This privacy policy (“Policy”) describes how Block.co (“Company”, “we”, “our”, or “us”) collects, uses, shares and stores personal data. This Policy applies to the site, applications, products and services (collectively, “Services”).

Data Processing

Type of personal data held by Block.co:

We hold information relating to you from different sources. Nevertheless, the information we hold come essentially from the information you personally provide us or that was transferred to us from a Controller pursuant to the terms of a Data Processing Agreement and the services we provide.

1.Data stored on the Blockchain

We may store your Personal Data with appropriate physical, technological and organizational safeguards and security measures on the Blockchain. As a part of our service we enable the issuance of digital certificates anchored to the Blockchain assuring immutability, and security, instead of the storage of certificates on a cloud, computer machine or hardcopy.

Once issued and successfully anchored on the Blockchain, a certificate has no ongoing dependence on Block.co. These records are anchored on the blockchain that recipients own for a lifetime.

We have also developed a methodology whereby certificates can be revoked in case there is a need for that.

2.Accessing this website and creation of log files

Information are collected every time this website is accessed or used. These data and information are stored in log files on the server and can include:

The temporary storage of data and log files is lawful pursuant to Art. 6 (1) General Data Protection Regulation. The IP address is temporarily stored in the system as it is necessary to provide website access to the User’s computer. The IP address is retained while that website is being accessed. These log files are stored to ensure website functionality, optimize the content of our website, and ensure the security of our IT system.

The data will be deleted when they are no longer needed for the purpose they were collected. For data collected to provide access to the website, this will be at the end of every session.

For log files, this will occur after seven days at the latest. Some data may be preserved for a longer period of time, in which case user IP addresses are deleted or removed, rendering it impossible to link the data to any individual.

3.Cookies

Our website uses cookies. Cookies are small data files, created and stored by the Internet browser on your computer’s hard drive. Accessing a website may result in a cookie being saved on your operating system. This cookie contains a specific string of characters that allows the browser to be clearly recognized every time the website is accessed.

We use cookies to make our website more user-friendly.

The processing of personal data based on the use of cookies is lawful pursuant to Art. 6 (1) GDPR.

The purpose of these technical cookies is to simplify website use.

Cookies are stored on the User’s computer and transferred to us. That is why you, as the User, have full control over cookie implementation. You can deactivate or restrict cookies by changing your browser settings. Cookies already stored on your hard drive can be deleted at any time. This can also be done automatically. However, disabling cookies for our website may result in some functions not working correctly.

4.Contact form and email contact

There are contact forms on Block.co webpages that can be used to communicate electronically. When registering, the data entered by you into the online data entry form will be transmitted. Your consent is required for the processing of this data, and you will be referred to our Policy and asked to grant your consent when you send the form.

Alternatively, contact may be initiated using an email address provided by you. In this case, the personal data provided in the email will be stored. This information will not be passed on to third parties.

The processing of information received from the sending of an email is lawful under Art. 6 (1) (b) GDPR.

These data are only stored for the purposes of processing that communication. The data will be deleted when they are no longer needed for the purpose they were collected.

Your Reinforced rights:

Block.co has taken appropriate measures to provide any information relating to your rights as well as the exercise of these rights. Under Chapter III of the GDPR you have the following rights:

1.Transparent information, communication and modalities for the exercise of your rights

You have the right to be provided with your data freely and in an intelligible and easily accessible form. Following your request, Block.co shall provide information without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. In that case the Block.co will inform you for the reasons of the delay.

2.Information to be provided where personal data are collected from the data subject

You have the right to know the contact details of the agent who collects your data, the purposes of the processing for which the personal data are intended, the legal basis for the processing, the recipients or categories of recipients of the personal data and where applicable the fact that the controller intends to transfer personal data to a third country.

3.Right of access

You have the right to request and receive a copy of your personal data undergoing processing. However, for any further copies requested, Block.co may charge you a reasonable fee that is based on administrative costs.

4.Right to rectification

You have the right to obtain from Block.co within reasonable time the rectification of inaccurate personal data concerning you.

5.Right to erasure (‘right to be forgotten’)

There is a right to ask for the erasure of your personal data and no longer processed where the personal data are no longer necessary in relation to the purposes for which they are controlled or otherwise processed.

Hence, in the cases where Block.co retains and process personal data in accordance with the provisions of Article 6(1)(c) of the GDPR, Block.co may object to such a request and may keep the relevant personal data that are required in order for Block.co to comply with its legal obligations or the legal obligations of a Controller that cooperates with Block.co pursuant to the terms of a Data Processing Agreement.

6.Right to restriction of processing

We ensure that the Block.co has in place a procedure where you have the right to restrict the processing of your personal data. Nonetheless, for those personal data that are necessary for compliance with a legal obligation, Block.co may object to the restriction.

7.Right to data portability

You have the right to receive the personal data concerning you, which you have provided to Block.co, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

8.Right to object

You have the right to object to the processing of your personal data. However, since we lawfully processes such data under Article 6(1)(c), we will still have the right to process the data.

9.Automated individual decision-making, including profiling

You have the right no to be subject to a decision solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects.