Privacy and Cookie Policy

This Privacy and Cookie Policy (“Privacy Policy”) govern your access to and use of this Website, (the “Website”), and associated content, software, and mobile applications (collectively, the “Service”). This Privacy Policy also includes our Terms of Use and Disclaimer.

Blockchain Finance AG (“Blocksnip” or “us”, “we”, or “our”) operates the website (“Website”) and social media sites and public messenger channels (“Social Media Pages”) (the “Service”).

When you use our Service, we obtain certain Personal Data that can be used to contact or identify you. Personal Data are any information related to an identified or identifiable natural person (“Data Subject”). Such Personal Data may include your e-mail address, name or other Personal Data you upload to the Website or communicate on the Social Media Pages. This Privacy Policy informs you about the collection, use and disclosure of information that directly or indirectly identifies you (“Personal Data”) when you use our Service.

This Privacy Policy governs the processing that is being conducted by us in the context of providing our Service to persons in the EU which are governed by the EU General Data Protection Regulation (GDPR). For Swiss or non-EU customers only the provisions of the Swiss Federal Data Protection Act are applicable.


Blockchain Finance AG
Fluhmattweg 5,
6004 Luzern/Switzerland,


For further information you may contact us any time, for example via e-mail to

Use of personal data

We process your Personal Data for the following purposes:

– providing the Website and Service,
– answering and reacting to any communication or requests provided to us,
– addressing and performing the application process,
– complying with our legal obligations,
– enforcing our legal rights,
– marketing our Service to potential and existing customers,
– optimizing the user’s experience via cookies tracking

Legal basis for data processing

The legal basis for data protection are contained, in the Swiss Data Protection Act (DPA) or for natural persons based in the EU, the General Data Protection Regulation (GDPR).

We process Personal Data under the following grounds and applicable legal basis.

For the safeguarding of our and third-party legitimate interests

In order to safeguard our legitimate interests and those of third parties, we also process your Personal Data for the following purposes:

– to manage risks;
– to assert legal claims and enable defence in legal disputes;
– to prevent violations of the law;
– to ensure IT security and IT operations;
– to take measures to ensure the security of our systems;
– to take measures for business management purposes and for the development and marketing of services and products; and
– to provide tailored customer service.

For the fulfilment of contractual obligations

Your data will be processed to provide our Services and related ancillary services as part of the execution of our contracts with you. The purposes of data processing are based primarily on the specific service requested.

On the basis of your consent

Provided your consent has been given, by accepting the Terms of Use or this Privacy Policy, we are legally permitted to process your Personal Data for specific purposes. You can withdraw this consent at any time. Please note that the withdrawal of consent has no retroactive effect on the use of your data.
Consent is also often required for sending you newsletters such consent is deemed given, by accepting the Terms of Use or this Privacy Policy. This consent can be withdrawn at any time by clicking the unsubscribe link at the bottom of any newsletter.

On the basis of statutory requirements or in the public interest

We are subject to various national and international regulatory obligations under which we are required by law to carry out certain processing.

Data processing outside the EU

We process your Personal Data in Switzerland, the EU/EEA (EU) and the USA. In order to carry out transfers to third countries we adhere to the requirements as set out in Article 46 GDPR by ensuring appropriate safeguards are implemented.

Data security

We have implemented technical safeguards for processing your Personal Data according to applicable law. For the best possible security of your Personal Data, our Service through the Website is provided via a SSL connection between your server and the browser. That means that the data shall be transferred in encrypted form. Further details of these technical and organizational measures are available upon request.

Contact form or other contact

If you send us any requests via the online contact form or send us an e-mail or otherwise contact us, your details in this online form or request, including the contact data, name, e-mail address and other data provided respectively, are processed by us in order to deal with your inquiry or to be able to contact you at a later time for follow up questions. These data are processed only on the basis of initiating a business relationship or performing our contractual obligations (legal basis Art. 13 (2) a. DPA or Art. 6 (1) b. GDPR).

Log Data

Every time you access our website, usage data is transmitted through your internet browser and saved in log data (server log files). This data includes e.g. name of the page accessed, date and time of access, amount of data transferred and the requesting provider as well as IP addresses. This data is processed on the legal basis of our legitimate interests and serves exclusively to guarantee the trouble-free operation of our website, security of our servers and to improve our offer.

Third party service providers

We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are contractually obligated in accordance with the processor requirements in Article 28 GDPR.

These processors include:

– Server providers
– Analytics providers
– Marketing agencies and marketing service providers
– Newsletter providers
– Accounting services providers
– IT service providers

Google Analytics

We use Google Analytics, a web analysis service provided by Google, Inc (hereinafter referred to as “Google”). The information collected by Google Analytics is transmitted to and stored with Google. Google may transmit the information collected by Google Analytics to the third parties as required by the law or when those third parties process the information in the name of Google.


We use the email subscription service Mailchimp to collect email signups via our newsletter subscription field and to send out newsletter to our users. Mailchimp only collects your email address if you enter it into the textbox and click “Subscribe”. You can unsubscribe to the newsletter at any time by clicking on the unsubscribe link that is contained in the footer of every newsletter.


Blocksnip publishes its own newsletter in order to provide up-to-date information about our products and services. We send the newsletter after you subscribed to our newsletter by entering your e-mail address in the newsletter field.

We use the provider Mailchimp to send our newsletter. Mailchimp is an online marketing platform operated by The Rocket Science Group LLC, a company headquartered in the State of Georgia in the United States

The data required to provide you with the newsletter that was provided during the newsletter registration will be transmitted to Mailchimp, which will store it. The data entered during registration will not be transferred to other third parties. Furthermore, Mailchimp offers various ways to analyze how the newsletter is opened and used once it is sent, e.g. to how many users an email will be sent, whether mails were rejected and whether users unsubscribed from the list after receiving an email. However, these analyses are performed on groups and we do not use them for individual analysis.

The data processing for sending the newsletter is based on your consent (legal basis Art. 6 (1) a. GDPR). The analytics is based on our legitimate interest in reducing costs by deleting users which do not view our newsletters and ensuring the content of our newsletters are relevant to the recipients thus reducing the amount of unwanted content.

If you purchase goods or services from us, we may in future send you information E-Mails for similar goods or services. Data processing will be based on the business relationship with you (Art. 6 (1) b. GDPR and carried out in accordance with the requirements of your local competition law as it related to newsletters.


You can unsubscribe to the newsletter at any time by clicking on the unsubscribe link that is contained in the footer of every newsletter.

Data processing on our social media pages

We operate the following Social Media Pages on the following networks (“Social Media”):

– Twitter: by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, please also refer to, Opt-out:;

– Telegram: and mobile APP by Telegram Messenger Inc. and Telegram UK Holdings Ltd., C/O Skadden, Arps, Slate, Meagher & Flom (UK) LLP, 40 Bank Street, London, United Kingdom E14 5DS, UK please also refer to

– LinkedIn: or linkedin mobile app by LinkedIn. LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, please also refer to / Opt-out:

– Facebook: by Facebook Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland. Please refer to the Privacy Policy of Facebook: Facebook privacy policy

– Instagram: Facebook Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland. Please refer to the Privacy Policy of Facebook & Instagram product:[0]=Instagram-Hilfebereich&bc[1]=Privatsph%C3%A4re%20und%20Sicherheit

– Youtube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Please refer to the Privacy Policy of Google:

When using Twitter, Telegram, LinkedIn, Facebook or any other social media site, data may also be processed outside the EU. Please read the privacy policy and the safeguards on data transfer of each provider before signing up to the services.

With our Social Media Pages, we can communicate with you and provide you with interesting information. We may receive further data from you through your comments, shared images, messages and reactions, which we then process to answer or communicate with you. If you use Social Media on several end devices, a cross-device analysis of the data can take place.

Furthermore, the providers of the Social Media Pages may also use cookies and tracking technologies to analyze and improve their services.

Data processing takes place with your consent or for the purpose of answering your enquiry (Art. 13 (1) DPA or Art. 6 (1) a., b. GDPR) or on the basis of legitimate interests in improving the services and presentation to the outside world (Art. 13 (2) DPA or Art. 6 (1) f. GDPR).

By signing up for any of the above services you have consented to the processing by the service provider as set out in the terms of services.

Information on our Facebook pages

As controllers within the meaning of the EU General Data Protection Regulation, we and:

Facebook Ireland Ltd. (hereinafter “Facebook”)
4 Grand Canal Square
Grand Canal Harbor Dublin 2

operate webpages to draw attention to our products and services and to contact you as a visitor and user of our Facebook page and our website.

As the operator of the Facebook pages, we have no interest in the collection and further processing of your individual personal data for analysis or marketing purposes. The operation of the Facebook page, including the processing of personal data of the users is based on our legitimate interests in an efficient information and interaction with our visitors (Art. 6 (1) f. GDPR).

Processing of personal data by Facebook

According to Facebook, your data will be used for the following purposes:
– Advertising (analysis, creation of personalized advertising)
– Creation of user profiles
– Market Research
Facebook uses cookies for storage and further processing of this information, which is stored on the various user terminals. The storage and analysis are also cross-device.

The Facebook privacy policy contains more information about data processing.

Facebook Inc., the US parent company of Facebook Ireland Ltd. is certified under the EU-US. Privacy Shield.

As the person responsible, Facebook is not bound by our instructions, but processes your personal data independently. Due to the continuous change of the Facebook platform, we ask you to consult the current Facebook privacy policy (see link above).

Our use of statistical data

Statistic data are available to us via the so-called “Insights” of the Facebook pages. These statistics are generated and provided by Facebook. We have no influence on the production and presentation as operator of the site. We cannot disable this feature or prevent the generation and processing of the data. For a selectable period, as well as for the categories including fans, subscribers, reached persons and interacting persons, we will be provided with the following data on our Facebook page:

Total number of page views, likes, page activity, post interactions, reach, video views, post coverage, comments, shared content, answers, percentage of men and women, country and city origin, language, views, and clicks in the shop, clicks on route planner, clicks on phone numbers. Likewise, data is provided in this way for the Facebook groups linked to our Facebook pages.

We use this aggregated data to make our posts and activities on our Facebook pages more attractive to users. According to the Facebook Terms of Service, we can identify the subscribers and fans of the site and view their profiles and other shared information.

Rights of the user

Since only Facebook has full access to the user data, we recommend that you contact Facebook directly if you would like to request information or to ask other questions about your rights as a user (for example, the right to delete). If you need assistance or have any other questions, feel free to contact us at the contact details provided in this privacy policy.

If you no longer want your data to be processed as described here, please use the “I do not like this page” function to unlink your user profile from our site.

Your rights under GDPR

In certain circumstances, you have the following rights relating to your Personal Data (Art. 13-22 GDPR):

– To request access to your Personal Data. This is to enable you to receive a copy of the Personal Data we hold about you and to check that we are processing it lawfully.
– To request correction (rectification) of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
– To request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data in certain circumstances. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to processing (see below).
– To object to processing of your Personal Data where we are relying on the public interest or our legitimate interests (or those of a third party) or processing your data for direct marketing purposes.
– To request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you: for example, if you want us to establish its accuracy or that it is being properly used by us. This means that it can only be used for certain limited purposes, such as dealing with legal claims or exercising our legal rights. In this situation, we would not use or share your information in other ways while it is restricted.
– To request the transfer of your Personal Data to another party where we process it based on your consent and the processing is carried out by automated means.
– To withdraw any consent you have given, allowing us to send marketing communications to you or collect or use your Personal Data in any other way.

Please note that exercising some of these rights may mean that we are unable to provide our services to you because some of the information is necessary for some services. In other cases, it may mean that we are providing services based on incomplete information, which may result in those services not meeting your needs or expectations.

Furthermore, you have the right to lodge a complaint with the competent supervisory body (Art. 77 GDPR).

Storing and deleting your personal data

The Personal Data are deleted if you withdraw your consent and/or such Personal Data are no longer necessary for the purpose of processing. Specific deletion periods are set out in this Privacy Policy referring to the specific data or are implemented by us according to the following measures: Settings and measures provided by the engaged third party providers, affected interests by the data subjects, our legitimate interest of deleting data in an economical way etc. Furthermore, we store your Personal Data if we are obliged to do so in accordance with legal retention periods applicable under commercial and tax law.