Last updated: June 2026
1. Controller
The controller as defined by the General Data Protection Regulation (GDPR) is:
BLOCKSTAHL GmbH
Amtsstraße 77
22149 Hamburg
Germany
Managing Directors: Siegfried Greve and Udo Groß
Phone: +49 177 2942161
Email: info@blockstahl.com
2. Overview: which data is processed?
This website only collects the data that is technically required to operate it or that you actively provide via the contact form. Specifically:
- Server log files (via our host) - for the technical operation of the website
- Contact form entries - if you send us an enquiry
- Embedded YouTube videos - only after you actively click a preview image (two-click solution)
We do not use any tracking cookies, web analytics, ad tags, external fonts or embedded maps.
3. Hosting
This website is hosted by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany in a German data centre. A data processing agreement (Art. 28 GDPR) with the host is in place.
Legal basis: legitimate interest in a secure, fast and efficient operation of our online offer by a professional provider (Art. 6 (1) lit. f GDPR).
4. Server log files
Each time this website is accessed, our host automatically collects the following technical data transmitted by your browser:
- IP address (shortened or deleted after a short time)
- Date and time of the request
- Requested URL, response status code
- Referrer URL (if any)
- Browser type/version and operating system
This data is processed exclusively for the technical provision of the service and for the defence against attacks (Art. 6 (1) lit. f GDPR) and is not merged with other data sources. No further evaluation takes place.
5. Contact form and email contact
If you send us an enquiry via the contact form on /en/contact/, by email or by phone, we process the data you provide (name, organisation, email, phone, subject, message text) to handle your enquiry.
Legal basis:
- Art. 6 (1) lit. b GDPR, where your enquiry concerns the conclusion or performance of a contract,
- Art. 6 (1) lit. f GDPR (legitimate interest in the effective handling of customer enquiries) in all other cases.
To protect against spam and automated requests, we use the following measures:
- CSRF token and session cookie (technically required, lifetime: until the browser is closed)
- Honeypot field and timing check against automated submission
- IP-based rate limiting: timestamps per IP address are stored as a pseudonymised hash for max. 1 hour to prevent bulk spam
Your enquiry is forwarded by email to info@blockstahl.com and stored there until it has been fully processed - or you request deletion. Mandatory statutory retention obligations (e.g. commercial or tax law) remain unaffected.
6. YouTube videos (two-click solution)
On our references page we show preview images of YouTube videos. A connection to YouTube is only established when you actively click a preview image and thereby expressly consent to playback.
Only after this click, your browser loads an iframe of the enhanced privacy domain youtube-nocookie.com. YouTube is a service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. On loading, technical data (in particular your IP address) is transmitted to Google.
The legal basis for the transfer to YouTube is your consent (Art. 6 (1) lit. a GDPR) given by clicking the preview image. More information is available in the Google privacy policy: policies.google.com/privacy.
7. External links
This website contains links to external providers (e.g. manufacturer of the electric pallet truck, Google Maps for directions to our address). These links open in a new tab and are only invoked when you actively click them. No external content is automatically embedded or preloaded.
8. Cookies and local storage in use
This website sets no advertising, tracking or analytics cookies.
When the contact form is accessed, a technically required session cookie (PHPSESSID) is set. It stores the CSRF token and the spam protection logic and is deleted when the browser is closed. Legal basis: § 25 (2) no. 2 German TDDDG (storage strictly necessary for the service requested).
9. Fonts
This website loads its fonts (Michroma, Albert Sans) exclusively from our own server. No connection to Google Fonts or other third-party providers is established.
10. SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in the address bar of your browser.
11. Your rights
You have the right at any time to:
- information about the personal data we hold about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure of your data (Art. 17 GDPR), unless statutory retention obligations conflict with this
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interest (Art. 21 GDPR)
- withdrawal of a consent given, with effect for the future (Art. 7 (3) GDPR)
An informal message to info@blockstahl.com is sufficient to exercise your rights.
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for BLOCKSTAHL GmbH is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22, 7th floor
20459 Hamburg, Germany
datenschutz-hamburg.de
13. Validity of this privacy policy
We reserve the right to adapt this privacy policy if we make technical changes to the website or if the legal situation changes. The current version is always available on this page.