legal conditions are met.",[75,212,213,216],{},[150,214,215],{},"Data portability (Art. 20):"," Receive data you provided in a structured, commonly used and machine-readable format where processing is automated and based on consent or a contract, and have it transmitted to another controller where technically feasible.",[75,218,219,222],{},[150,220,221],{},"Withdrawal of consent (Art. 7(3)):"," Where processing is based on consent, withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.",[75,224,225,228,229,235],{},[150,226,227],{},"Complaint (Art. 77):"," Lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the alleged infringement. The authority responsible for us is the ",[52,230,234],{"href":231,"rel":232},"https:\u002F\u002Fwww.ldi.nrw.de\u002Fkontakt",[233],"nofollow","Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)",".",[19,237,238,241],{},[150,239,240],{},"Right to object (Art. 21 GDPR):"," Where we rely on legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. If personal data is processed for direct marketing, you may object to that processing at any time without giving reasons.",[19,243,244],{},"To exercise your rights, contact us using the email address above.",[10,246,248,251],{"id":247},"deletion-of-data",[14,249],{"name":250},"lucide:trash-2"," Deletion of data",[19,253,254],{},"We keep personal data only for as long as needed for its purpose or to meet a legal retention requirement:",[72,256,257,263,269,275,281],{},[75,258,259,262],{},[150,260,261],{},"Account and contract data:"," For the duration of the customer relationship and afterwards only as needed to meet retention obligations or establish, exercise or defend legal claims.",[75,264,265,268],{},[150,266,267],{},"Enquiries and correspondence:"," Until the enquiry has been resolved, subject to applicable business correspondence retention requirements and any ongoing dispute.",[75,270,271,274],{},[150,272,273],{},"Accounting and tax records:"," Generally eight years for accounting vouchers, including invoices, six years for business correspondence, and ten years for books and annual accounts under Section 257 HGB and Section 147 AO. The period generally starts at the end of the relevant calendar year; statutory extensions may apply.",[75,276,277,280],{},[150,278,279],{},"Technical logs:"," Kept for 14 days for security and fault diagnosis, then deleted.",[75,282,283,286],{},[150,284,285],{},"Website statistics:"," Kept to understand how the website is used over time.",[19,288,289],{},"Where data must be retained after its original purpose ends, we restrict its use to the remaining lawful purpose. Providers acting as independent controllers determine their own retention periods, as explained in their respective privacy notices.",[10,291,293,296],{"id":292},"service-providers-and-other-recipients",[14,294],{"name":295},"lucide:id-card"," Service providers and other recipients",[19,298,299],{},"We use the providers below for the purposes described in this policy. A provider receives personal data only for the role and purpose shown for that provider. Visiting the website does not mean that every provider in the table receives your data.",[19,301,302],{},"Processors act on our instructions under data processing agreements pursuant to Art. 28 GDPR. Independent controllers are responsible for their own processing. Where we process data on a customer's behalf, the applicable data processing agreement governs our use of subprocessors.",[67,304,306],{"id":305},"service-providers","Service providers",[308,309,314],"div",{"style":310,"ariaLabel":311,"role":312,"tabIndex":313},"position: relative; overflow-x: auto","Service providers and other recipients","region",0,[308,315,317],{"style":316},"min-width: 56rem",[318,319,320,342],"table",{},[321,322,323],"thead",{},[324,325,326,330,333,336,339],"tr",{},[327,328,329],"th",{},"Provider",[327,331,332],{},"Seat \u002F address",[327,334,335],{},"Processing location",[327,337,338],{},"Role \u002F purpose",[327,340,341],{},"Transfer mechanism",[343,344,345,363,376,390,405,421,437,453,468],"tbody",{},[324,346,347,351,354,357,360],{},[348,349,350],"td",{},"IONOS SE",[348,352,353],{},"Elgendorfer Straße 57, 56410 Montabaur, Germany",[348,355,356],{},"EU",[348,358,359],{},"Processor (infrastructure, hosting)",[348,361,362],{},"n\u002Fa (EU only)",[324,364,365,368,370,372,374],{},[348,366,367],{},"IONOS Cloud GmbH",[348,369,353],{},[348,371,356],{},[348,373,359],{},[348,375,362],{},[324,377,378,381,384,386,388],{},[348,379,380],{},"Hetzner Online GmbH",[348,382,383],{},"Industriestraße 25, 91710 Gunzenhausen, Germany",[348,385,356],{},[348,387,359],{},[348,389,362],{},[324,391,392,395,398,400,403],{},[348,393,394],{},"Scaleway SAS",[348,396,397],{},"8 rue de la Ville-l'Évêque, 75008 Paris, France",[348,399,356],{},[348,401,402],{},"Processor (email delivery)",[348,404,362],{},[324,406,407,410,413,415,418],{},[348,408,409],{},"Microsoft Ireland Operations Limited",[348,411,412],{},"One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland",[348,414,356],{},[348,416,417],{},"Processor (business email)",[348,419,420],{},"EU–US DPF; SCCs where applicable",[324,422,423,426,429,432,435],{},[348,424,425],{},"Better Stack, Inc.",[348,427,428],{},"9450 SW Gemini Dr, Beaverton, OR 97008-7105, USA",[348,430,431],{},"Worldwide, including the USA",[348,433,434],{},"Processor (status page)",[348,436,420],{},[324,438,439,442,445,447,450],{},[348,440,441],{},"Mollie B.V.",[348,443,444],{},"Keizersgracht 126, 1015 CW Amsterdam, Netherlands",[348,446,356],{},[348,448,449],{},"Controller (Payments); processor (Invoicing)",[348,451,452],{},"SCCs where required",[324,454,455,458,461,463,466],{},[348,456,457],{},"Google Ireland Limited",[348,459,460],{},"Gordon House, Barrow Street, Dublin 4, Ireland",[348,462,431],{},[348,464,465],{},"Controller (Google sign-in)",[348,467,420],{},[324,469,470,473,476,478,481],{},[348,471,472],{},"GitHub, Inc.",[348,474,475],{},"88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA",[348,477,431],{},[348,479,480],{},"Controller (GitHub sign-in)",[348,482,420],{},[67,484,486],{"id":485},"other-recipients","Other recipients",[19,488,489],{},"We may also disclose data to tax advisers, legal advisers, banks and public authorities where necessary for accounting, legal advice, payment execution, legal claims or statutory obligations. The applicable legal bases are explained under \"Business services\".",[67,491,493],{"id":492},"international-transfers","International transfers",[19,495,496],{},"For transfers outside the EEA, we rely on adequacy decisions under Art. 45 GDPR, including the EU–US Data Privacy Framework (DPF) where the recipient has a valid certification covering the transfer. Where no adequacy decision applies, we use safeguards such as Standard Contractual Clauses (SCCs) under Art. 46 GDPR, with supplementary measures where necessary.",[10,498,500,503],{"id":499},"business-services",[14,501],{"name":502},"lucide:scroll-text"," Business services",[19,505,506],{},"We process identity, contact, account, contract, payment and service usage data to provide Blazelock, administer customer accounts, respond to enquiries, deliver service emails and handle billing and payments.",[72,508,509,515,521],{},[75,510,511,514],{},[150,512,513],{},"Contractual services and enquiries:"," Art. 6(1)(b) GDPR where you are the contracting party or request steps before entering into a contract. Where you act for a company, Art. 6(1)(f) GDPR applies to our interest in communicating with its representatives and managing the business relationship.",[75,516,517,520],{},[150,518,519],{},"Accounting and tax obligations:"," Art. 6(1)(c) GDPR in conjunction with the applicable provisions of the HGB and AO.",[75,522,523,526],{},[150,524,525],{},"Security, prevention of misuse and legal claims:"," Art. 6(1)(f) GDPR, based on our interests in protecting our services and exercising our legal rights.",[19,528,529],{},"Providing the data needed for registration, service delivery and billing is necessary to use the corresponding service. Without it, we may be unable to create your account or fulfil the contract. Accepting the terms and this policy during registration is part of entering into the contract.",[67,531,533],{"id":532},"contact-forms","Contact forms",[19,535,536],{},"If you send us a message through a form on this website, we process the information you enter there. We use it to respond to you and to handle the request. The legal bases for contractual services and enquiries apply.",[19,538,539],{},"The form shows which information is required. Without the required information we cannot handle the request.",[67,541,543],{"id":542},"third-party-sign-in","Third-party sign-in",[19,545,546],{},"If you choose Google or GitHub sign-in, we receive your account identifier, name, email address and profile image to register or authenticate your Blazelock account. The contractual or business-relationship legal bases above apply. The provider learns that you use its sign-in service with Blazelock and processes that interaction under its own responsibility.",[67,548,550],{"id":549},"payments-and-invoicing","Payments and invoicing",[19,552,553],{},"Our payment provider handles bank account and card details directly. We receive transaction references and payment-status information, not bank account or card details. We process this information and billing data to manage payments and invoices on the contractual and statutory bases above. The provider acts independently for payment processing and on our instructions for invoice creation and administration.",[67,555,557],{"id":556},"email-and-support","Email and support",[19,559,560],{},"We use the email providers listed above for account and billing messages and business correspondence, including support. They process email addresses, message content, attachments and delivery data on our behalf. The contractual, legitimate-interest and statutory bases above apply, depending on the purpose of the message.",[10,562,564,567],{"id":563},"spam-protection",[14,565],{"name":566},"lucide:bot"," Spam protection",[19,569,570],{},"Forms on this website include a check that blocks automated submissions. We run this check on our own systems. Your browser requests a challenge from our server, solves a short calculation locally, and sends the solution back with the form. We verify the solution on our server. It is not sent to any external service. We use it only to accept or reject the submission and do not keep it with your enquiry.",[19,572,573],{},"The challenge request is handled like any other request to this website. Technical access data, including your IP address, are described under \"Provision of the online offer and web hosting\". In the configuration we use, the check does not set a cookie and does not read or store information on your device.",[19,575,576],{},"The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in preventing spam and automated misuse of the forms. The check is not a decision that produces legal effects, or similarly significant effects, within the meaning of Art. 22 GDPR.",[10,578,580,583],{"id":579},"cookies",[14,581],{"name":582},"lucide:cookie"," Cookies",[19,585,586],{},"Cookies are small files stored on your device. Similar technologies can store or access information in browser storage or read device information.",[19,588,589],{},"Under Section 25(2) TDDDG, consent is not required for storage or access that is strictly necessary to provide a digital service you expressly request, or solely to transmit a communication. Other storage or access requires prior informed consent under Section 25(1) TDDDG. This distinction also applies to technologies that do not use cookies.",[19,591,592],{},"On this website and in the signed-in service we only use strictly necessary cookies, so we do not ask for consent:",[72,594,595,603],{},[75,596,597,598,602],{},"A cookie named ",[599,600,601],"code",{},"i18n_redirected"," stores the language of this website. If you later open the site without a language in the address, we use it to show the same language. It expires after one year. This storage is strictly necessary to provide the website in the language you chose. Where the cookie contains personal data, the legal basis is Art. 6(1)(f) GDPR, based on our interest in keeping that language choice.",[75,604,605],{},"When you sign in to Blazelock, the service sets a cookie that keeps you signed in and a cookie with a security token for that session. They are strictly necessary to provide the signed-in service and to protect it against cross-site requests. The legal basis is Art. 6(1)(b) GDPR for the session and Art. 6(1)(f) GDPR for the security token.",[19,607,608],{},"You can delete or block cookies through your browser settings, although this may prevent some functions from working.",[10,610,612,615],{"id":611},"provision-of-the-online-offer-and-web-hosting",[14,613],{"name":614},"lucide:router"," Provision of the online offer and web hosting",[19,617,618],{},"Our hosting providers process technical access data, including IP addresses, requested URLs, access times, browser\u002Fdevice information and server logs, to deliver and secure our website. An IP address is needed to send content to your device.",[19,620,621],{},"The legal basis is Art. 6(1)(f) GDPR: our legitimate interests in providing a reliable website, diagnosing faults and preventing attacks. Account and contractual functions also rely on the legal bases under \"Business services\".",[10,623,625,628],{"id":624},"website-statistics",[14,626],{"name":627},"lucide:chart-column"," Website statistics",[19,630,631],{},"We evaluate aggregate visit and visitor counts to understand website use. The technical data processed to produce these statistics is described below. We process these statistics on infrastructure we operate, using the hosting providers listed above.",[72,633,634,640,646,652],{},[75,635,636,639],{},[150,637,638],{},"Processed data types:"," Page URLs and titles, referrers, access times, browser language, screen dimensions, technical browser information, and a coarse location (country, region and city). The IP address is used to derive that location and is not stored.",[75,641,642,645],{},[150,643,644],{},"Data subjects:"," Website visitors.",[75,647,648,651],{},[150,649,650],{},"Purpose:"," Website usage statistics and improvement of website content and usability.",[75,653,654,657],{},[150,655,656],{},"GDPR legal basis:"," Art. 6(1)(f) GDPR, based on our interest in understanding website use and improving our website.",[19,659,660],{},"We collect these statistics on systems we operate. We do not set an analytics cookie and do not create profiles across websites.",[10,662,664,667],{"id":663},"status-page",[14,665],{"name":666},"lucide:activity"," Status page",[19,669,670,671,676,677,235],{},"Our ",[52,672,675],{"href":673,"rel":674},"https:\u002F\u002Fstatus.blazelock.com",[233],"external status page"," displays service availability. When you visit it, the provider listed above processes technical access data, including IP addresses and request times, and may use its own cookies or similar technologies on that page. Further details are in ",[52,678,681],{"href":679,"rel":680},"https:\u002F\u002Fbetterstack.com\u002Fprivacy",[233],"Better Stack's privacy policy",[19,683,684],{},"The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in informing you about service availability and keeping that page secure.",[10,686,688,691],{"id":687},"security-measures",[14,689],{"name":690},"lucide:shield-check"," Security measures",[19,693,694],{},"We use technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, alteration, loss and disclosure. These include access controls, measures to maintain the confidentiality, integrity and availability of our systems, and encrypted transmission via HTTPS\u002FTLS.",[19,696,697],{},"We take data protection into account when selecting and configuring systems and limit access to personal data to what is needed for the relevant task.",[10,699,701,704],{"id":700},"changes-to-this-privacy-policy",[14,702],{"name":703},"lucide:file-clock"," Changes to this privacy policy",[19,706,707],{},"We update this privacy policy when changes to our services, data processing or applicable legal requirements make this necessary.",{"title":709,"searchDepth":710,"depth":710,"links":711},"",2,[712,713,714,720,721,722,723,728,734,735,736,737,738,739,740],{"id":12,"depth":710,"text":17},{"id":27,"depth":710,"text":31},{"id":58,"depth":710,"text":62,"children":715},[716,718,719],{"id":69,"depth":717,"text":70},3,{"id":98,"depth":717,"text":99},{"id":113,"depth":717,"text":114},{"id":137,"depth":710,"text":141},{"id":177,"depth":710,"text":181},{"id":247,"depth":710,"text":251},{"id":292,"depth":710,"text":296,"children":724},[725,726,727],{"id":305,"depth":717,"text":306},{"id":485,"depth":717,"text":486},{"id":492,"depth":717,"text":493},{"id":499,"depth":710,"text":503,"children":729},[730,731,732,733],{"id":532,"depth":717,"text":533},{"id":542,"depth":717,"text":543},{"id":549,"depth":717,"text":550},{"id":556,"depth":717,"text":557},{"id":563,"depth":710,"text":567},{"id":579,"depth":710,"text":583},{"id":611,"depth":710,"text":615},{"id":624,"depth":710,"text":628},{"id":663,"depth":710,"text":667},{"id":687,"depth":710,"text":691},{"id":700,"depth":710,"text":704},"Privacy policy for Blazelock with information on the processing of personal data.","md",{"readingTime":744},{"text":745,"minutes":746,"time":747,"words":748},"12 min read",11.355,681300,2271,true,"\u002Fprivacy",{"title":5,"description":741},"privacy","2026-09-29","srCrnEO-yg7IVAVbpEwSeZWkvvK8AKR4vmjjmCg7jFw",1793570061681]