Privacy policy

Who is responsible

The controller for this website (www.vonblock.com, the Von Block Academy included) and for the download server (updates.vonblock.com) is Martin Bory, Vokrojova 3379/2, 143 00 Praha 12, Czech Republic, email: [email protected]. For any question about your data, write to [email protected].

Cookies and Google Analytics

Unless you agree to analytics, this website sets no cookies and uses no advertising, no social media plugins and no tracking of any kind. Fonts and images are served from our own server, so your browser does not contact any other company when you visit. Your browser only remembers your answer to the cookie banner, in its local storage on your device, so that we do not ask you on every page. It is never sent to us, and it is kept for 12 months, after which we ask again. Storing it is necessary to respect your choice, so it needs no consent.

If you click Accept in the banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to understand which pages are read and how visitors find the site. Only then does your browser load Google’s script and send Google information about your visit: the pages you view and when, the page you came from, your browser, device, screen size and language, and an approximate location (city or region) that Google derives from your IP address. Google Analytics 4 does not log or store IP addresses. Google sets the cookies _ga and _ga_0ZETE47QX2 on your device, which recognise your browser on later visits and expire after two years. We have switched off Google signals and the use of the data for advertising, and we do not combine it with any other data about you.

Google processes these data on our behalf under its data processing terms (Article 28 GDPR). Google keeps them for 14 months, after which they are deleted automatically. They may be processed by Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Article 45 GDPR); Google’s data processing terms also include the EU Standard Contractual Clauses (Article 46 GDPR). More in Google’s privacy policy.

The legal basis is your consent (Article 6(1)(a) GDPR and section 89(3) of the Czech Electronic Communications Act, which implements Article 5(3) of the ePrivacy Directive). You can withdraw it at any time, as easily as you gave it, under Cookie settings at the bottom of every page: choose Reject, and Google Analytics stops and its cookies are removed. Withdrawing does not affect the lawfulness of what happened before.

Server log files

When you open a page or download the plugin, your browser sends our web server some information, which the server records in log files:

• your IP address
• the date and time of the request
• the page or file requested, the response status and the amount of data sent
• the page you came from (referrer), if your browser sends it
• your browser and operating system (user agent)

We use these logs only to deliver the website, to keep it secure (for example, to detect and block attacks) and to find faults. We do not combine them with other data or use them to identify visitors. The legal basis is our legitimate interest in a secure and working website (Article 6(1)(f) GDPR). The logs are deleted automatically after at most eight weeks, unless one is needed as evidence of a specific attack.

Contacting us by email

If you email us, we use your address and your message only to answer you. The legal basis is Article 6(1)(b) GDPR when your message concerns a contract, and our legitimate interest in answering enquiries (Article 6(1)(f) GDPR) otherwise. We delete the correspondence when it is no longer needed, unless the law requires us to keep it.

Registering a site

When you register a site in the Von Block plugin’s settings, the plugin sends us the site’s address, the email address you enter, and the email address of the site’s administrator as set in WordPress. Before we record anything, our server calls the site back once to confirm that the request really came from it. We keep the registered domain, the date of registration, the terms that applied that day, the email addresses and the address of the site that registered.

We use these email addresses for one thing only: to tell you before the licence for the domain ends, when it has ended, and when your site starts showing a notice about it. We do not show them anywhere, share them or use them for marketing. Every such email has a link to unsubscribe, and you can also write to us. When the plugin on the main site of a registered domain (the bare domain or its www address) is installed or updated, it sends us the administrator’s email address again, so the reminders reach whoever runs the site now; the address it replaces stops getting them. Sites on other subdomains do not send it.

The legal basis for the address you enter is the performance of the contract you enter by registering (Article 6(1)(b) GDPR); for the administrator’s address it is our legitimate interest in telling whoever runs the site that its licence is ending (Article 6(1)(f)), which you can object to at any time by unsubscribing. We keep these data as long as the domain is registered with us. If you unsubscribe, or an email to an address bounces, we keep a note of that so we never write to it again.

Buying a licence

From 1 January 2027, licences are sold at licensing.vonblock.com by our reseller Paddle.com (Paddle.com Market Ltd, London), who is the Merchant of Record for the order. The checkout is Paddle’s: it runs on that page from Paddle’s servers, may set cookies needed for the payment, and Paddle collects your name, email, billing address and payment details. Paddle processes them as an independent controller, for the payment, tax and fraud prevention, as described in Paddle’s privacy notice. We never see your card details.

We keep what we need to provide the licence: the licensed domain, your email address, the dates the licence is valid, and the Paddle IDs of the payment and subscription. Paddle tells us of each payment, renewal and refund. The legal basis is the performance of the contract (Article 6(1)(b) GDPR) and, for records the tax law requires, a legal obligation (Article 6(1)(c)). We keep these data as long as the licence runs and then for as long as the law requires us to keep business records.

Once a day, the Von Block plugin on your site asks us where its licence stands. It sends us only the address the site runs on.

When the plugin is activated

Each time the Von Block plugin is activated on a WordPress site, the site tells us so. A few seconds later it sends us:

• the address the site runs on, including its subdomain and any subfolder (for example https://shop.example.com/)
• the date and time of the activation
• the versions of Von Block, WordPress and PHP it runs
• whether the site is a WordPress multisite network, and whether the plugin was activated for the whole network

It sends no names, no email addresses, and nothing from the site’s content. We keep each activation as a separate record, so a site that is activated again appears again. We use these records to see where and on which versions Von Block is used, to plan support and compatibility, and to match activations to registered and licensed domains. We do not publish them or share them with anyone.

A site address usually does not identify a person. When it does, for example a site named after its owner, the legal basis is our legitimate interest in knowing where our software is used and keeping it working there (Article 6(1)(f) GDPR). We keep each record for five years from the activation and then delete it automatically, or earlier if you ask us to.

Hosting

The website runs on servers of Amazon Web Services (AWS) in the United States, which process the data described above on our behalf under a data processing agreement (Article 28 GDPR). Data is transferred to the United States on the basis of the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which AWS is certified (Article 45 GDPR), and the EU Standard Contractual Clauses included in AWS’s data processing agreement (Article 46 GDPR).

Your rights

You have the right to:

• access the personal data we hold about you (Article 15 GDPR)
• have it corrected (Article 16) or erased (Article 17)
• have its processing restricted (Article 18)
• receive it in a portable format (Article 20)
• object to processing based on our legitimate interests (Article 21)
• withdraw your consent to analytics at any time, without affecting what happened before (Article 7(3)), under Cookie settings
• lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where the alleged breach took place (Article 77)

To use these rights, write to [email protected]. Because the logs contain no names, we may need your IP address and the time of your visit to find your data.

Other information

You are not obliged to provide any personal data, but without the technical data above your browser cannot load the website. We make no automated decisions and do no profiling. We have not appointed a data protection officer, as the law does not require one for this website.

The Von Block plugin you can download here is a separate product. What it sends from your own WordPress site (when it is activated, when it checks a licence, and when a site is registered) is described above.