Usage of the Website of
BlockFinance GmbH

BlockFinance GmbH, a company incorporated in Switzerland, registered under company number CHE232.875.771 with the commercial register of the Canton of Zug (hereinafter “BlockFinance”, “we”, “our”, “us”, etc.) processes your personal data in connection with your use of its Website which is accessible at www.blockfinance.ch (hereinafter “Website”).

We highly value your trust, and that's precisely why we treat data protection as a serious matter and implement suitable measures to safeguard your information. Our dedication lies in responsibly managing your personal data. Naturally, we adhere to the applicable legal requirements, in particular of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA), the General Data Protection Regulation (EU) 2016/679 (GDPR) and any other applicable regulations pertaining to data protection.

To provide you with sufficient clarity regarding the personal data we collect from you and the purposes for which we utilize it, we kindly request you to review the information provided below.

1. Scope and purpose of the collection, processing, and use of personal data

In the following, we describe how we collect and process your personal data in connection with your use of our Website including the use of services provided on it (e.g. contact form). Depending on how you relate to us, we process different personal data about you for different purposes and based on different legal bases.

1.1 Visit of our Website

When you visit our Website, every access is temporarily stored in a log file. The following data is collected without your intervention:

the IP address of the requesting computer;
the date and time of access;
the website, from which the access was made (referrer URL) with the search term used, if applicable;
the name and URL of the retrieved file;
the website, from which the access was made;
the status code (e.g. error message);
the operating system of your computer and the browser you are using (type, version);
the country you accessed from and the language settings of your browser;
the name of your Internet Access Provider;
the transmission protocol used (e.g. HTTP/1.1).

The collection and processing of this data is carried out for the purpose of enabling a comfortable use of our Website, to ensure system security and stability on a permanent basis, and to monitor the use, functionality and technical performance of our Website.

The legal basis for this data processing lies in our private and legitimate interest according to art. 13 para. 1 FADP and art. 6 para. 1 lit. f GDPR, which consists in ensuring and improving the integrity, stability, and functionality of the Website as far as this is technically possible and reasonable. Under no circumstances do we use the collected data to draw conclusions about your person or to create user profiles with the help of this data.

In addition, for reasons of technical security, in particular, to ward off attempted attacks or other abuse of the Website, the information is stored for a short period of time. We are not able to directly associate this information with individual persons. After seven days at the latest, the information will be anonymized through the shortening of the IP address to the domain level, so that it will no longer be possible to connect this information to an individual person. However, in the period of time until the shortening of the IP address, we may process this information in case of a security incident (attempted attack or abuse etc.) in cooperation with your internet provider and/or the local authorities in order to identify the party that caused the security incident. The legal basis
for this is our private and legitimate interest according to art. 13 para. 1 FADP and art. 6 para. 1 lit. f GDPR which consist in protecting the integrity of the Website.

The information will only be processed for statistical, market research and/or advertising purposes in anonymized form, i.e. after the IP address has been shortened to the domain level.

1.2 Contact form

If you wish to contact us, e.g., by using the contact form or email, the data you provide when doing so, including your contact information, will be used by us for the purpose of addressing your inquiry and for potential follow-up questions.

When you reach out to us via our contact form, the following data may be processed as part of the request:

First name and last name;
Valid email address;
Job Title (optional);
Company name;
Company size (optional);
Brief explanation.

The legal basis for the processing of your personal data is the fulfillment of our contractual or pre-contractual obligations pursuant to art. 13 para. 2 lit. a FADP or art. 6 para. 1 s. 1 lit. b GDPR as well as safeguarding our private and legitimate interests pursuant to art. 13 para. 1 FADP and art. 6 para. 1 lit. f GDPR, which include, but are not limited to, contacting you and communicating with you about any concerns you have contacted us about.

1.3 Cookies and similar technologies

We use cookies and similar technologies, such as tracking pixels and web storage objects (hereinafter collectively "Cookies") on our Website, so that we can make your stay on our Website as user-friendly as possible. Cookies are information files that your web browser automatically creates and stores on your device when you visit our Website.

The majority of internet browsers typically accept cookies by default. If you do not wish to have cookies from our Website stored in your device, you can configure your browser settings so that you receive a warning before certain cookies are stored. You can find more information on this in the help function of your browser. Please note that deleting or blocking cookies might prevent you from using all functions and features of this Website.

(a) Legal basis for the use of cookies

Depending on their respective purpose, the cookies used on our Website can be divided into two categories: (i) technically necessary and (ii) technically non-necessary cookies.

The classification of a cookie as technically necessary or technically non-necessary also determines the legal basis on which we use the respective cookie:

(i) Technically necessary cookies

Technically necessary cookies are absolutely essential for the proper functioning of our Website because they enable basic functions, such as page navigation or access to secure areas of our Website. Without the use of technically necessary cookies, our Website could not function properly.

The legal basis for the use of technically necessary cookies is the fulfillment of our contractual or pre-contractual obligations pursuant to art. 13 para. 2 lit. a FADP or art. 6 para. 1 s. 1 lit. b GDPR or the protection of our private and legitimate interests pursuant to art. 13 para. 1 FADP and art. 6 para. 1 lit. f GDPR. Our contractual obligations or legitimate interests are based on being able to provide you with our Website and its essential functions.

Please note: You have the right to object at any time to the processing of your personal data on the basis of private and legitimate interests pursuant to 13 para. 1 FADP and art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation. For more information on this right of objection, please refer to section 7.

(ii) Technically non-necessary cookies

Technically non-necessary cookies are not strictly necessary for our Website to function properly. However, they allow our Website to remember your settings, help us compile statistics for internal market analysis purposes or allow us to show you personalized advertising.

The legal basis for the use of technically non-necessary cookies is your consent voluntarily given in our cookie management tool pursuant to art. 6 para. 1 lit. a GDPR.

Your consent to the use of technically non-necessary cookies and the related processing of your personal data is not required for the use of our Website, i.e., you can also use our Website without technically non-necessary cookies.

Please note, you can revoke your consent to the use of technically non-necessary cookies at any time with effect for the future. You can find more information on this in section 6 lit. f.

(b) Cookies used on our Website

(i) Google Analytics

We use the service “Googly Analytics” provided by Google LLC on our Website. The responsible service provider in the European Union is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). Google Analytics uses technically non-necessary cookies that enable an analysis of your use of our Website. The information collected by means of the cookies about your use of this Website is usually transferred to a Google server in the USA and stored there. In doing so, the IP address is shortened by activating IP anonymization ("anonymizeIP") on this website before transmission. The masked IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data, according to Google. Only in
exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

During your Website visit, the following data, among others, is collected: (i) the pages you have visited on our Website, i.e. your "click path”, (ii) achievement of "website goals" (so-called conversions, e.g. newsletter registrations, downloads, purchases), (iii) your user behavior (e.g. clicks, dwell time, bounce rates), (iv) your approximate location (region), (v) your IP address (in abbreviated form), (vi) technical information about your browser and the end devices you use (e.g. language settings, screen resolution), (vii) your internet service provider and (viii) the referrer URL (via which website/advertising medium you came to this Website).

Google uses this information on behalf of us to evaluate your use of the Website and to compile reports on Website activities. The reports provided by Google Analytics serve to analyze the performance of our Website and the success of our marketing campaigns.

The recipient of the data we send, and which is linked to cookies is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as processor on behalf of us. We have entered into a data processing agreement with Google for this purpose.

The data stored by Google may also be accessed and processed by other Google companies in third countries, such as Google LLC based in California, USA. The USA is a so-called third country that does not have a so-called adequacy decision, and therefore does not guarantee that an adequate level of protection is ensured in accordance with the requirements of Switzerland and European data protection laws. It can therefore also not be ruled out that US authorities may be able to access this data and that you will not be guaranteed any effective legal remedies. The data stored by Google may also be processed by Google group companies for own
purposes, such as to provide Google's web analytics and tracking services, and may be linked to your Google
account, search history and other data that Google has stored about you, such as your usage data from other
devices. We have no influence on this data processing, so that Google alone is responsible for this data
processing.

Further information on Google Analytics can be found in Google's Terms of Use at
https://marketingplatform.google.com/about/analytics/terms/us/ and Google's Privacy Policy at https://policies.google.com/?hl=en.

You can prevent the collection of the data generated by the cookie and related to the website use by the user concerned (incl. the IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. You can find more information about Google and how Google processes data here.

2. Disclosure of data to third parties and cross border transfer in third countries

We do not disclose any personal data to third parties unless such disclosure is required for contractual performance or otherwise allowed by applicable statutory provisions or unless you have given us your consent.

Please note that we are entitled to outsource the processing of personal data in the context of data protection law provisions fully or partially to external service providers working on our behalf as data processors (in particular within the meaning of Art. 4 no. 8 GDPR). The utilization of the data shared with these third parties is strictly limited to the aforementioned purposes.

In general, our external service providers process your personal data within Switzerland, the European Union (EU) or the signatory states of the Agreement on the European Economic Area (EEA). However, in the event that your personal data is transferred to a service provider located in a third country outside of Switzerland, the EU or EEA, we ensure the protection of your personal data by means of adequate safeguards in accordance with legal and regulatory requirements, e.g. EU Standard Contractual Clauses.

3. Links to other websites

Kindly be aware that the privacy policy stated herein does not extend to websites offered by third parties, which you may access through links provided by us on our Website. We ask that you visit these other websites directly in order to obtain information on how these websites protect data and handle your personal data.

4. Data security

We use appropriate technical and organizational security measures to protect personal data against manipulation, partial or complete loss and against unauthorized access by third parties.

5. Storage period

We handle personal data for the duration required to fulfill the corresponding purpose. If there are legal or other obligations that necessitate longer-term storage, we appropriately limit the processing activities accordingly. Data which is no longer required and for which there is no legal obligation to retain them will be destroyed once the purpose and justification for doing so no longer applies.

6. Your rights

According to applicable data protection laws, you are, in particular, entitled to the following rights. For this purpose, please contact us via the contact details specified in section 8.

(a) Right to information:

You have the right to request at any time information on your personal data stored by us.

(b) Right to rectification:

When processing your personal data, we attempt to ensure through appropriate measures that your personal data is correct and up to date for the purposes for which it has been collected. If your personal data is incorrect or incomplete, you may request the rectification of the respective data.

You may have the right to request the erasure and/or a restriction of processing of your personal data, e.g., if, according to this privacy policy or applicable law, a legitimate business purpose for such processing does no longer exist and if statutory retention obligations do not require a continued storage.

(d) Right to data portability:

You may have the right to receive the respective personal data you provided to us in a structured, commonly used, and machine-readable format or to transmit those data to another controller.

(e) Right to object:

You may have the right to object, on grounds relating to your particular situation, to the processing of your personal data based on our private or legitimate interest or on a public interest. We will not process your personal data after an objection unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (so-called "limited right of objection"). In this case, you must provide reasons for
the objection that arise from your particular situation. Further, you have the right at any time to object to the processing of your personal data for the purposes of direct marketing without any reasons.

(f) Right to withdraw your consent:

If you have given consent to the collection and processing of your personal data, you may withdraw your consent at any time with effect for the future; however, the lawfulness of the processing performed based on the consent until its withdrawal shall not be affected by such a withdrawal.

(g) The competent supervisory authority in case of complaints:

Furthermore, you may also lodge a complaint in relation to our processing of your personal data with the competent local supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner, for contact details see

https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html. A list of competent EU supervisory authorities that you may consider contacting is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

7. Changes to this data privacy policy

We may change this privacy policy at any time without notice in accordance with the applicable data protections laws. Changes may, for example, be required for compliance with new statutory provisions, due to new technologies, or in case of new services. The version currently published on our Website applies.

8. Contact details

If you have any inquiries regarding data protection on our Website, seek information, or wish to exercise your data subject rights, please don't hesitate to reach out to us via email at info@blockfinance.ch.

Last Update: 20 March 2026

Usage of the Website of BlockFinance GmbH

Usage of the Website of
BlockFinance GmbH