Last Modified: 01/09/2024
What is this Policy all about?
Welcome to our Privacy Policy! It’s great that you’d like to know more about how we keep your information safe. This policy will give you information about how we look after your personal data when you visit or use our services or our applications (apps). The Privacy Policy also tells you about your privacy rights and how the law protects you. Finally, this Privacy Policy covers both our online and offline data collection activities, including personal data that we may collect through our various channels such as websites, apps, third party social networks, retail stores, points of sales and events.
In other words, if you’re looking for more information on how we collect, store, use and share your personal data, this is the place for you!
Who is responsible for your personal data?
This Privacy Policy is issued on behalf of BlocksAndMocs where is the data controller (the one responsible and in charge of the data). For the purposes of this Privacy Policy when we use “we”, “us” or “our” in this Policy, we are talking about BlocksAndMocs
We have appointed a data protection officer who is responsible for overseeing questions in relation to this Privacy Policy.
If you have any questions about this Policy, please Contact Us and include your name and country to which your inquiry relates.
Your privacy rights
As a data subject you have the following rights in respect of the personal data we hold on you:
- Request access to your personal data. You have a right to access the personal data we are keeping about you. In many cases this information is already present to you in your online services from us. Your right to access may, however, be restricted by legislation, protection of other persons’ privacy and consideration for the BlocksAndMocs’s business practices, know-how, business secrets and internal assessments.
- Request correction of incorrect or incomplete data. If the data we have pertaining to you are incorrect or incomplete, you are entitled to have the data corrected, with the restrictions that follow from legislation.
- Request erasure You have the right to request deletion of your data when:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw your consent to the processing and there is no other legitimate reason for processing;
- you object to the processing and there is no justified reason for continuing the processing;
- or the processing is unlawful
Please note that, in certain circumstances, we may be required to retain some of your personal data after you have requested deletion to satisfy our legal or contractual obligations. We may also be permitted by applicable laws to retain some of your personal data to satisfy our business needs.
- Limitation of processing of personal data. If you contest the correctness of the data which we have registered about you or lawfulness of processing, or if you have objected to the processing of the data in accordance with your right to object, you may request us to restrict the processing of this data. The processing will be restricted to storage only, until the correctness of the data can be established, or it can be checked whether our legitimate interests override your interests. Even when processing of your data has been restricted as described above, BlocksAndMocs may process your data in other ways if this is necessary to enforce a legal claim or to process previously collected data if you have earlier given your consent.
- Object to processing based on our legitimate interest. You can always object to the processing of personal data about you which is based on legitimate interest. If we are processing your data for direct marketing and profiling in connection to such marketing, your objection will always be sustained. For objections to processing for other purposes, we will conduct a legitimate interest balancing test and consider whether to support your objection.
- Data portability. You have a right to receive personal data that you have provided to us in a machine-readable format. This right applies to personal data processed only by automated means and on the basis of consent or of fulfilling a contract.
- Other rights. You have the right to lodge a complaint with Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, if you are dissatisfied with the way we process your personal data. You will find the their contact information at https://www.bfdi.bund.de/.
Further information: updates
If we change the way we handle your personal data, we will update this Privacy Policy. We reserve the right to make changes to our practices and this Privacy Policy at any time, so please check back frequently to see any updates or changes to our Privacy Policy.
What personal data does BlocksAndMocs collect?
Personal data is any information about a person from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name, username or similar unique identifier, marital status, title, date of birth and gender.
- Contact Data includes billing address, delivery address, email address and telephone numbers or similar contact data.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, user ID, MAC ID and other technology on the devices you use to access this website.
- Profile Data includes your username and password.
- Purchaser Data includes purchases or orders made by you, services requested, rewards or benefits requested or used, your interests, preferences, and feedback or survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties, participate in sweepstakes and other prize competitions and your communication preferences.
- Tracking Data including data about what pages you visited prior to landing on our websites or where you traveled after visiting our website as well as how you interacted with emails or other messages sent to you by us (e.g. if you deleted or opened the email).
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data because this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.
We do not proactively collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, or genetic information, biometric data for identification purposes, or information about criminal convictions and offenses.
If you fail to provide necessary personal data to us (we will let you know when this is the case, for example, by making this information clear in our registration forms), we may not be able to provide you with our goods and/or services.
How does BlocksAndMocs collect personal data from you?
We collect personal data from the following sources:
- Websites includes any websites operated by or for BlocksAndMocs, including sites that we operate under our own domains/URLs and mini-sites that we run on third party social networks such as Facebook.
- Mobile games/apps includes mobile games or applications operated by or for BlocksAndMocs, such as smartphone apps.
- E-mail, text and other electronic messages includes electronic communications between you and BlocksAndMocs.
- Customer Service includes calls or online chats with our Customer Service personnel.
Personal data BlocksAndMocs may collect from third parties
We may receive personal data about you from various third parties and public sources as set out below:
- Technical Data from the following parties:
1. analytics providers;
2. advertising networks; and
3. search information providers.
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services.
- Identity and Contact Data from data brokers or aggregators.
- Identity and Contact Data from publicly available sources.
- Identity, Contact and Login Data from third parties who you have instructed to share data with us (for example, to sign- in to your BlocksAndMocs account using a third-party game or social media service like Epic Games or Facebook).
- Tracking Data from third party platforms such as social media platforms or search engines or websites such as partner websites or applications.
How does BlocksAndMocs use your personal data?
What you do
Use a BlocksAndMocs app, website or online channel.
What we collect
Technical data, Usage data, Tracking data, Purchase data, Identity data, Profile data.
Additionally, data is collected using cookies* on our apps or websites (to the extent you have consented to the use of cookies). See our Cookie Policy on this page for more information about how cookies work and what types of data they collect.
Why we collect it
To optimize the user experience and the functionality of our apps and websites.
To deliver tailored marketing, including retargeting for users above the age of majority, if you have provided us with your consent (see our Cookie Declaration for more information).
For users above the age of majority, to deliver a tailored website content and experiences based on the data we have about you.
To improve and tailor your experience on our apps, websites, and services.
To ensure that content from our apps and websites is optimized for you and for your computer or device.
To allow you to participate in interactive features when you choose to do so.
To be able to generate statistics and insights based on Aggregated Data to understand the health of our business and measuring the effectiveness of our advertising campaigns and promotions.
To give users relevant marketing both when engaging with us in our own channels as well as via third party channels (e.g. social media, search sites, market places).
To find recruit potential new customers that look like our current customers.
Legal Basis if residing in the EU/EEA
Your consent, art. 6(1)(a), GDPR, in connection with our use of cookies (to the extent such consent is provided).
Your consent, art 6(1) (a), GDPR in connection to delivering a tailored website experience.
Legitimate interest, art. 6(1)(f), GDPR. Our legitimate interest is to be able to optimize and improve our apps and online channels, to be as relevant to our adult consumers as possible in our marketing efforts both in our own channels as well as in third party channels;, to ensure that our apps and websites are running smoothly for consumers, and to ensure that we process no personal data of a child under the age of 6 without parental consent.
What you do
Place an order with us.
What we collect
Identity Data and Contact Data, Purchaser Data, Financial Data, Transaction Data, Technical Data.
Why we collect it
To fulfil the purchasing agreement made with you, which includes processing and shipping your orders and administering your rights to return goods if needed or file a complaint.
To be compliant with legislation concerning e.g., product recalls, bookkeeping and consumer rights.
To know who our shoppers are.
To allow you to store your Identity Data and Contact Data or similar for ease of future purchases or interactions with us.
To conduct fraud prevention activities.
Legal Basis if residing in the EU/EEA
Performance of a contract, art. 6(1)(b), GDPR, in relation to our mutual purchasing agreement.
Legal obligation, art. 6(1)(c), GDPR, in relation to our compliance with legislation concerning e.g., product recalls, bookkeeping and consumer rights.
Legitimate interest, art. 6(q) (f) GDPR. Our legitimate interest in knowing our shoppers and provide them with a seamless shopping experience.
Legitimate interest, art. 6(1)(f), GDPR. Our legitimate interest is to prevent fraudulent activities in connection with purchases made on our websites.
What you do
Interact with our customer support functions.
What we collect
Identity Data and Contact Data, Transaction Data, Usage Data, Technical Data and Information about technical issues.
Product questions/complaints , Feedback (e.g., relayed via our communication channels or social media).
General questions, Other information or content regarding the reason for your inquiry.
Why we collect it
To provide you with support.
To locate orders or send you replacements.
To gain insights on how we can improve our products and services.
To act according to applicable law in responding to consumer complaints.
To fulfil the agreement, we have made with your regarding your purchase from us.
Legal Basis if residing in the EU/EEA
Your Consent, art. 6(1)(a), GDPR, when you contact our customer support and provide us with information about your support request.
Legitimate interest, art. 6(1)(f), GDPR. Our legitimate interest is to optimize our customer services and products.
Legal obligation, art. 6(1)(c), GDPR, in connection to our compliance with legislation.
Performance of a contract, art. 6(1)(b), GDPR, in relation to our mutual purchasing agreement.
What you do
Subscribe to one or more of our digital marketing communications where opt in subscription is legally required.
Have not opted out of receiving one or more of our digital marketing communications of our newsletters.
What we collect
Marketing and Communications Data.
Necessary Identify Data.
Information about which type of marketing communication you open and how you engage with the content.
Why we collect it
To be able to deliver our digital marketing communications to you.
To run internal statistics and gain insights and to optimize and tailor both the content and delivery of our communications newsletter to those who want to receive it.
To give you relevant marketing based on your interests and preferences both when engaging with us in our own channels as well as via third party channels (e.g. social media, search sites, market places).
To find /recruit potential new customers that look like our current customers (“look alike”) or ensure that are current customers are not targeted with irrelevant marketing messages (“supression”).
Legal Basis if residing in the EU/EEA
Your consent, art. 6(1)(a), GDPR, which is provided upon your subscription to the marketing communication.
Our legitimate interest, art. 6 (1) (f) GDPR in understanding our marketing effectiveness outside our own channels (e.g. via Social Media, search engines or market places).
Your consent, art. 6 (1) (a) GDPR to allow us to target you with personalized marketing outside of our own branded channels (e.g. via Social Media, search engines or market places).
Legitimate interest, art. 6(1)(f), GDPR. Our legitimate interest in providing you with relevant content of your marketing message based on aggregated insights from shoppers and users on our website.
Legitimate interest, art. 6(1)(f), GDPR. Our legitimate interest is to get statistics for internal use to improve our products and services.
What you do
Interact with third-party social networking features, such as “Like” functions*.
The social media platforms may use personal information collected from the BlocksAndMocs’s social network account on their platform for their own purposes as described in their own privacy policies.
What we collect
Information you have made available, which may include demographic information about you and where you live, your comments, reactions, sharing of our social media account posts or other user generated content.
Analytical performance data for social media posts and digital ads.
Why we collect it
To report on and analyze user engagement with the content posted on the platform(s).
To give you the opportunity to influence which new products we launch.
Legal Basis if residing in the EU/EEA
Legitimate interest, art. 6(1)(f), GDPR, in connection with analyzing and reporting on user engagement and post-performance.
What you do
Enter a commercial relationship with us as a company or private person.
What we collect
Identity Data, Contact Data, Transaction Data, Purchaser Data, Other personal information you provide us with.
Why we collect it
To be able to manage the commercial relationship with you or your company.
To fulfill our obligations in the commercial relationship.
Legal Basis if residing in the EU/EEA
Performance of a contract, art. 6(1)(b), GDPR, in relation to our mutual contractual relationship.
Legitimate interest, art. 6(1)(f), GDPR. Our legitimate interest is to manage our relationship with you or your company.
What you do
Participate in research surveys, focus groups, or other research.
What we collect
Identity Data, Contact Data, Photos or videos (if the research is conducted in person), Other personal information you provide us with.
Why we collect it
To improve our existing products and services.
To develop and improve new products.
Legal Basis if residing in the EU/EEA
Performance of a contract, art. 6(1)(b), GDPR in relation to the market research participant release.
Who will BlocksAndMocs share personal data with?
Please see our category list of trusted third parties that we may share your information with here. We process personal data with third parties/vendors in the following categories:
- IT Service providers. We use a series of trusted partners worldwide to provide us with IT services and system administration services – in regard to both our customer and partner facing activities as well as our internal IT and administration systems.
- Global payment provider and processing partners. These help us to secure a safe and efficient payment process both online, in our stores or through invoicing or money transfers.
- Cloud storage partners. We store our and your data at secure data centers.
- Fraud prevention and detection partners and agencies. These work with BlocksAndMocs to secure that we are not defrauded.
- Warehousing, packing, shipping and delivery partners. These help us get our products into the hands of our customers and business partners.
- Catalogue printing, mailing and postal partners. These help us make sure catalogues, magazines or other printed marketing materials come your way.
- Data broker and data aggregator partners. These help us reach potential new shoppers with catalogues, magazines and other printed or online marketing and advertising.
- Marketing and advertising partners. These help us to be able to provide tailored advertisements, promotions, sweepstakes, contests and campaigns both when you are interacting with the BlocksAndMocs on online platforms, on social media, in store or otherwise. They also help us find new potential shoppers to serve marketing messages (also called “look alike”) or help us better ensure that we do not serve a marketing message to shoppers who are not interested in the product or service in question (also called “suppression”).
- Social media partners and online search platforms. These help us to be present, allow you to interact with BlocksAndMocs on the platforms where you are, and allow us to provide tailored marketing of our products as well as provide us with an broader understanding of how our shoppers and consumers interact with us via these platforms and partners.
- Survey, questionnaires and product review suppliers. These help us get your all-important feedback of your BlocksAndMocs products and building experience.
- Tax and customs authorities, regulators and other authorities globally. These require reporting of processing activities in certain circumstances.
- Professional advisers. Including lawyers, bankers, auditors and insurers globally. These provide consultancy, banking, legal, insurance and accounting services to BlocksAndMocs.
- Gaming platform partners. These help us to be present, allow you to interact with BlocksAndMocs, and to link your BlocksAndMocs Account with the gaming platform account where this functionality is available.
Other uses and disclosures
We will also use and disclose personal data as we believe to be necessary or appropriate: (a) to comply with applicable laws (which may include laws outside the country you live in); (b) to respond to requests from public and government authorities (which may include authorities outside the country you live in); (c) to cooperate with law enforcement; (d) to protect our rights, privacy, safety or property, and that of our affiliates, you or others.
In addition, we will use, disclose or transfer personal data to a third party in the event of any reorganization, merger, sale, joint venture, assignment.
Transfers to third countries
We may transfer personal data to organizations in so-called third countries (countries outside of the European Economic Area). Such transfers can be made if any of the following conditions apply;
- The EU Commission has decided that there is an adequate level of protection in the country in question; or
- Binding Corporate Rules (BCR) are in place (for inter-company transfers); or
- Standard Contractual Clauses (EU model-clauses) are used; or
- Exceptions in special situations apply, such as to fulfill a contract with you or your consent to the specific transfer.
COOKIES AND SIMILAR TECHNOLOGIES (“COOKIES”)
Cookies are small data files that your browser places on your computer or device. A cookie itself does not contain or collect information. However, when it is read by a server via a web browser it can help a website deliver a more user-friendly service – for example, remembering previous purchases or account details.
On the BlocksAndMocs.com domain, you will find a list of cookies and similar technologies (“Cookies”). These cookies are set either by us or selected third parties. If a third party is a joint or independent controller, this will be indicated in the “Controller” column. Please note that only relevant, strictly necessary cookies are set on the BlocksAndMocs.com domain when you log in with your account.
We use cookies on our BlocksAndMocs.com websites and in our digital applications.
Both we and our external tracking partners use browser storage, app storage, cookies, pixels, beacons, scripts, and tags to operate our websites and apps and, provided that you have given your consent, to analyze your usage and market to you. We may receive individual or aggregated reports about this information from our external tracking partners. These partners may also combine this information with other data they have collected about you.
The cookies we use can be divided into three categories:
Necessary Cookies: These cookies are required to maintain the technical functionality of the website and to provide the features you have requested. This includes functions such as country and language selection, remembering your login details, security features and fraud prevention, saving your digital shopping cart, wish list, and volume settings, as well as access to secure areas of the website. This category of cookies cannot be disabled and therefore does not require consent.
Analytical Cookies: These cookies are optional. They collect information about user behavior and experience on our website to improve the design, operation, and efficiency, offering you a better user experience.
Advertising Cookies: These cookies are optional and are used to gather information about your interests, including which websites and ads you click on, as well as which products and services on our websites or in our apps you are interested in and purchase. We use this data to show you more relevant ads and product recommendations on our websites or in our apps, as well as within our membership and program offerings. Additionally, we use information about your interests and behavior on our website to make the advertising messages we deliver to our users more relevant based on your interests and usage behavior.
Third-Party Advertising Cookies: These cookies are optional and allow third parties to use cookies to target advertisements for our products and services on other websites, in other apps, and on social media. If you give your consent, you allow third parties to set cookies that track your interests and behavior. This includes which products and services you are interested in and purchase on this and other websites, in social media, apps, etc. Please note that these third parties may be either joint or independent data controllers for the personal data collected through these cookies and may use the data for their own purposes. We allow the following third parties to use cookies on our websites and in our apps.
What about my privacy?
Some of the cookies set on BlocksAndMocs.com lead to the processing of your personal data. Regarding “strictly necessary” cookies that process personal data, BlocksAndMocs bases this processing on:
- Our legitimate interest in preventing fraudulent behavior in the use of our website and its services;
- Our legitimate interest in enabling you to interact with our customer service via chat functions and to remain logged into your BlocksAndMocs account;
- Our obligation to ensure the safe use and operation of the website and the services offered on the website.
- Our contractual obligation to provide certain services or features specifically requested by the user of the website.
For “analytical” and/or “advertising” cookies that process personal data, BlocksAndMocs bases the processing on consent, unless otherwise expressly stated in our Privacy Policy.
For cookies where a third party is a joint or independent data controller, please refer to the third party’s privacy information linked below to obtain further information about the legal basis for processing personal data by the data controllers.
What if I don’t want cookies to be used?
Necessary cookies are essential for the website, so you cannot disable them. However, you can delete the necessary cookies after use.
For all other cookies, you can adjust your settings at any time and withdraw your consent.
How do I remove cookies?
Cookies are stored on your device, so we cannot delete them. Only you can do that. Follow the instructions on your specific device. If you are on a website operated by BlocksAndMocs, you can prevent cookies from being set by adjusting the browser settings on your device. If you are using an app published by BlocksAndMocs, please note that cookies set within an app work differently. You need to manage them directly through your device. True browser cookies are set to expire after a certain period of time. However, similar technologies like local storage on your device do not have an expiration period; you must delete these manually.
Google Fonts
Our website uses Google Fonts to enhance the visual appearance of our content by providing a wide range of high-quality fonts. Google Fonts is a service provided by Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When you access our website, your browser automatically connects to Google’s servers to download the required fonts. As part of this process, your IP address is transmitted to Google. This transmission allows Google to identify your approximate location and other technical details such as your browser and operating system.
We are committed to transparency and informing you about how your data is used. The use of Google Fonts is based on our legitimate interest in providing a visually appealing website. However, we recognize that the transmission of your IP address to Google may raise privacy concerns. Therefore, we provide you with the following options:
- User Consent: Our cookie consent banner allows you to control whether external resources, such as Google Fonts, are loaded. Please note that if you do not provide consent for these services, certain functionalities of our website will be restricted, and you may not be able to fully access or use the website.
- Privacy Audit: We continuously monitor our website to ensure that all third-party services are used in compliance with data protection regulations. Our aim is to provide a secure and privacy-compliant browsing experience.
You have the right to control your personal data and decide which third-party services can access it. If you do not consent to the use of external Google Fonts or similar services, you can refuse consent through our cookie banner. However, please be aware that declining consent may limit your ability to access certain parts of our website.
Google OAuth
At BlocksAndMocs, we prioritize your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share your data, particularly when you log in using Google OAuth.
What Data We Collect
When you use Google OAuth to log in, we may collect the following information:
- Basic Profile Data: Your name, email address, profile picture, and any other information shared by your social media account.
- Authentication Tokens: Used to keep your login session secure.
We only collect the data you have authorized through your social media account or Google when using OAuth login.
Google OAuth Login
If you choose to log in via Google OAuth, we collect your Google profile information, including your name, email address, profile picture, and any other details you allow Google to share. We comply with Google’s API Services User Data Policy, which restricts how we use the data we access from your Google account. We do not sell or share your Google OAuth data with third parties except as necessary to provide our services.
For more information on how Google handles your data, please refer to their Google Privacy Policy.
Further information: updates
If we change the way we handle your personal data, we will update this Privacy Policy. We reserve the right to make changes to our practices and this Privacy Policy at any time, so please check back frequently to see any updates or changes to our Privacy Policy.
How We Use Your Information
We use your information to:
- Provide seamless login access via social media platforms or Google OAuth.
- Personalize your user experience.
- Verify your identity for security purposes.
We do not sell, trade, or otherwise transfer your personal data to third parties, except as required by law or to operate our website efficiently.
Cookies and Tracking Technologies
We use cookies to:
- Maintain your login session.
- Improve your user experience.
You can disable cookies through your browser settings, but this may affect your ability to log in and use certain features of our website.
Third-Party Services
When using Google OAuth or any other social login, your data is shared with third-party services like Google or other social login providers. These services have their own privacy policies, and we encourage you to review them:
Your Data Rights
You have the right to:
- Access, update, or delete the personal information we hold about you.
- Revoke permissions granted to Google OAuth by adjusting your social account’s privacy settings.
To exercise your rights, please Contact Us.
Security
We use industry-standard measures to secure your data. While we strive to protect your personal information, no system is completely secure. If you believe your data has been compromised, please contact us immediately.
Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page, and we recommend that you review this policy regularly.
Contact Information
For any questions or concerns, please Contact Us.