Privacy Policy
Last updated: August 19, 2026
Table of contents
At DTM GOES ONLINE SRL, DanBlocks ("we", "our" or "the Company") we respect your privacy and understand the importance of protecting your data. This Privacy Policy ("Policy") describes our privacy practices for the activities listed below. In accordance with your rights, we inform you about how we collect, store, access and otherwise process information relating to individuals. Within this Policy, personal data ("Personal Data") refers to any type of information that, either individually or in combination with other available information, can identify a person.
We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we comply with the obligations defined in the regulations below:
- Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR")
- Applicable national legislation in the field of personal data protection
This policy applies to the website, domains, applications, services and digital products of DTM GOES ONLINE SRL, marketed through the www.danblocks.com platform.
This Policy does not apply to third-party applications, sites, products, services or platforms that may be accessed through (non-DanBlocks) links we may provide. These sites are owned and operated independently from us and have their own separate privacy and data collection practices. Any personal data you provide to these sites will be governed by the third party's privacy policy.
Depending on the context, we process personal data in two distinct capacities, and your requests are handled differently in each.
As a controller — when you visit our website, contact us, request a proposal, or are our client. In these situations we determine the purposes and means of processing, and this policy applies in full.
As a processor — when your data reaches us because we built or operate an automation for one of our clients. This is the case, for example, when someone fills in a company's contact or enquiry form on Facebook, Instagram, Google or that company's website, and we automatically transfer the enquiry into that company's CRM system. In these situations the controller is the company whose form you completed, and we process the data strictly on its documented instructions, under a data processing agreement concluded pursuant to Article 28 GDPR.
If your data reached us in the second situation, requests regarding access, rectification or erasure should be addressed to that company. If you write to us, we forward your request to them without undue delay and keep you informed.
This Policy applies when you interact with us through any of the following actions:
- Using our site and services as a user or customer
- Visiting our site which links to this Privacy Policy
- Creating a user account on our platform
- Placing an order for digital products
- Receiving any type of communications from us, including newsletters, emails or notifications
- Contacting us through the contact form or other means
We collect your personal data directly from you, so you have control over the information you wish to provide us.
Sensitive data, included by GDPR in special categories of personal data, is not subject to our collection and processing. The same applies to minors' data - we do not wish to collect or process it.
Categories of personal data we collect:
- First and Last Name
- Email address
- Phone number
- Billing address
- Payment details (processed securely through the payment processor, without storage by us)
- Website usage data (behavior, browsing habits) for personalizing the online experience
- Other categories of data that you provide directly when creating an account or placing an order
Note: If you create your user account before completing the order on the site, the platform will request your email address for automatic account creation. If you do not complete the order, the account will not be created, will be automatically deleted, and the provided data will not be stored.
Directly from you:
- When you create an account on our site
- When you purchase digital products
- When you subscribe to our newsletter
- When you contact us with a question or to report a problem
- When you respond to a voluntary market research survey
- When you use the contact form on the site
Through automated technologies:
As you interact with our site, we automatically collect the following types of data:
- Browser used for navigation and browsing duration
- IP address and search history
- Language and pages viewed on the site
- Operating system used
- Click sequence to, from and through our site
- Complete URLs, information or products viewed/searched
- Frequency of visits to certain pages and their duration
- Interaction information (scrolling, clicks, mouse movements)
We collect this data through cookies, server logs and other similar technologies.
For the provision of services strictly for your benefit, the processing of your data for the purposes set out below is based on the contract concluded between you as User/Buyer/Customer and DTM GOES ONLINE SRL.
We need this data for:
- Creating and managing the account on the www.danblocks.com website
- Processing orders, which includes validation, invoicing and electronic delivery of digital products
- Resolving problems/complaints regarding an order or purchased digital products
- Resolving reports regarding technical defects of digital products
- Refunding the value of digital products in cases provided by law
- Providing customer support services regarding your orders
- Fulfilling legal obligations (invoicing, accounting, tax reporting)
Legal bases for processing:
- Contract performance - for delivery of ordered digital products and services
- Consent - for direct marketing activities
- Legal obligation - for keeping accounting and tax documents
- Legitimate interest - for improving services and preventing fraud
We may send you distance communication messages (email) that may contain:
- General and/or thematic information
- Information about offers or promotions
- Information about products similar or complementary to those previously purchased
- Other commercial information such as opinion surveys
You can withdraw your consent at any time by:
- • Accessing the "Unsubscribe" link in received messages
- • Disabling the option to receive communications in the "My Account" section
- • Direct contact at hi@danblocks.com
We use the following third-party tools to operate our services:
- Google Analytics - for site traffic analysis
- Google Ads - for online advertising
- Stripe / Payment Processor - for secure payment processing
- Email marketing services - for commercial communications
For more information about how Google uses your data, visit: Google Privacy Policy
You can opt out of Google Analytics here: Google Analytics Opt-out
To automate our clients' enquiry flow we operate our own application registered with Meta Platforms, named DanBlocks Analytics, along with connections to other advertising and productivity platforms.
What the application accesses
Only after a client or a Page administrator explicitly grants us permission through the platform's authorisation screen, the application may:
- see the list of Pages administered by the authorising user;
- read the enquiries generated through those Pages' Lead Ads forms, meaning the details voluntarily submitted by the interested person — typically name, phone number, email address, city and the answers to the form's questions;
- read information about the campaign, ad set and ad the enquiry came from;
- manage the technical subscriptions required for real-time delivery of enquiries.
What we do with this data
The data is transferred automatically into our client's CRM system, which remains under their control, so that their team can contact the interested person. Transfer is the only operation performed: we do not enrich the data from external sources, we do not build behavioural profiles, and we do not use it for our own purposes. We do not sell or rent personal data, and we do not pass it to data brokers or third-party ad networks.
Sending conversion events
On the client's instruction, we may send business outcome events back to the advertising platforms — for example, that an enquiry became a contract — in order to optimise campaigns. In these transmissions we use the internal enquiry identifier provided by the platform or, where applicable, the email address and phone number irreversibly transformed using the SHA-256 hash function, so that the data cannot be read in clear text.
Providers that process data on our behalf
| Provider | Role | Processing location |
|---|---|---|
| Meta Platforms Ireland Ltd. | Advertising platform and source of Lead Ads forms | Ireland / US |
| Google Ireland Ltd. | Advertising platform, lead forms and web analytics | Ireland / US |
| Notion Labs, Inc. | Workspace and CRM databases | European Union |
| n8n — instance operated by us | Workflow automation engine | European Union |
| Stripe | Payment processing | Ireland / US |
| Hosting, email and accounting providers | Support services | European Union |
Transfers to providers processing data outside the European Economic Area rely on a European Commission adequacy decision, where the provider is certified under the EU–US Data Privacy Framework, or on the Standard Contractual Clauses adopted by the European Commission, accompanied by supplementary technical measures.
How to request data deletion
If you authorised the DanBlocks Analytics application with your Facebook account and wish to have the associated data deleted, you have two options:
- Write to us at hi@danblocks.com with the subject "Data deletion", mentioning the Facebook Page involved.
- Revoke access directly from Facebook: Settings & privacy → Settings → Apps and websites, select the application and click Remove.
We confirm deletion within 30 days at most. Where the data sits in a client's system, we forward the request to them, as the controller, and inform you of the outcome.
In general, we will store your personal data as long as you have an active account on the DTM GOES ONLINE SRL website.
Specific retention periods:
- Data from financial-accounting documents: 10 years, according to art. 38 of Annex 1 to Order no. 2634/2015
- Account data: for the duration of the account's existence and for a reasonable period thereafter
- Marketing data: until consent is withdrawn
Note: After the retention periods expire, data will be securely deleted or anonymized.
To delete your account, send a request to hi@danblocks.com. If there are active orders, deletion will be carried out after their completion.
DTM GOES ONLINE SRL does not sell or rent your personal data.
To fulfill contractual obligations, we may transfer data to:
- Payment or banking service providers
- Hosting and IT service providers
- Email marketing service providers
These processors are contractually obliged to maintain confidentiality and to use the data exclusively for the purpose for which it is provided.
If necessary to defend a legitimate interest or in case of a legal obligation, we may disclose certain data to competent public authorities.
Your personal data may be transferred and processed in the European Union.
For transfers outside the EEA, we will ensure:
- The existence of an adequacy decision by the European Commission, or
- Implementation of EU standard contractual clauses
We have implemented appropriate technical and organizational measures to protect your personal data:
- Communication between your browser and our site uses encrypted connection (SSL/TLS)
- We do not store card data - it is processed securely by the payment processor
- Access to data is restricted to authorized personnel
- We require our suppliers to implement appropriate security measures
In the event of a data security breach, we will notify you in accordance with legal obligations.
Our site and digital products are not intended for minors. We do not knowingly collect personal data from persons under 18 years of age.
In accordance with GDPR, you have the following rights:
Withdrawal of consent
If you have consented to the processing of your data, you have the right to withdraw your consent at any time, free of charge. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
You can submit a request to exercise your rights at:
Email: hi@danblocks.com
Postal address:
DTM GOES ONLINE SRL
Lt. Mircea Damschin St. no. 8
Suceava, Suceava County
Romania
We will respond to your request within 30 days of receipt. To verify your identity, we may request additional information.
If you believe your rights have been violated, you can file a complaint with:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest
We may modify this Policy at any time. If we make changes, we will post the updated version on this site with the date of the last update.
We recommend that you periodically check this page to stay informed of any changes.
For any questions regarding this Privacy Policy or the processing of your data:
Email: hi@danblocks.com
Address:
Data Protection Officer
DTM GOES ONLINE SRL
Lt. Mircea Damschin St. no. 8
Suceava, Suceava County
Romania