Jump to content

Privacy Policy

opentype.space (“the controller”) is a web service owned and managed by Schriftkontor Ralf Herrmann. It is hosted in Germany with the hosting Provider Mittwald. opentype.space processes information of guests and registered members henceforth referred to as users (“the data subjects”). The user data is processed at the server level (e.g. server logs) as well as the content management software level, where data is stored in a relational database. The details are described below.

Access Logs

The hosting provider logs any page view activity of users containing information like time, IP adddress, the page being viewed, http status codes, referrer and user agent. This data is necessary to guarantee that the service is running as expected and identify problems i fit doesn’t. The IP addresses in the access logs are stored anonymously by being truncated and they are removed completely after 60 days. Error logs are removed after 7 days. Logs for web mails are stored anonymously (by removing sender and receiver) after 24 hours and removed after 60 days. Mail logs for the mail server are deleted after 4 weeks.

Cookies and Embedded Content

opentype.space makes use of cookies, but only sets functional cookies to make the use of the website possible (e.g. session cookies) or to improve the usage (e.g. by storing user settings for easy access). A detailed description of our cookies can be found on this page: https://opentype.space/cookies/

opentype.space does not use cookies which track the user’s activity for statistical purposes (e.g. Google Analytics, Facebook Pixel) or for advertising purposes. 

Users and administrators might embed content from external sources into their posts. For example: videos from YouTube and Vimeo, images from sites like Flickr, maps from providers like Mapbox and so on. Keep in mind that those services can also set cookies and track user data like IP addresses. 

Captcha

Registrations and guest posts are are protected from spam using Google’s Invisible Captcha. The use of reCAPTCHA is subject to the Google privacy policy and terms of use.
Personal Data collected: Cookies and usage data. Place of processing: United States.

User Registration

In order to post on opentype.space, users need to register an account. The data will be stored on the web server. opentype.space only collects as little information as necessary. The only personal data required is a correct and permanently used email address. The address is neccessary to verify the account and to regain access once a user looses the password accociated with the account. In addition, users can add more personal information, e.g. their real name as their display name. This is optional and can be changed at any time.

A full address is required once a user makes a purchase in our shop. In this case, the address is necessary to calculate tax, verify the purchase and as proof of the purchase for governmental bodies. Data related to purchases will be stored for 10 years to comply with governmental requirements.

User registration data is never passed on to third-parties, unless it is techically required, e.g. spam services.

User Activity

In addition to the server log files, the content management software also logs user activity in order to make it possible to prevent spam, fraud, harassment, trolling, hacking attempts and similar issues.

Posts made on the community website will save the IP address, which was used while posting. This data will be removed from the posts after 3 years.

The content management system will also log login information, which includes the IP address, an estimate of the user’s location and information about their devices. This is necessary for the user and the admin to identify hacking attemts and similar issues.

To comply with GDRP rules, the content management system will also log when consent is given or removed, e.g. agreeing to the terms, subscribing to the newsletter and so on.

Right to be Informed and Data Portability

The data described under User Registration and User Activity can be requested free of charge as human- and machine-readable XML file. The data will be provided within 7 days. opentype.space might demand verification for each request, so personal data is not send to anyone but the user itself.

Right to Lodge a Complaint

Every user has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the user considers that the processing of personal data relating to him or her infringes the General Data Protection Regulation.

Right to Restriction of Processing

The user has the right to restrict the processing of the personal data, e.g. while contested data is being verified; if the data might have been collected unlawfully; or if the deletion needs to be prevented in order for the data to be available for a legal defense.

Right to Object; Right for Data Correction and Right to be Forgotten

To allow the registered member a permanent use of our community website, the email address and optional personal information added to the account will be stored as long as the user does not change or remove the data. The user can change the information at any time, delete optional information, ask administrators of opentype.space to change or delete personal information or to stop specific data use. To object to any data use, the user can permanently delete the account. Account deletions are processed manually and usually performed within 48 hours.

Automated Decision-Making and Profiling

opentype.space does not process personal data in a way that would qualify as automated decision-making, including profiling.

Newsletter and Notifications

Registered users are in full control regarding notifications and emails received from opentype.space. The settings can be changed at any time here: https://opentype.space/notifications/options/

When users are unable to change the settings themselves (e.g. because they can’t log in), they can also request that the settings are changed for them.  

Third Parties

Google Analytics
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this website, to prepare reports on its activities and share them with other Google services.
hCaptcha
We use the hCaptcha anti-bot service (hereinafter "hCaptcha") on our website. This service is provided by Intuition Machines, Inc., a Delaware US Corporation ("IMI"). hCaptcha is used to check whether the data entered on our website (such as on a login page or contact form) has been entered by a human or by an automated program. To do this, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be forwarded to IMI. hCaptcha analysis in the "invisible mode" may take place completely in the background. Website or app visitors are not advised that such an analysis is taking place if the user is not shown a challenge. Data processing is based on Art. 6(1)(f) of the GDPR (DSGVO): the website or mobile app operator has a legitimate interest in protecting its site from abusive automated crawling and spam. IMI acts as a "data processor" acting on behalf of its customers as defined under the GDPR, and a "service provider" for the purposes of the California Consumer Privacy Act (CCPA). For more information about hCaptcha and IMI's privacy policy and terms of use, please visit the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.
×
×
  • Create New...

Important Information

We are using functional cookies