This website is operated by the Blockwork IT (Blockwork IT is a Trading Style of Blockwork Technologies Ltd). We know that careful handling of your personal information is important to you and we protect your data. In the following privacy policy, we would like to inform you in particular about the collection and processing of your personal data by us when you use our web sites and about your rights.

Blockwork IT collects, stores and processes your personal data and passes it on in order to support you currently or in the future in placing you with potential employers. In order to provide this service and to assist you, we may contact you both by telephone and in writing (email). Blockwork IT also collects information about the web sites visited on our website. This information is used to continually improve our service, analyse errors and correct them.

The following privacy policy provides you with a detailed overview of the processing of your personal data when you visit our web site www.blockwork-it.com.

Our Principles:

Blockwork IT respects your right to privacy and is committed to the following key principles:

• We protect your privacy and aim to provide you with a service that is tailored to your needs.
• Personal data is collected for specific purposes based on your consent or a legitimate interest when you contact us.
• You have the right to information and access to your personal data at any time and may request its correction or deletion.
• We do not sell your personal data to third parties. However, if necessary and if explicitly mentioned afterwards or if you have consented, we may share your data with group companies, brand licensees, partners and other service providers. In this case, their own privacy policies may also apply.
• We take all reasonable measures to ensure the security and protection of your data from misuse.

Personal data are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

In accordance with the General Data Protection Regulation and the UK`s Data Protection Act 2018 (hereinafter referred to as “GDPR”),

• “personal data” is any information relating to an identified or identifiable living individual. Various pieces of information that together can lead to the identification of a specific person also constitute personal data. Personal data that have been anonymised, encrypted or pseudonymised, but can be used to re-identify an individual, remain personal data and fall within the scope of the General Data Protection Regulation. Personal data that have been anonymised in such a way that the data subject cannot be identified or can no longer be identified are no longer considered personal data. For the data to be truly anonymised, the anonymisation must be irreversible.

• “processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

​

Responsible Party

“Responsible party” within the meaning of Art. 4 No. 7 of the GDPR is Blockwork Technologies Ltd of 1 Waterside Station Road, Harpenden, England, AL5 4US.

Information on the collection and processing of personal data

Personal data will only be collected and processed by us if and to the extent that this is permitted under the applicable regulations on the protection of personal data or if you have given us your consent.

“Personal data” means any information relating to an identified or identifiable natural person. This includes in particular name, address, email address, gender, date of birth, telephone number, age and bank details. We use other terms in this privacy policy in the sense of the definitions set out in Art. 4 of the GDPR.

Standard data collection when visiting our web site

Visiting our web site is generally possible without registration or logging in. Nevertheless, we collect data from every visitor by default, which is transmitted by your browser to our server in order to technically enable a call to our site. For reasons of security and stability, our web server automatically logs access to our web site (legal basis for this is Art. 6 Para. 1 Sentence 1 lit. f) GDPR).

The following data is collected

• IP address of the requesting computer
• Date and time of the server request
• File name and the URL/address you accessed
• Access status/http status code
• Amount of data transferred
• Referrer URL (the previously visited web site)
• Browser
• Operating system and its interface
• language and version of the browser software.

This information is stored separately from any other data you may have transmitted to us, in particular when using one of our online services. The data is not linked to this other data. Your information is evaluated for statistical purposes and stored on our servers for a period of 7 days.

Collection and processing of further personal data

The provision of further (additional) personal data is voluntary. In principle, it will not have any negative effects on you if you do not provide us with any further personal data.

Nevertheless, we do require various personal data in relation to certain services that we offer via our web sites. For example, in order to process an enquiry from you or to be able to send you documents. In these cases, we cannot provide the service you have requested without recourse to the personal data required for this purpose.

1. a) Contact form

We have integrated contact forms into our web site. You can use a contact form to contact us electronically and to send us an enquiry. If you fill out such a contact form and send your data to us via the respective button, the data you entered in the respective contact form will be transmitted to us. We collect and process your personal data exclusively for the purpose of responding to your (contact) enquiry and regularly store it on our web server for a period of 30 days, at the longest for the period required to respond to your enquiry. If this is necessary to answer your enquiry, we will forward your data to our responsible specialist departments or subsidiaries.

The legal basis for the collection and processing of your personal data, which is transmitted to us when you send us your contact request, is Art. 6 para. 1 sentence 1 lit. f) GDPR.

1. b) Life Chat

On this website, anonymised data is collected and stored using technologies provided by Ascend by Wix, for the purpose of web analytics and to operate the live chat system used to respond to live support requests. Usage profiles can be created from this anonymised data under a pseudonym. Insofar as the information collected in this way has a personal reference, the processing is carried out in accordance with our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimization purposes.

1. b) Online application via the web site

You have the option of applying directly via our web site for a position from the current job exchange on our web site. To do this, you can fill out our online application form and upload your application documents such as cover letter, CV and certificates in digital form on our web site and then send them to us. Before submitting your application, you will be explicitly asked to consent to the use and storage of your data by us and to tick the corresponding declaration. We collect and process your personal data only if and to the extent that this is necessary for processing your application and, if applicable, for establishing contact. Depending on the position you are applying for, we will forward your data to the respective companies to which you wish to apply for a position.

The legal basis for the collection and processing of your personal data for the aforementioned purposes is Art. 6 para. 1 sentence 1 lit. a) GDPR. In addition, we may also assert a legitimate interest in the collection and processing of your personal data for the aforementioned purpose within the meaning of Art. 6 (1) sentence 1 lit. f) GDPR.

The provision of your personal data in the context of application processes is voluntary. However, we can only make a decision on the establishment of a placement in an employment relationship or establish a placement in an employment relationship if you provide such personal data that is required for the execution of the application.

The decision on your application is not based on automated processing. Thus, there is no automated decision-making in individual cases within the meaning of Art. 22 GDPR. If automated decision-making takes place as part of your application processes, this must be described here.

If you no longer wish this data processing, you can revoke your consent at any time. The revocation does not affect the lawfulness of the processing of your personal data carried out on the basis of your consent up to the time of the revocation.

Duration of storage of personal data

The duration of the storage of your personal data can generally be found in the respective bullet point in this Policy. In addition, we would like to point out that your personal data in the context of your application (cover letter, curriculum vitae, references) will be stored until you terminate your contract or revoke your consent in order to provide you with further job opportunities or projects.

If you are a customer of ours, mandatory legal requirements, in particular archiving obligations, may result in a duty to retain data that goes beyond the respective contractual relationship and the processing of the contract. For example, due to existing commercial and tax law requirements, we are obliged to retain or store certain of your data for a period of up to ten years. In these cases, we will block your personal data so that it can only be used for archiving purposes.

Cookies

In some areas of our web site we use so-called cookies in order to provide you with our services and web site functions as individually and conveniently as possible. Cookies are files that a web server can have generated on your computer by the browser. Cookies are used to uniquely identify your computer for a certain period of time. Cookies cannot run programs or transmit viruses to your computer. You can set your browser to inform you when cookies are placed. This makes the use of cookies transparent for you. The legal basis for the storage of cookies is Art. 6 para. 1 sentence 1 lit. f) GDPR. You can find further information in our Cookie Policy or when visiting www.allaboutcookies.org

Data protection and place of data processing

All our systems in which personal data is stored are password-protected and only accessible to a limited group of people. The processing and use of data takes place exclusively in the UK or in another state party to the Agreement on the European Economic Area.

Transfer of data

Unless otherwise stated above, we do not disclose personal data to companies, organisations or persons outside our company, except in one of the following circumstances:

1. a) data sharing with affiliated companies in the context of joint data maintenance.

Blockwork IT stores and processes your data collected from you in the course of using our website services (candidate application; customer enquiry; the contact form) and visiting our website in a IT system that can only be accessed by Blockwork IT Employees based on a strict need to know basis.

1. b) With your consent

As far as already described in detail above, but in individual cases also beyond that, we pass on personal data to companies, organisations or persons outside our company if we have received your consent for this (Art. 6 para. 1 sentence 1 lit. a, if applicable in conjunction with Art. 9 para. 2 lit. a GDPR).

1. c) processing by other bodies

We make personal data available to other companies that are affiliated with us, as well as to our third party business partners, other trusted companies or persons who process it on our behalf. This is done on the basis of our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures.

1. d) for legal reasons

We will disclose personal data to companies, organisations or persons outside our company if we can reasonably assume that access to this data or its use, storage or disclosure is necessary, in particular, to comply with applicable laws, regulations or legal procedures or to comply with an enforceable official order; the legal basis in this respect is Art. 6 para. 1 sentence 1 lit. c, if applicable, in conjunction with Art. 9 para. 2 lit. c, if applicable. Art. 9 para. 2 lit. b GDPR.

Social Media Buttons

We have integrated various “social media buttons” into our web site, in particular those of Facebook and Twitter. By using social media buttons, we aim to make our web site more user-friendly.

We have integrated the “social media buttons” as links into our web site. If you click on one of these buttons, you will be taken to our online presence on the network in question. If you do not click on any of our social media buttons, no data will be transmitted to the operators of these networks when you visit our web site. Your information will only be transferred to the respective operator of the (social) network if you click on one of our “social media buttons” and are thereby forwarded to our online presence in the network concerned.

Please note that depending on the provider of the plug-in, data may also be transmitted to the USA.

We have no influence on the collection and processing of your personal data by the respective providers of the plug-ins. Likewise, we have no knowledge of the individual purposes of this data processing or its scope and storage period. We also do not know whether the plug-in provider deletes or anonymises your data and this is not within our sphere of influence.

If you are logged in to the provider via a user profile or log in later, the operator can assign your visit to our web site and your action taken by pressing the plug-in (e.g. the share) to your user profile with the provider. Even if you do not have a user profile with the provider of the respective plug-in, there is still the possibility that the provider will record and store your IP address or register your visit with us via cookies.

The purpose and scope of the data collection and the further processing and use of the data by the operators as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection provisions of the operators.

Below you will find the addresses of the providers of Facebook, Twitter, Xing, LinkedIn and Google as well as the associated privacy policies for the use of the individual services.

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, privacy policy: https://www.facebook.com/policy.phpand https://www.facebook.com/help/186325668085084

Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA, privacy policy: https://twitter.com/privacy?lang=en

Rights of users and persons concerned and the legal bases of processing

With regard to the data processing described in more detail below, users and data subjects have the right to

• to confirmation as to whether data relating to them is being processed,
• to information about the data processed, to further information about the data processing and to copies of the data;
• to correction or completion of incorrect or incomplete data;
• to immediate erasure of the data concerning them;
• to receive the data concerning them and provided by them and to transfer this data to other providers/controllers;
• to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions.

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that takes place. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Likewise,users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider. In particular, an objection to data processing for the purpose of direct advertising is permissible.

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal data about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal data.

We encourage you to get in touch if you have any concerns with how we collect or use your personal data.

The legal bases for processing are listed below and at least one of these must apply whenever we process personal data:

• Consent: the individual has given clear consent to process personal data for a specific purpose.
• Contract: the processing is necessary for a contract or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
• Vital interests: the processing is necessary to protect someone’s life.
• Public task: the processing is necessary for us to perform a task in the public interest or for official functions, and the task or function has a clear basis in law.
• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

The Supervisory Authority

The Information Commissioner’s Office (ICO) in the UK is the for us relevant authority in matters of data protection. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Automated decision-making and profiling

We do not use automation for decision-making and profiling

Children Data

Our website is not intended for children and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.

Economic Analyses and Market Research

In order to run our business economically, to identify market trends, customer and user wishes, we analyse the data available to us on business transactions, contracts, enquiries, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of our legitimate interest whereby the persons concerned include customers, interested parties, business partners, visitors and users of the web site . The analyses are carried out for the purposes of business management evaluations, marketing and market research.

In doing so, we may take into account the profiles of registered users with details, for example, of their purchasing transactions. The analyses serve us to increase user-friendliness, to optimise our offer and business efficiency and are not disclosed externally, unless they are anonymous analyses with summarised values.

If these analyses or profiles are personal, they will be deleted or made anonymous upon termination by the user, otherwise after two years from conclusion of the contract. In all other respects, the macroeconomic analyses and general trend determinations are prepared anonymously wherever possible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “https://” to “httpss://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Wix

We use the services of the homepage provider Wix.com Ltd, Namal 40, 6350671 Tel Aviv, Israel. Hereinafter referred to as “wix.com”. The registered office in Europe: Wix.com Luxembourg S.a.r.l., 5 Rue Guillaume Kroll, L – 1882 Luxembourg. Wix.com collects two types of data: personal data (which can be used to uniquely identify an individual) and non-personal data (which is not used for identification purposes). Wix.com collects such information about our users and visitors, as well as users of users and others who provide it to us. Wix.com may also collect, solely for and in the interest of our users, similar data related to visitors and users of our users’ web sites or services. Wix.com collects and uses data to provide our services and make them better and safer, as well as to contact our visitors, users and job applicants, and to comply with legal requirements applicable to Wix.com.

Wix.com may store and process personal data in the United States, Europe, Israel or other jurisdictions – either itself or through our affiliated companies and service providers. The data storage providers with whom Wix.com works are contractually obligated to protect your data. Wix.com may also collect, process and store such data in other locations, including the United States.

Wix may collect and process data about our users. We do so solely on behalf of and at the direction of our users. Our users are solely responsible for their users of users data, including for its legality, security and integrity. Wix has no direct relationship with users of users.

We may share the data of our visitors, users and their users of users with various third parties, including certain service providers, law enforcement agencies and application developers. In doing so, the data may only be shared in accordance with this policy.

External Links

Our website contains links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

Concerns and Contact

If you have any concerns about a possible compromise of your privacy or misuse of your personal data on our part, or any other questions or comments, you can contact us.