Privacy Policy

1. Controller

The controller for the processing of personal data on this website is BitBlockLabs SRL, Stoinești Nr. 4, Com. Craiva, Jud. Arad, Romania, e-mail: info@bitblocklabs.org.

2. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technically necessary data (IP address, date and time, page requested, browser identifier) in server logs. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). A data processing agreement is in place with Vercel; transfers to the USA are based on the EU Standard Contractual Clauses. These logs are kept only for as long as required for secure operation and troubleshooting; they are not evaluated for any other purpose.

3. No cookies, no advertising services

This website sets no cookies and uses no advertising services, no profiling and no cross-device recognition. The only stored preference is your language choice, which is part of the page address and contains no personal data.

For this reason no consent dialogue appears on this website: no information is stored on or read from your device that would require consent under § 25 TDDDG.

4. Audience measurement

To improve our service we measure the use of this website with Umami. The software runs on a server operated by BitBlockLabs SRL in Switzerland. No data is passed to third parties and none is used for advertising.

Umami sets no cookies and stores nothing on your device. The only thing read from it is a switch with which you can turn the measurement off for yourself; we never create it. It records: page requested, referring page, browser, operating system, device type and screen size, location details derived from the IP address (country, region and city), plus triggered events such as a button click. Your IP address itself is not stored; together with your browser identifier it feeds into a hash. That hash groups your page views — a returning visitor is recognised as the same person for as long as their IP address and browser stay unchanged. No name, e-mail address or account is linked to it. We do not combine this data with other sources, we do not use it for advertising, and we do not address individuals on the basis of it.

Individual page views (raw data) are deleted after twelve months; the deletion runs automatically every week. Only aggregated figures per day and per month are kept — for example “March 2026: 4,812 page views”. These figures can no longer be linked to any person and are retained permanently so that year-on-year comparisons remain possible.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in tailoring our service to actual demand. Switzerland is covered by an adequacy decision of the European Commission (most recently confirmed on 15 January 2024); no additional safeguards are therefore required for the transfer.

You can object to the measurement by enabling the “Do Not Track” setting in your browser or by using a content blocker. This puts you at no disadvantage when using this website.

5. Metrics

The figures shown on the start page are provided by our own servers. They are fetched server-side; your browser establishes no connection of its own, and no personal data is transmitted.

6. Images in articles

The images in our articles are held in our own editorial system on a server operated by BitBlockLabs SRL in Switzerland (cms.bitblocklabs.org). In the article view they are delivered through our web server. If you click an image to enlarge it, your browser fetches the original file directly from that server; in doing so your IP address and browser identifier are transmitted to it and processed in server logs.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in presenting images at a readable resolution). No data is passed to third parties — the server is operated by us. Switzerland is covered by an adequacy decision of the European Commission.

7. Contact

If you contact us by e-mail, we process your details to answer the enquiry (Art. 6(1)(b) GDPR). The data is deleted once it is no longer required for this purpose and no statutory retention obligations apply.

8. App and customer account

Use of the application at app.sonarsignal.org is governed by a separate privacy policy shown to you at registration.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a data protection supervisory authority; in Romania this is the ANSPDCP (www.dataprotection.ro).