Privacy Policy
1. Privacy at a Glance
The protection of your personal data is important to us. Personal data refers to any information that can be used to personally identify you or that relates to an identified or identifiable natural person.
This Privacy Policy informs you about what personal data is processed when you use BloxxStar, for what purposes this is done, on what legal grounds the processing takes place, and what rights you have under the General Data Protection Regulation (GDPR).
2. Data Controller
The controller responsible for data processing on this website is:
Jörn von Zanthier
The full mailing address of the data controller can be found in the legal notice section of this website.
Email: E-Mail anzeigen
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
3. Hosting
BloxxStar is hosted by an external service provider.
Hosting provider:
Joomla100
Ekkehard Körbel
, M.A. in Media Management
Am Würzgarten 12
65375 Oestrich-Winkel
Germany
When you access BloxxStar, technically necessary data is processed that is required for the provision, stability, and security of the website.
This may include, in particular, IP addresses, the date and time of access, pages or files accessed, browser type and version, operating system, referrer URL, HTTP status code, and other technical connection information.
This processing is carried out primarily to ensure the technically reliable provision of the website and to detect and prevent malfunctions, misuse, and attacks.
To the extent that the hosting provider processes personal data on our behalf, this is done in accordance with the data protection provisions governing data processing on behalf of a controller.
The processing of personal data in connection with the secure and reliable operation of the website is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and efficient provision of our online services.
4. Server Log Files
When you visit this website, technically necessary information may be automatically collected by the web server and stored in so-called server log files.
This may include, in particular:
IP address of the accessing device
Date and time of access
Page or file
accessed
Amount
of data transferred
Referrer URL
Browser type and browser version
Operating system
used
HTTP status code
Additional technical information about the request
This information is required to technically deliver the website, ensure its stability and security, and to detect and investigate potential technical issues, unauthorized access, or attacks.
We do not, as a matter of principle, combine this data with other data sources to create personalized user profiles.
Processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and technically reliable operation of the website.
5. SSL or TLS Encryption
For security reasons, BloxxStar uses SSL or TLS encryption.
This protects data transmitted between your browser and our server from unauthorized access during transmission.
You can recognize an encrypted connection in particular by the fact that the website address begins with “https://.”
6. Cookies, Local Storage, and Technically Necessary Storage
BloxxStar uses storage technologies that are necessary for certain website functions and settings.
These include, in particular, the storage of the selected language and settings for the website’s display.
The selected language may be stored in a cookie so that BloxxStar can automatically display the website in the desired language when you visit subsequent pages.
Display settings—such as the choice between a light and dark theme for the website—may be stored in the browser’s local storage.
In addition, technically necessary cookies or comparable storage technologies may be used for security functions and for the protected administration area.
To the extent that storing information on the user’s device or accessing information already stored is absolutely necessary to provide a digital service expressly requested by the user, this is done in accordance with Section 25(2) of the TDDDG.
To the extent that personal data is processed in connection with these technically necessary functions, the processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing BloxxStar in a secure, technically functional, and user-friendly manner.
Technologies requiring consent are not used without the necessary consent.
7. Consent Management and Privacy Settings
BloxxStar uses consent management or a comparable technical mechanism for external content that requires consent.
External content that, when loaded, may establish a connection to third-party providers and result in the transfer of personal data is generally loaded only after you have consented to the corresponding processing.
This applies in particular to embedded content from YouTube and Instagram, as well as, where applicable, other external media providers in the future.
Before you grant your consent, a local placeholder or a corresponding notification will be displayed in place of the external content. The external content is not yet loaded from the respective third-party provider at this point.
Your decision may be stored on your device so that you do not have to make the same selection every time you visit the page.
To the extent that storing your consent decision is technically necessary, access to or storage of information on your device is based on Section 25(2) of the TDDDG.
To the extent that personal data is processed for the administration or documentation of consent that has been granted, this is done on the basis of Article 6(1)(c) of the GDPR in conjunction with the statutory documentation requirements.
Consent that has been given may be revoked at any time with future effect. To do so, you can access the privacy settings provided on BloxxStar again and change your selection.
8. Secure Administration Area
BloxxStar has a non-public administration area for managing the website, its content, and the associated data.
Technically necessary session information may be stored for the purpose of logging in and ensuring the secure operation of this area.
This information is used in particular to authenticate authorized users, secure the administration area, and prevent unauthorized access.
The administration area is not part of the website’s public offerings available to visitors.
9. Contacting Us via Email
If you contact us via email, we process the data you provide.
This includes, in particular, your email address, the content of your message, and, if applicable, any additional information you voluntarily provide.
The data is processed to handle and respond to your inquiry.
If your inquiry is aimed at initiating or fulfilling a contract, the processing is based on Article 6(1)(b) of the GDPR.
In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in processing and responding to communications directed to us.
The data you provide will be deleted as soon as the purpose for which it was processed no longer applies and there are no legal retention obligations or other legal grounds preventing its deletion.
Please note that communication via email may generally pose security risks and that full end-to-end encryption is not automatically guaranteed.
10. External Links and Affiliate Links
BloxxStar contains links to external websites, manufacturers, retailers, online stores, and other third-party providers.
Some of these links may be so-called affiliate or partner links.
If you click on a properly labeled affiliate link and subsequently make a purchase from the respective provider, for example, BloxxStar may receive a commission for this. Using such a link generally does not incur any additional costs for you.
Simply viewing an external link on BloxxStar does not, in principle, result in any data being transmitted to the linked website via the link itself.
Only when you actively click on such a link do you leave BloxxStar and access the respective third-party provider’s site. In doing so, data may be transmitted to the respective provider.
From that point on, the privacy policy of the respective third-party provider applies. We generally have no direct influence over the nature and scope of the data processing that takes place there.
Affiliate and partner links are labeled in accordance with legal requirements.
11. YouTube
Content from the YouTube video platform is embedded on BloxxStar.
The provider for users in the European Economic Area and Switzerland is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
YouTube is used in particular to display videos from the BloxxStar YouTube channel as well as other videos relevant to the content of this website.
When embedded YouTube content is loaded, a connection is established to YouTube’s or Google’s servers. In the process, personal and technical data may be processed.
This may include, in particular, your IP address, browser and device information, information about the page you are viewing, and other technical data.
If you are logged into a Google or YouTube account at the same time, Google may, in some cases, associate information about your access to the embedded content with your user account.
YouTube content is generally not loaded on BloxxStar until you have consented to the loading of external media. Before you give your consent, only a locally provided placeholder is displayed, which does not yet establish a connection to YouTube.
The storage of information on your device or access to information stored there in connection with YouTube content requiring consent is based on your consent in accordance with Section 25(1) of the TDDDG.
To the extent that personal data is processed when loading YouTube content, such processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may revoke your consent at any time with future effect via the BloxxStar privacy settings.
Google may also process personal data outside the European Union or the European Economic Area. In particular, data transfers to the United States may occur. Such transfers are subject to the applicable legal data protection requirements and the transfer mechanisms used by the provider.
For more information on the processing of personal data by Google and YouTube, please refer to Google’s privacy policy.
12. Instagram
BloxxStar uses links to Instagram and may embed content from the Instagram social network within the website.
The provider for users within the European Union is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
In the case of a simple link to Instagram, a connection to the platform is generally only established when you actively click on the corresponding link.
If Instagram content is embedded directly on BloxxStar, a connection to Meta’s servers may be established when this content is loaded.
In particular, your IP address, browser and device information, information about the page you visited, and other technical data may be processed.
If you are logged in to Instagram or another Meta service, Meta may, in some cases, associate information about your visit to the relevant page with your user account.
Embedded Instagram content is generally not loaded until you have consented to the loading of the corresponding external media. Before you give your consent, only a local placeholder is displayed; this display does not yet establish a connection to Meta.
The storage of information on your device or access to information stored there in connection with Instagram content requiring consent is based on your consent in accordance with Section 25(1) of the TDDDG.
To the extent that personal data is processed when loading Instagram content, such processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may revoke your consent at any time with future effect via the BloxxStar privacy settings.
Meta may also process personal data outside the European Union or the European Economic Area. In particular, data transfers to the United States may occur. Such transfers are subject to the applicable legal data protection requirements and the transfer mechanisms used by the provider.
For more information on the processing of personal data by Instagram and Meta, please refer to Meta’s privacy policy.
13. Other Social Media Presences and External Platforms
BloxxStar may operate its own accounts on social networks and other external platforms and provide links to these services from this website.
In the case of a simple link, a connection to the respective platform is generally established only when you actively click on the corresponding link.
When visiting an external platform, the privacy policy and terms of use of the respective platform operator also apply.
We generally have no direct influence over the data processing carried out by the respective platform operator after you leave BloxxStar.
To the extent that additional external content is embedded directly into BloxxStar in the future—and data may thereby be transferred to third-party providers as soon as the page loads—such integration will be implemented in accordance with applicable data protection requirements, and this Privacy Policy will be updated as necessary.
14. Transfer of Personal Data to Third Countries
When using certain external services, the processing of personal data outside the European Union or the European Economic Area cannot be ruled out.
This applies in particular to services provided by internationally active providers such as Google or Meta.
The transfer of personal data to a third country takes place only in compliance with the legal requirements of Articles 44 et seq. of the GDPR.
Depending on the specific recipient, such a transfer may be based, in particular, on an adequacy decision by the European Commission or on appropriate safeguards within the meaning of the GDPR.
To the extent that consent is required for a service, data will only be transferred after you have given your consent.
15. Retention Period
Unless a more specific retention period is stated in this Privacy Policy, we store personal data only for as long as is necessary for the respective purpose of processing.
Once the purpose of processing no longer applies, the relevant personal data will be deleted, provided that no statutory retention obligations, legitimate interests, or other legal grounds preclude such deletion.
If statutory retention obligations apply, the relevant data will be stored for the duration of the respective statutory retention period and subsequently deleted, unless another legal basis permits further storage.
16. Legal Bases for Processing
Depending on the nature and purpose of the respective processing, the following legal bases may apply in particular:
Art. 6(1)(a) GDPR – Processing based on your consent.
Art. 6(1)(b) GDPR – Processing for the performance of a contract or to take steps prior to entering into a contract.
Art. 6(1)(c) GDPR – Processing to comply with a legal obligation.
Art. 6(1)(f) GDPR – Processing based on legitimate interests.
Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG – to the extent that consent is required for accessing or storing information on your device.
Section 25(2) of the TDDDG—to the extent that the storage of or access to information on your device is strictly necessary to provide an expressly requested digital service.
17. Your Rights
You have the following rights in particular under applicable legal provisions:
Right to access the personal data processed about you pursuant to Article 15 of the GDPR.
Right to rectification of inaccurate personal data or to have incomplete personal data completed in accordance with Article 16 of the GDPR.
Right to erasure of your personal data pursuant to Article 17 of the GDPR, provided that the legal requirements for this are met.
Right to restriction of processing pursuant to Article 18 of the GDPR.
The right to data portability pursuant to Article 20 of the GDPR, provided that the legal requirements for this are met.
Right to object to certain processing activities pursuant to Article 21 of the GDPR.
Right to withdraw consent pursuant to Article 7(3) of the GDPR.
Withdrawal of consent takes effect for the future. The lawfulness of the processing carried out on the basis of consent up to the time of withdrawal remains unaffected.
18. Right to Object
If personal data is processed on the basis of Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing at any time on grounds relating to your particular situation.
We will generally no longer process the personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing for the purpose of such marketing.
19. Right to File a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the General Data Protection Regulation, you have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with a data protection supervisory authority.
This right applies in particular to a supervisory authority in the Member State of your habitual residence, your place of work, or the location of the alleged infringement.
The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
20. Automated Decision-Making and Profiling
BloxxStar does not currently engage in any decision-making based solely on automated processing, including profiling, as defined in Article 22 of the GDPR.
21. Changes to This Privacy Policy
BloxxStar is constantly evolving. New features, services, or changes in legal requirements may necessitate an update to this Privacy Policy.
We therefore reserve the right to amend this Privacy Policy if the services used, data processing, or the legal framework change.
The most recent version published on this website applies.
As of: August 2026