Data controller: Redwind BV (redwind.nl), publisher of Block #9. Privacy questions or requests: privacy@block9.net.
1. Who is responsible
Redwind BV is the data controller for data processed via Block #9. You can reach us at privacy@block9.net or through the contact page. We have no mandatory data protection officer; privacy requests are handled by the publisher.
2. Data we collect
- Account data: email address, password (encrypted), name if provided, language preference and creation date.
- Subscription data: plan (free, Pro, Coaching), start and renewal dates and payment status. We never see card details; those stay with our payment provider.
- Newsletter data: email address, chosen language, subscription moment and whether an email was opened or clicked.
- Usage data: pages visited, referrer, device type, anonymised IP address and error logs.
- Submissions: press releases, events, correction reports, contact and advertising requests including the content you enter.
- Preferences: saved articles, watch and listen history and portfolio settings when you use those features.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Creating an account and granting access | Account and login data | Performance of contract |
| Delivering and billing paid plans | Subscription and payment status | Performance of contract |
| Sending the newsletter | Email address, language, interactions | Consent |
| Improving the site and preventing abuse | Usage and error logs | Legitimate interest |
| Statistics and measurement | Visit behaviour via cookies or similar | Consent (non-essential cookies) |
| Handling questions, corrections and requests | Submissions and contact details | Legitimate interest |
| Legal obligations (e.g. accounting) | Invoice and payment data | Legal obligation |
4. Language preference and personalisation
When you create an account or subscribe, we store the language you signed up in so newsletters and service emails arrive in that language. You can change this any time in your account or via the preferences link in every email.
Reading behaviour is only used for on-site recommendations. We do not make automated decisions with legal effects and we do not profile you for third parties.
5. Retention periods
- Account data: for as long as your account exists, then up to 6 months in backups.
- Newsletter data: until you unsubscribe; after that we only keep an opt-out record so we do not email you again.
- Invoice and payment data: 7 years, statutory retention.
- Statistics: up to 26 months, aggregated or anonymised.
- Submissions and email correspondence: up to 24 months after handling, unless editorial archiving is needed.
6. Who processes your data
We use service providers acting solely on our instructions under a data processing agreement: hosting and database, email delivery, payment processing, analytics and, for the trading hub, the executing transaction partner.
For the trading hub the executing partner is an independent controller for the identification and transaction data you provide there; their own privacy policy then applies.
We never sell personal data and do not share it with advertisers.
7. Transfers outside the EU
We prefer processing inside the EU. Where a provider processes data outside the EEA, this is based on an adequacy decision or the European Commission's standard contractual clauses, with additional technical measures where needed.
8. Security
Traffic runs over TLS, passwords are stored hashed and access to production data is limited to authorised people. We apply rate limiting and abuse detection on login, password recovery and forms. In case of a data breach with risk to individuals we notify the supervisory authority within 72 hours and, where required, you directly.
9. Your rights
- Access to the data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your account and data.
- Restriction of, or objection to, processing based on legitimate interest.
- Portability of the data you provided yourself.
- Withdrawal of consent, for example for the newsletter or cookies, without affecting earlier processing.
Send a request to privacy@block9.net. We respond within 30 days. If you are unsatisfied, you can complain to the Dutch Autoriteit Persoonsgegevens or the Belgian Data Protection Authority.
10. Children
Block #9 is not aimed at people under 18 and does not knowingly collect data from minors. If this happened anyway, let us know and we will delete the data.
12. Changes
We may update this policy when services or regulations change. For material changes we inform account holders by email or through a notice on the site. The version date at the top indicates the applicable version.