Privacy Policy
A. Controller responsible for data processing
The controller responsible for data processing on this website is:
blomus GmbH
Mescheder Straße 24
D-59846 Sundern
Phone: +49 (0)2933 831-600
Fax: +49 (0)2933 831-201
Email: support@blomus.com
B. Contact details of our data protection officer
You can reach our data protection officer at
Data Protection Officer of
blomus GmbH
Mescheder Straße 24
D-59846 Sundern
E-mail: datenschutz@blomus.com
C. Operation and hosting of our website
Our website is operated and managed by us. All data processing in connection with the use of our website is carried out by us. The technical provision and connection of the website to the Internet is carried out by a hosting service provider whose server locations are within Germany.
D. Overview of our data processing
We process data in the following contexts:
When you make a purchase from us, we process data about you that is necessary for the establishment and fulfilment of a purchase contract (‘contract fulfilment’) (for details, see E. below);
When you access and browse our website (‘website use’), we process data from and on your end device, some of which may enable us to identify you personally (for details, see F. below). );
Finally, we process your data if you wish to contact us (‘communication’), for example by subscribing to our newsletter, rating an article or sending us a message via the communication channels provided by us (for details, see G. below).
E. Contract fulfilment
I. General information on data processing
As part of your purchase in our online shop, we ask you to provide the following personal details:
- First name;
- Last name;
- Billing/delivery address;
- E-mail address;
- Bank details or credit card details.
II. Scope and purposes of processing
The personal data requested from you will be processed by us for the following purposes:
to send you the confirmation of receipt and, if applicable, the order confirmation with the legally required information as well as status reports on the dispatch of the ordered goods;
- to process your payment;
- to send you the invoice for an order;
- to deliver the ordered goods to you and,
if applicable, to assign cancellations, complaints and other post-contractual enquiries from you to your person and order and to be able to process your request.
If you have voluntarily created a customer account under "My customer account - Register now", we will also process this data in order to register you as a blomus customer for future potential visits or purchases in our online shop, so that you do not have to re-enter this data required for the fulfilment of the contract with each new order and can view purchases already made in your customer account at any time. After registering, you can also save products from our online shop as favourites in your customer account so that you can buy them later if necessary.
III. Payment processing
Payment is processed by the payment service provider Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, The Netherlands. Mollie enables the technical processing of the following payment methods:
- Credit and debit cards (Visa, Mastercard, American Express)
- PayPal
- Klarna (purchase on account, hire purchase)
- Instant bank transfer
- SEPA direct debit
Mollie processes your payment data exclusively for processing the payment in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on to the respective payment providers to the extent necessary for processing.
If you select a specific payment method (e.g. PayPal, Klarna, etc.), you may be forwarded to the respective provider, whose data protection provisions then also apply. Information on their data processing can be found in the privacy policies of the respective providers.
Your means of payment will be debited immediately after completion of the order, unless otherwise stated. In the case of bank transfer and SEPA direct debit, dispatch will only take place after receipt of payment. To ensure the fastest possible processing and delivery, please make the transfer immediately after completing your order.
If you have any questions regarding payment processing, please contact our customer service or the respective payment provider directly.
IV. Storage period
If you do not create a customer account, your data will be blocked after fulfilment of the individual purchase contract, i.e. it will only be processed by us to a limited extent. On the one hand, this is necessary in the event that you assert claims against us within the statutory limitation periods (usually three years), which we must assign to your person and the business transaction with you. Secondly, we are obliged under commercial and tax law to retain business documents that may contain your data for a maximum period of ten years. As soon as these purposes have been fulfilled or the deadlines have expired, we will delete your data.
If you have voluntarily created a customer account, we will process your data in it until you ask us to delete the customer account.
V. Legal basis for processing
The data processing takes place because it is necessary for the fulfilment of the contract (Art. 6 para. 1 b GDPR).
In some cases (sending a confirmation of receipt and notification of mandatory information in distance selling), it is also carried out to fulfil a corresponding legal obligation to which we are subject.
If you have created a customer account, we also process your data on the basis of your consent given to us at the same time (Art. 6 para. 1 a GDPR).
VI Right of cancellation
You can revoke your consent to data processing in the context of managing your customer account at any time with effect for the future by notifying us at one of the contact addresses listed above under A. We will then delete your customer account. We will then delete your customer account.
F. Website use
Each time you visit our website, we process certain personal data from and in some cases also on your computer/end device. This data processing can be divided into the following categories:
- Logging of your visit/use of functional cookies (for details, see I. below)
- Website usage analysis with Google Analytics (for details, see II. below)
- Use of tracking technologies for interest-based internet advertising (for details, see III. below)
- Data processing when using the social media fan pages (for details, see IV. below)
- Data processing for advertising purposes (for details, see V. below)
- Data processing for Participation in competitions (for details, see VI. below)
- Integration of Adobe Typekit (for details, see VII. below)
- Integration of the MyFonts counter (for details, see IX. below)
- Integration of Vimeo videos (for details, see X. below)
I. Logging of your visit/use of functional cookies
1. general information on data processing
The following log data is automatically processed by us every time you visit our website and every time you download a file from one of our websites:
- Host name of your computer/terminal device (IP address);
- Date and time of access/download;
- The page accessed;
- If applicable, the name of the downloaded file;
- Browser type used;
- Operating system of your terminal device;
- The website from which you visit us.
In addition, we use functional cookies for the operation of our website. These are small text files that we store on your computer/device. On the one hand, these are so-called session cookies, which are only set for the duration of your visit to our website. Secondly, so-called persistent cookies are used. They remain on your computer/end device for longer. Both types of cookie contain a characteristic alphanumeric character string which, in the case of persistent cookies, can enable your browser to be recognised on a subsequent visit to our website.
2. scope and purposes of processing
The data is processed by us for the following purposes:
- to identify and defend against attacks on our website;
- to determine whether your internet browser supports cookies;
- to prevent you from being shown pop-ups more than once;
- to show you the selected language of our website and
- to show you the version of our website for the delivery country you have selected.
3. data transfer/recipients
Recipients of your data are the technical operator and the hosting service provider of our website (see above under C.).
4. storage duration
The data is stored for the following duration:
- log data: until the purpose is achieved, maximum three months;
- session cookies: until you leave our website;
- persistent cookies: one year.
5. legal basis for processing
The data processing is based on our interest in the functionality and security of our website. According to our assessment, this legitimate interest is not overridden by the interests or fundamental rights and freedoms of data subjects (Art. 6 para. 1 f GDPR). We will provide you with further information about our balancing of interests on request.
6. right to object
You have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can submit your objection to us using the contact details provided under A. above. Alternatively, you can use the settings of your internet browser to control whether or which types of cookies may be set. If you do not accept the use of functional cookies, this may limit the functionality of our website.
II. Website usage analysis with Google Analytics
1. general information on data processing
Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited (‘Google’).
Google uses cookies. These are text files that are stored on your computer/end device and enable your use of our website to be analysed. The following information is processed:
· Browser type
· Operating system
· last visited website
· Host name of your computer/end device (IP address, shortened)
· Time of the request on our server
Google Tag Manager
We use the Google Tag Manager service from Google. Tags are small code elements on our websites that are executed upon certain interactions with the website and send measured data to the 3rd party programmes used (e.g. Google Analytics). The Tag Manager itself does not use cookies and does not collect any personal data. The Tag Manager triggers other tags, which in turn may collect data and set cookies (e.g. the 3rd party programmes used). The Tag Manager does not access this data. The legal basis is § 25 para. 2 no. 2 TDDDG.
2. scope and purposes of data processing
On our behalf, Google will process the information collected via the cookie to analyse your use of our website in order to compile reports on website activity. We do not process any data that could be used to identify you. In particular, the cookie does not contain a user ID. The abbreviated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
3. data transfer/recipients
The information generated by the cookie about your use of our website is transferred to Google Ireland Limited and, as a rule, also to a server of the associated Google LLC in the USA and stored there. The transfer takes place on the basis of standard data protection clauses of the EU Commission. By deactivating the user ID function and activating IP anonymisation (shortening the IP address by the last octet), the data can no longer be assigned to your connection or computer/terminal device.
4. storage period
The processed data is stored for a period of 14 months and then deleted by Google.
5. legal basis for processing
The processing is based on your consent (Art. 6 para. 1 a GDPR).
6. right of revocation
Your consent is valid until revoked, which you can declare at any time with effect for the future. You can prevent the collection of data generated by the cookie and related to your use of the website related data and their processing by moving the slider for analysis after clicking on ‘Cookie settings’ in the cookie banner or at the top of this page from right (green) to left (grey) or by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Finally, it is possible to send your cancellation to one of our contact addresses listed above under A. or to prevent the setting of cookies in your browser settings. If you do not accept the use of functional cookies, this may limit the functionality of our website.
III. Use of tracking technologies for interest-based internet advertising
1. general information on processing
If you have given us your consent to do so when you visit our website, we use tracking technologies such as cookies or tracking pixels from third-party providers for interest-based internet advertising.
‘Tracking cookies’ are text files that are stored on your computer/end device. ‘Tracking pixels’ are small graphics in the header of our website. Both technologies make it possible to recognise your browser on other websites. Specifically, we use the following tracking technologies from the following third-party providers to process the following information:
Google AdWords Remarketing from Google Ireland Limited (Google):
· Browser type
· Operating system
· Preferred language
· Visit to our website including date and time
· Last Google search query including date and time
· Host name of your computer/terminal device (IP address, shortened)
· Alphanumeric user ID
We record the granting of your consent in a log file. The following information is processed:
· Host name of your computer/terminal device (IP address);
· Consent text;
· Activation of the ‘Agree’ slider;
· Date and time consent was granted (time stamp).
2. scope and purposes of processing
Tracking technologies from Google are used by us to recognise your browser on the basis of the logged data mentioned above under 1. in the case of Google on other websites and to present you with advertisements from us there that are based on your presumed interests. Your presumed interests are derived from a pseudonymised profile.
derived. The pseudonymous profile is created from the information that is collected about your internet usage behaviour with the help of the respective cookies/pixels. If, for example, you have shown an interest in certain products on our website, we can also present our products of this type to you on their associated websites by using the aforementioned third-party cookies. This also generally serves to prevent advertising that is annoying because it is inappropriate and not in line with your interests.
You can find out the categories according to which interest-based advertising is shown to you in the Google Display Network by clicking on the i button next to the advert or on the Google page ‘Why am I seeing this advert?’. Further information on data processing by Google can be found here.
Your consent is logged so that we can prove it.
3. data transfer/recipient
The recipient of the data is Google Ireland Limited and its affiliated Google LLC in the USA. The transfer takes place on the basis of standard data protection clauses of the EU Commission.
4. storage period
You can check the duration of the respective cookie storage and thus the processing of your data for the above-mentioned purposes in the security settings of your browser. The log data on your consent will be stored by us until revoked and then kept by us for the duration of the limitation period of your claims (three years) plus a security surcharge of one month for judicial service, i.e. a total of 37 months.
5. legal basis for processing
Data processing is based on your consent (Art. 6 para. 1 a GDPR).
6. right of revocation
Your consent to the use of tracking cookies for interest-based advertising is valid until revoked, which you can declare at any time with effect for the future, for example as follows: You can prevent the use of tracking cookies for interest-based advertising in the Google Display Network by moving the slider for marketing from right (green) to left (grey) after clicking on ‘Cookie settings’ in the cookie banner or at the top of this page, or by moving the slider for ‘Personalised advertising on the web’ and/or for ‘Personalised advertising in Google search’ from left to right in the Google settings for advertising. You can find out how to block adverts or individual advertisers separately here. You can also control whether tracking cookies are stored at all via your browser settings by rejecting website-wide tracking.
Google Ads Customer Match
We use Google Ads Customer Match lists as part of our Google advertising activities. We use Google Ads Customer Match either with your consent or on the basis of our legitimate interest pursuant to Art. 6 (1) (a) + (f) GDPR. For the use of Customer Match, lists containing encrypted user data (e.g., names, email addresses, postal addresses, mobile advertiser IDs, customer-specific identifiers) are uploaded to Google. Google then checks whether the transmitted user data matches existing Google customers. This can be used to create target groups for delivering ads/campaigns. After the Customer Match lists are created, the encrypted customer data is automatically deleted. This process does not provide the providers with new addresses.
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor. For this purpose, we have entered into a data processing agreement with Google. Google LLC, based in California, USA, has joined the EU-U.S. Data Privacy Framework and is accordingly certified.
You may object to this use by preventing the installation of cookies through the appropriate settings in your browser software (deactivation option). You can also adjust personalized advertising in your Google account under the Privacy tab according to your preferences. To do this, log in to Google and go to "Manage your Google Account" in the "Data and Privacy" section.
IV. Data processing when using the social media fan pages
Blomus is active and present within social networks and platforms in order to communicate with interested parties and users and to inform them about further Blomus offers. Below we provide you with an overview of the processing and use of your personal data when you visit our social media accounts:
1. Facebook & Instagram
We operate ‘fan pages’ on the social networks of “Facebook” and ‘Instagram’ in joint responsibility with Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, in order to communicate with followers (such as our customers and interested parties) and to inform them about our products, competitions and other promotions.
With the help of meta statistics on the use of our ‘Fanpages’ (e.g. information on the number, names, interactions such as likes and comments as well as summarised demographic and other information or statistics; ‘Insights data’), we receive information on how our ‘Fanpage’ is used, what interests the visitors to our “Fanpages” have and which topics and content are particularly popular, so that we can optimise our ‘Fanpage content’ and adapt it to our users' interests. The Insights data only contains statistical, depersonalised information about visitors to the fan page, which therefore cannot be assigned to a specific person. You can find more information on the type and scope of these statistics in the meta page statistics notes. Further information on the respective responsibilities and the processing of your data by Meta can be found at: https://www.facebook.com/legal/terms/information_about_page_insights_data, https://help.instagram.com/1533933820244654.
Please note that we have no influence on the data processing carried out by Meta under its own responsibility in accordance with the terms of use of Facebook and Instagram. However, we would like to point out that when you visit the ‘Fanpages’, data on your usage behaviour is transferred from Facebook/Instagram and the ‘Fanpages’ to Meta. Meta itself processes your personal data in order to compile the aforementioned statistics and for its own market research and advertising purposes. We have no access to this data.
Insofar as we receive your personal data when operating the fan pages, you are entitled to the rights mentioned in this privacy policy. If you wish to assert your rights against Facebook beyond this, you can also contact Facebook directly. We will be happy to support you in asserting your rights as far as possible and forward your enquiries to Meta.
The legal basis for this data processing is Art. 6 para. 1 f) GDPR based on our aforementioned legitimate interest in being able to provide you with our Facebook ‘Fanpages’ for marketing and advertising purposes.
You can find more information on this in Meta's privacy policy at: https://de-de.facebook.com/policy.php/.
2. TikTok
We publish short video clips (so-called ‘Reals’) on the ‘TikTok’ platform and in the TikTok app to advertise our products and our online shop. If you visit the TikTok website or app, TikTok Inc, 10100 Venice Blvd, Culver City, CA 90232, USA (‘TikTok’) collects and processes your personal data.
TikTok makes a certain part of this data available to the owners of TikTok profiles in anonymised and aggregated form. This is the number of new followers, demographic data such as gender and country, without reference to identifiable persons. Blomus is therefore unable to identify any visitor to the TikTok profile. As the owner of this profile, Blomus also receives anonymised statistical data (so-called ‘Insights data’) from TikTok. This data cannot be used to draw any conclusions about the respective visitor. The data contained in the statistics is used by us exclusively to analyse user behaviour so that we can better tailor our TikTok profile and our offer to the needs and interests of visitors.
The use of your data transmitted to us by TikTok is based on our legitimate interest in accordance with Art. 6 para. 1 f) GDPR to carry out data analyses and to statistically record the use of our TikTok profile, to optimise our offer for you, to market our posts and videos on our website and to continuously improve and manage our offer and our products.
Further information on data processing by TikTok can be found in TikTok's privacy policy at: https://www.tiktok.com/legal/privacy-policy?lang=de.
3. Pinterest
We operate a Blomus account on the ‘Pinterest’ platform and in the Pinterest app on which we publish inspiration on home & living topics and advertise our products. Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA (‘Pinterest’) is responsible for the Pinterest services.
When you register an account, Pinterest processes the data you provide, e.g. your name, email address, telephone number, photos, pins and comments. In addition, Pinterest collects and processes your IP address, which is used to approximate your location if you choose to provide your exact location, as well as other internet and electronic network activities (including which ‘pins’ you click on, which ‘boards’ you create and which text you add in a comment or description).
The legal basis for this data processing is Art. 6 para. 1 f) GDPR based on our legitimate interest in being able to provide you with our Pinterest platform for marketing and advertising purposes.
You can find more information at https://policy.pinterest.com/en/privacy-policy.
4. LinkedIn
We regularly publish posts about our company, our products and current developments on the LinkedIn platform and use LinkedIn as a communication channel to interact with customers, business partners and interested parties.
When you visit the LinkedIn website or use the LinkedIn app, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (‘LinkedIn’) collects and processes your personal data. This may include IP addresses, browser information, location data, interactions with posts or profile views.
LinkedIn provides us, as the owner of a LinkedIn company profile, with some of this data in anonymised and aggregated form – such as demographic information about our followers (e.g. industry, position, company size or location), interactions with posts or the number of new followers. This data does not allow any conclusions to be drawn about individual persons.
blomus also receives so-called ‘LinkedIn Page Insights’ – anonymous statistical data about the use of and interaction with our LinkedIn presence. We use this information exclusively to analyse user behaviour, optimise our LinkedIn presence and better tailor our content to the interests of our target group.
This data is processed on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR – in particular for the external presentation of our company, for communication with users and for the analysis and improvement of our offering on LinkedIn.
Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy
V. Data processing for advertising purposes
1. Sending of promotional e-mails
If you have given your consent, Blomus will regularly send you the Blomus newsletter by email to inform you about the latest trends in home & living and must-have home & living styles (“newsletter”).
In addition, subject to your consent, you will receive notifications from us by email about personal benefits, such as vouchers or special promotions, reminders about products in your shopping cart, reviews of Blomus products you have purchased, and opinion surveys regarding Blomus or Blomus services (“Notifications”). You can find details on this in section 6.1.1.
If you have already purchased a product or service from us and have not objected to receiving it, you will also receive advertising emails from us about similar products and/or services by email.
We use the Mailgun service provided by Mailgun Technologies, Inc., 112 E Pecan St. #1135, San Antonio, TX 78205, USA, to send the aforementioned emails. We have concluded a data processing agreement (DPA) with Mailgun. This is a contract required by data protection law that ensures that Mailgun processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Further information on the processing of your personal data by Mailgun can be found at https://www.mailgun.com/de/dsgvo/. Mailgun is used exclusively for the technical delivery of our emails. We do not store any personal data permanently with Mailgun, but only transmit the information necessary for sending, which is automatically deleted after delivery.2. Sending of advertising e-mails based on your consent
If you have given your consent on our website by ticking a checkbox, we will send you newsletters and/or notifications by e-mail.
Please note, however, that we will only send you newsletters and/or notifications by email if you have previously confirmed that you wish to receive the relevant emails by clicking on a button. We will send you the relevant button in a notification email to the email address you provided after receiving your consent (so-called “double opt-in procedure”). This is to prevent misuse by third parties who could provide your email address to subscribe you to the Blomus newsletter or Blomus notifications without your consent. The legal basis for the double opt-in procedure is Art. 6 para. 1 f) GDPR, as we have an overriding legitimate interest in preventing such misuse and documenting your consent.
The relevant legal basis for the processing of your personal data in connection with the sending of the aforementioned advertising emails is your consent in accordance with Art. 6 para. 1 a) GDPR.
You can revoke your consent at any time with future effect as follows:
Click on the unsubscribe link at the end of our promotional emails so that you are redirected to the newsletter management or notification management section of your customer account (depending on whether you wish to unsubscribe from the newsletter or email notifications). There you can simply uncheck the boxes for the newsletters or notifications you no longer wish to receive.
You can also withdraw your consent to receive newsletters and/or notifications and unsubscribe from receiving the relevant promotional emails by sending an email to support@blomus.com.
Please note that we use standard technologies in our advertising emails that allow us to measure whether the emails have been opened and/or which links you have clicked on. We use this data for general statistical analysis and to optimize and further develop our content and customer communication. This is done with the help of small graphics embedded in the newsletters (so-called pixels). The legal basis for this is our legitimate interest in optimizing and further developing our content and customer communication (Art. 6 para. 1 f) GDPR). If you do not want your usage behavior to be analyzed, you can unsubscribe from the promotional emails at any time or disable graphics in your email program by default.
We use the Mailgun service provided by Mailgun Technologies, Inc., 112 E Pecan St. #1135, San Antonio, TX 78205, USA, to send the aforementioned emails. Mailgun is used exclusively for the technical delivery of our emails. We have concluded a data processing agreement (DPA) with Mailgun. This is a contract required by data protection law that ensures that Mailgun processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Further information on the processing of your personal data by Mailgun can be found at https://www.mailgun.com/de/dsgvo/. We do not store any personal data permanently with Mailgun, but only transmit the information necessary for delivery, which is automatically deleted after delivery.
3. Sending e-mails with Advertising for products and Services that may be of interest to you based on your previous purchasing behaviour
If you have provided your email address when purchasing a product or service in our online shop, we will send you offers and information about products and services from our range that may be of interest to you, as you have already purchased similar products and services from blomus. In addition, we will send you product evaluation and feedback surveys to ask about your satisfaction with purchased products or services (e.g., our customer service). However, we will only send you advertising emails if you have not objected to receiving them, despite our corresponding notice below the purchase button.
The relevant legal basis for the processing of your personal data is our legitimate interest pursuant to Art. 6 (1) f) GDPR in conjunction with § 7 (3) UWG.
You can also object to receiving such promotional emails at any time by simply clicking on the unsubscribe link at the end of our promotional emails. Optionally, you can log into your customer account and unsubscribe via the advertising email management function (see section 6.1.1.). You can also object to receiving the relevant advertising emails at a later date by sending an email to support@blomus.com.
We use the Mailgun service provided by Mailgun Technologies, Inc., 112 E Pecan St. #1135, San Antonio, TX 78205, USA, to send the aforementioned emails. Mailgun is used exclusively for the technical delivery of our emails. We have concluded a data processing agreement (DPA) with Mailgun. This is a contract required by data protection law that ensures that Mailgun processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Further information on the processing of your personal data by Mailgun can be found at https://www.mailgun.com/de/dsgvo/. We do not store any personal data permanently with Mailgun, but only transmit the information necessary for delivery, which is automatically deleted after delivery.
VI. Data processing for Participation in competitions
If you take part in competitions, we will only process the data that is necessary for the organisation of the competitions (Art. 6 para. 1 b) GDPR). Please note the respective data protection information in the conditions of participation for the respective competition.
VII. Integration of Adobe Typekit
1. general information on data processing
We use Adobe Typekit on this website, a service provided by Adobe Systems Software Ireland Ltd (Adobe), which gives us access to the Adobe font library. To integrate the fonts we require into this website, your web browser must connect to an Adobe server in the USA and download the required font. The following data is processed in the process:
· Your IP address;
· website accessed;
· whether an ad blocker is used;
· date and time of access;
· amount of data transferred;
· requesting provider.
2. scope and purposes of data processing
Due to the licence terms regarding the use of fonts on our website, so-called page view tracking is carried out by counting the number of visits to the website for billing purposes and transmitting them to Adobe. In order to determine whether the correct tracking of page views may have been impaired by the use of ad blockers, the use of ad blockers is checked and this information is transmitted to Adobe if necessary. The data may be passed on by activating Java Script code in your browser.
3. data transfer/recipient
The recipient of the data is Adobe Systems Software Ireland Ltd. 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland.
4. storage period
The data will be stored by Adobe until the purpose has been achieved and then deleted.
5. legal basis for processing
The data processing is based on our interest in the use of Adobe fonts on our website. According to our assessment, this legitimate interest is not overridden by the interests or fundamental rights and freedoms of data subjects (Art. 6 (1f) GDPR). On request, we will provide you with further information about our balancing of interests.
6. right to object
You have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can submit your objection to us using the contact details provided under A. above. To prevent the execution of Java Script code from Adobe altogether, you can install a Java Script blocker (e.g. www.noscript.net). Further information on Adobe Typekit can be found in Adobe's privacy policy at https://www.adobe.com/de/privacy/policy.html
VIII. Integration of the MyFonts counter
1. general information on data processing
We use MyFonts, a web analysis service of MyFonts Inc. on this website. the following data is processed:
- IP address (anonymised);
- project identification number of the web font (anonymised);
- URL of our website, which is linked to a customer number.
2. Scope and purposes of data processing
Due to the licence terms regarding the use of fonts on our website, so-called page view tracking is carried out by counting the number of visits to the website for statistical purposes and transmitting them to MyFonts in the USA. Our URL with linked customer number is processed to enable MyFonts to identify us as a licence holder and the web fonts licensed by us. By completely anonymising the IP address (only the value IP 0.0.0.0 is transmitted), the data can no longer be assigned to your connection or computer/end device. The data may be passed on by activating Java Script code in your browser.
Further information can be found in MyFonts' privacy policy for web fonts.
3. data transfer/recipient
The recipient of the data is MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801 in the USA.
4. storage period
The anonymised data is stored by MyFonts in encrypted log files for a period of 30 days in order to determine the monthly number of page views. After such determination and storage of the number of page views, the log files are deleted.
5. legal basis for processing
The data processing is based on our interest in the use of MyFonts fonts on our website. According to our assessment, this legitimate interest is not overridden by the interests or fundamental rights and freedoms of data subjects (Art. 6 (1f) GDPR). We will provide you with further information about our balancing of interests on request.
6. right to object
You have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process this data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can submit your objection to us using the contact details provided under A. above. To prevent the execution of Java Script code from MyFonts altogether, you can install a Java Script blocker (e.g. www.noscript.net). Further information on MyFonts Counter can be found in the relevant data protection information of the MyFonts parent company Monotype Imaging Inc. at https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-zum-tracking-von-webschriften
IX. Integration of Vimeo videos
1. General information on data processing
We have integrated videos from the Vimeo.com platform into our website. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA (hereinafter referred to as “Vimeo”). The videos can be played directly on our website.
We have integrated videos from the Vimeo.com platform into our website. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA (hereinafter referred to as “Vimeo”). The videos can be played directly on our website.
2. Scope and purposes of data processing
The videos are integrated in such a way that no personal data is transferred to Vimeo as long as you do not start the video. When you play the video, the following data is processed:
The videos are integrated in such a way that no personal data is transferred to Vimeo as long as you do not start the video. When you play the video, the following data is processed:
- IP address of your computer/end device,
- Date and time of access/download,
- The page accessed with the embedded Vimeo video,
- If applicable, the name of the downloaded file,
- Browser type and version used,
- Operating system of your device,
- The website from which you visit us (referrer URL).
If you have a Vimeo user account and are logged in, additional personal data may be processed. This depends on the agreement between you and Vimeo. For more information on the scope and purpose of data processing by Vimeo, please refer to Vimeo's privacy policy at: https://vimeo.com/privacy
3. Data transfer/recipients
The recipient of the data is Vimeo.com, Inc., based in the USA. Vimeo may use other service providers as subprocessors. Transfer to the USA is based on the EU Commission's standard data protection clauses.
The recipient of the data is Vimeo.com, Inc., based in the USA. Vimeo may use other service providers as subprocessors. Transfer to the USA is based on the EU Commission's standard data protection clauses.
4. Storage
The processed data will be stored by Vimeo until the purpose has been fulfilled and then deleted. Further information on the storage period can be found in Vimeo's privacy policy.
The processed data will be stored by Vimeo until the purpose has been fulfilled and then deleted. Further information on the storage period can be found in Vimeo's privacy policy.
5. Legal basis for processing
Processing is based on our legitimate interest in an attractive and user-friendly presentation of our website through the integration of videos (Art. 6 para. 1 f GDPR). In our opinion, this interest outweighs any conflicting interests or fundamental rights and freedoms of the data subjects.
Processing is based on our legitimate interest in an attractive and user-friendly presentation of our website through the integration of videos (Art. 6 para. 1 f GDPR). In our opinion, this interest outweighs any conflicting interests or fundamental rights and freedoms of the data subjects.
6. Right to object
You have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process this data for these purposes. You can submit your objection to us using the contact details provided above under A.
You have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process this data for these purposes. You can submit your objection to us using the contact details provided above under A.
G. Your further rights as a person affected by data processing
In addition to the rights already mentioned above in the context of the respective data processing, you have the following further rights with regard to your personal data:
- Right to information: You can request information from us about the personal data that we process about you. Details on the scope of your right of access can be found in Art. 15 GDPR and Section 34 BDSG (2018).
- Right to rectification: You can request that we rectify inaccurate personal data and complete incomplete personal data. Details on the scope of your right to rectification can be found in Art. 16 GDPR.
- Right to erasure: Under certain conditions, you can request that we erase your personal data. Details on the scope of your right to erasure can be found in Art. 17 GDPR.
- Right to restriction: Under certain circumstances, you may request that we restrict the processing of your personal data. Details on the scope of your right to restriction can be found in Art. 18 GDPR.
- Right to data portability: Under certain circumstances, you may request that we transfer the personal data you have provided to us to you or another controller in a commonly used, machine-readable format. Details on the scope of your right to data portability can be found in Art. 20 GDPR.
- Right to withdraw your consent: If we ask for your consent to process personal data, you have the right to withdraw this consent at any time with effect for the future. Further details on your right of withdrawal can be found in Art. 7(3) GDPR.
- Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with a supervisory authority. Details of your right to lodge a complaint can be found in Art. 77 GDPR.
- Right to object to direct marketing: You have the right to object at any time to the processing of your personal data for the purpose of direct marketing; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process this data for these purposes. You can submit your objection to us, for example, using the contact details provided above under A. Details on your right to object can be found in Art. 21 (2) GDPR.
H. Data security
The personal data we request from you on our website is transmitted to us via a secure SSL connection (‘Secure Socket Layer’) with 256-bit encryption to protect it from unauthorised access.
In addition, we take further technical and organisational security measures to prevent the loss, destruction and misuse of data. Access to your customer account, if you have one, is only possible by entering your personal password. You can help protect your data by choosing a password that is as difficult as possible to guess (e.g. by combining letters, numbers and characters) and keeping it strictly confidential.