Privacy policy

Within DTM GOES ONLINE SRL, DanBlocks ("we", "our", "us" or the "Company") respects your privacy and understands how important it is to protect your data. This Privacy Policy (the "Policy") describes our privacy practices for the activities listed below. In line with your rights, we inform you how we collect, store, access and otherwise process information about natural persons. In this Policy, personal data ("Personal Data") means any information which, alone or combined with other available information, can identify a person.

Controller identification details:

We are committed to protecting your privacy to the highest standard of privacy regulation. Accordingly, we comply with the obligations set out in the regulations below:

• Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR")
• The applicable national legislation on the protection of personal data

This policy applies to the website, domains, applications, services and digital products of DTM GOES ONLINE SRL sold through the www.danblocks.com platform.

This Policy does not apply to third-party applications, websites, products, services or platforms that may be reached through (non-DanBlocks) links we may provide. Those sites are owned and operated independently of us and have their own privacy and data collection practices. Any personal data you provide to those sites is governed by the third party's privacy policy.

Depending on the context, we process personal data in two distinct capacities, and your requests are handled differently in each.

As a controller — when you visit our website, contact us, ask for a quote or are our client. In these situations we determine the purposes and means of processing, and this policy applies in full.

As a processor — when your data reaches us because we built or operate an automation for one of our clients. This is the case, for example, when someone fills in a company's contact or enquiry form on Facebook, Instagram, Google or on that company's website, and we automatically transfer the enquiry into that company's CRM. In these situations the controller is the company whose form you filled in, and we process the data strictly on its documented instructions, under a data processing agreement concluded in accordance with Article 28 GDPR.

This Policy applies when you interact with us through any of the following:

• Using our website and services as a user or client
• Visiting our website that refers to this Privacy Policy
• Creating a user account on our platform
• Placing an order for digital products
• Receiving any communications from us, including newsletters, emails or notifications
• Contacting us through the contact form or other means

We collect your personal data directly from you, so you are in control of the information you choose to give us.

Sensitive data, which the GDPR places in special categories of personal data, is not something we collect or process. Likewise for data about minors - we do not wish to collect or process it.

The categories of personal data we collect:

• First and last name
• Email address
• Phone number
• Billing address
• Payment details (processed securely by the payment processor, not stored by us)
• Website usage data (behaviour, browsing habits) to personalise the online experience
• Other categories of data you provide directly when creating an account or placing an order

Directly from you:

• When you create an account on our website
• When you buy digital products
• When you subscribe to our newsletter
• When you contact us with a question or to report a problem
• When you answer a voluntary market research survey
• When you use the contact form on the website

Through automated technologies:

As you interact with our website, we automatically collect the following types of data:

• The browser used and the length of your visit
• IP address and search history
• Language and the pages you view
• The operating system used
• The sequence of clicks to, from and through our website
• Full URLs, and the information or products viewed or searched for
• How often and how long you visit certain pages
• Interaction information (scrolling, clicks, mouse-overs)

We collect this data through cookies, server logs and other similar technologies.

To provide the services strictly for your benefit, processing your data for the purposes below is the basis of the contract between you as User/Buyer/Client and DTM GOES ONLINE SRL.

We need this data to:

• Create and manage your account on www.danblocks.com
• Process orders, including validation, invoicing and electronic delivery of digital products
• Resolve problems or complaints about an order or the digital products purchased
• Resolve reports of technical defects in digital products
• Refund the value of digital products in the cases provided by law
• Provide customer support for your orders
• Meet legal obligations (invoicing, accounting, tax reporting)

Legal bases of processing:

• Performance of a contract - to deliver the digital products and services ordered
• Consent - for direct marketing activities
• Legal obligation - to keep accounting and tax records
• Legitimate interest - to improve our services and prevent fraud

We may send you distance communications (email) which may contain:

• General and/or themed information
• Information about offers or promotions
• Information about products similar or complementary to those you bought before
• Other commercial information such as opinion surveys

You can withdraw your consent at any time by:

• Clicking the "Unsubscribe" link in the messages you receive
• Turning off communications in the "My account" section
• Contacting us directly at hi@danblocks.com

We use the following third-party tools to operate our services:

• Google Analytics 4 (Google Ireland Ltd.) - to analyse website traffic, only with your consent to analytics cookies
• Google Ads (Google Ireland Ltd.) - for conversion measurement and online advertising, only with your consent to marketing cookies
• Meta Pixel (Meta Platforms Ireland Ltd.) - for conversion measurement and advertising on Facebook and Instagram, only with your consent to marketing cookies
• Google Tag Manager (Google Ireland Ltd.) - to load the tools above; it only loads after you accept at least one optional cookie category
• Stripe (Stripe Payments Europe Ltd.) - to process payments securely and prevent fraud
• hCaptcha (Intuition Machines, Inc.) - to protect the contact form against spam
• Email marketing services - for commercial communications

For more information on how Google uses your data, visit: Google's Privacy Policy

You can opt out of Google Analytics here: Google Analytics Opt-out

To automate our clients' enquiry flows, we operate our own application registered with Meta Platforms, called DanBlocks Analytics, together with connections to other advertising and productivity platforms.

What the application accesses

Only after a client or Page administrator explicitly grants us permission, through the platform's authorisation screen, can the application:

• see the list of Pages managed by the user granting the authorisation;
• read the enquiries generated through those Pages' Lead Ads forms, meaning the details voluntarily submitted by the interested person — usually name, phone number, email address, city and answers to the form's questions;
• read information about the campaign, ad set and ad the enquiry came from;
• manage the technical subscriptions needed to deliver enquiries in real time.

What we do with this data

The data is transferred automatically into our client's CRM, which remains under the client's control, so that their team can contact the interested person. The transfer is the only operation performed: we do not enrich the data from external sources, do not build behavioural profiles and do not use it for our own purposes. We do not sell or rent personal data and do not pass it to data brokers or third-party advertising networks.

Sending conversion events

On the client's instruction, we may send business outcome events back to the advertising platforms — for example, that an enquiry became a contract — to optimise campaigns. In these transmissions we use the internal enquiry identifier provided by the platform or, where applicable, the email address and phone number irreversibly transformed with the SHA-256 hash function, so the data cannot be read in clear.

Providers that process data on our behalf

Transfers to providers that process data outside the European Economic Area rely on an adequacy decision of the European Commission, where the provider is certified under the EU–US Data Privacy Framework, or on the standard contractual clauses adopted by the European Commission, together with additional technical measures.

How to request deletion of your data

If you authorised the DanBlocks Analytics application with your Facebook account and want the associated data deleted, you have two options:

• Write to us at hi@danblocks.com with the subject “Data deletion”, mentioning the Facebook Page involved.
• Revoke access directly in Facebook: Settings & privacy → Settings → Apps and websites, select the application and press Remove.

We confirm the deletion within 30 days at most. Where the data is in a client's system, we pass the request on to that client, as controller, and let you know the outcome.

What are cookies?

A cookie is a small file of information that your browser stores on your device. The information in this file is usually shared with the website owner and with any partners and third parties of that entity.

How we use cookies:

• Strictly necessary - for the website to work (cart, account, language, payment); no consent needed
• Analytics - to understand how the website is used and improve our services; only with your consent (art. 6(1)(a) GDPR)
• Marketing - to measure Google and Meta ads and show relevant advertising, including by sending your email address and phone number as a SHA-256 hash; only with your consent (art. 6(1)(a) GDPR)

How you can control cookies:

You choose the cookie categories through the banner shown on your first visit and can change or withdraw your consent at any time from Cookie settings in the footer of every page. The full list of cookies, with the provider, purpose and duration of each, is in the Cookie policy. You can also set your browser to refuse cookies or to notify you when a cookie is sent.

In general, we will store your personal data for as long as you have an active account on the DTM GOES ONLINE SRL website.

Specific retention periods:

• Data in financial and accounting documents: 10 years, under Art. 38 of Annex 1 to Order no. 2634/2015
• Account data: for as long as the account exists and for a reasonable period afterwards
• Marketing data: until consent is withdrawn

To delete your account, send a request to hi@danblocks.com. If there are active orders, the deletion will happen after they are completed.

DTM GOES ONLINE SRL does not sell or rent your personal data.

To fulfil our contractual obligations, we may share data with:

• Payment or banking service providers
• Hosting and IT service providers
• Email marketing service providers

These processors are contractually bound to keep the data confidential and to use it solely for the purpose for which it was provided.

Where necessary to defend a legitimate interest or under a legal obligation, we may disclose certain data to the competent public authorities.

Your personal data may be transferred to and processed in the European Union.

For transfers outside the EEA, we will ensure:

• An adequacy decision of the European Commission exists, or
• The EU standard contractual clauses are in place

We have appropriate technical and organisational measures in place to protect your personal data:

• Communication between your browser and our website uses an encrypted connection (SSL/TLS)
• We do not store card details - they are processed securely by the payment processor
• Access to data is restricted to authorised staff
• We require our providers to implement appropriate security measures

In the event of a data security breach, we will notify you in line with our legal obligations.

Our website and digital products are not intended for minors. We do not knowingly collect personal data from people under 18.

Under the GDPR, you have the following rights:

• The right of access - to find out whether we process your data and to request a copy of it
• The right to rectification - to correct incomplete or inaccurate data
• The right to erasure ("the right to be forgotten") - to request deletion of your data under certain conditions
• The right to restriction of processing - to restrict processing in certain circumstances
• The right to data portability - to receive your data in a structured format and transmit it to another controller
• The right to object - to object to processing in certain situations
• The right not to be subject to automated decision-making - including profiling
• The right to lodge a complaint - with the National Supervisory Authority for Personal Data Processing (ANSPDCP)

Withdrawing consent

If you consented to the processing of your data, you have the right to withdraw your consent at any time, free of charge. Withdrawal does not affect the lawfulness of processing carried out before.

You can send a request to exercise your rights to:

Email: hi@danblocks.com

Postal address:

DTM GOES ONLINE SRL
8 Lt. Mircea Damschin St.
Suceava, Suceava County
Romania

We will respond to your request within 30 days of receiving it. To verify your identity, we may ask for additional information.

If you believe your rights have been infringed, you can lodge a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website: www.dataprotection.ro

Email: anspdcp@dataprotection.ro

Address: 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, Romania

We may change this Policy at any time. If we make changes, we will post the updated version on this website with the date of the last update.

We recommend checking this page regularly to stay up to date with any changes.

For any questions about this Privacy Policy or the processing of your data:

Email: hi@danblocks.com

Address:

Data Protection Officer
DTM GOES ONLINE SRL
8 Lt. Mircea Damschin St.
Suceava, Suceava County
Romania