In short
The www.danblocks.com website uses cookies and similar technologies. Strictly necessary ones make the site work (cart, account, language, payment). Analytics cookies (Google Analytics) and marketing cookies (Google Ads, Meta Pixel) are used only with your consent and don't load at all until you choose.
You can change or withdraw your consent at any time from Cookie settings (the link is also in the footer of every page). Withdrawing is as easy as giving consent.
Legal basis
This policy complies with:
- Romanian Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, art. 4(5) (consent to storing and accessing information on your device) and art. 4(6) (the exemption for strictly necessary cookies)
- Directive 2002/58/EC (ePrivacy), art. 5(3)
- Regulation (EU) 2016/679 (GDPR), in particular art. 4(11), art. 6(1)(a) and art. 7 (conditions for consent)
- European Data Protection Board (EDPB) Guidelines 05/2020 on consent and 2/2023 on the technical scope of art. 5(3) of the ePrivacy Directive
Strictly necessary cookies rely on the exemption in art. 4(6) of Law 506/2004 and on our legitimate interest in providing the service you requested (art. 6(1)(b) and (f) GDPR). Analytics and marketing cookies rely solely on your consent (art. 6(1)(a) GDPR).
How we ask for your consent
On your first visit we show a banner where you choose, with equally visible buttons:
- Accept all: you switch on analytics and marketing cookies;
- Reject all: only strictly necessary cookies remain;
- Customise: you choose each category separately; the optional categories are off by default.
Until you choose, we don't load Google Tag Manager, Google Analytics, Google Ads or Meta Pixel and we don't send any information to these providers. Browsing the site doesn't count as consent, and the site works the same if you reject.
Your choice is kept for 6 months in the db_consent cookie. After 6 months, or when we add a new provider or purpose, we ask you again.
Withdrawing consent
- From Cookie settings (in the footer of every page): switch a category off at any time or press “Reject all”. We then delete the first-party cookies of the withdrawn category and reload the page so the providers' scripts stop.
- From your browser settings (see below): delete or block cookies, including third-party ones, which the site can't delete by itself.
Withdrawing consent doesn't affect the lawfulness of processing based on it before the withdrawal (art. 7(3) GDPR).
Google Consent Mode and the data sent
We use Google Consent Mode v2 in its basic form: on every page the consent signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) start as “denied” and only change after your choice. Google and Meta tags only run for the categories you accepted.
With analytics consent, Google Analytics receives the pages visited (without access tokens, order IDs or other secrets from the addresses), the products viewed, added to the cart and bought, order values, language, device type and an approximate location. Google Analytics 4 doesn't log or store IP addresses, and we don't use the data to identify you.
With marketing consent, Google Ads and Meta additionally receive conversion events (order placed, contact message) and, for conversion measurement (Enhanced Conversions / Advanced Matching), the email address and phone number from the order as a SHA-256 hash (an irreversible fingerprint computed before sending). Without marketing consent, this data is not sent.
Providers and transfers outside the EU
- Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), for Google Tag Manager, Google Analytics and Google Ads: privacy policy, Google's cookies.
- Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland), for Meta Pixel: privacy policy, cookie policy.
- Stripe Payments Europe Ltd. (Dublin, Ireland), for card payments and fraud prevention: privacy policy.
- Intuition Machines, Inc. (hCaptcha), for spam protection on the contact form: privacy policy.
Google, Meta, Stripe and hCaptcha may transfer data to the United States. Transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, for certified providers, and on the standard contractual clauses adopted by the European Commission.
Proof of consent
To be able to prove your choice (art. 7(1) GDPR), we keep a log with: the consent ID (a random code, the same as in the db_consent cookie), the choice for each category, the action (accept, reject, customise), the date and time, the version of this policy, the language and the page where you chose. We don't keep the IP address and we don't link the log to your account or orders.
The log is kept for the duration of the consent and for 3 more years after it expires or is withdrawn, so we can present it to the authorities. You can see the ID and date of your choice at any time in Cookie settings; mention them when you write to us about consent.
Your rights
For data collected through cookies you have the rights provided by the GDPR:
- the right to withdraw your consent at any time, from Cookie settings;
- the right of access, rectification and erasure;
- the right to restriction of processing and the right to object;
- the right to data portability;
- the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.
Details about all processing are in the Privacy policy.
Changes to this policy
When we add a new provider or purpose, we update this page and the date at the top and ask for your consent again through the banner.
Contact
For any question about cookies or your data, write to us at hi@danblocks.com or by post to DTM GOES ONLINE SRL, str. Lt. Mircea Damschin nr. 8, Suceava, Suceava County, Romania.