Privacy Policy
opentype.space (“the controller”) is a web service owned and managed by Schriftkontor Ralf Herrmann. It is hosted in Germany with the hosting Provider Mittwald. opentype.space processes information of guests and registered members henceforth referred to as users (“the data subjects”). The user data is processed at the server level (e.g. server logs) as well as the content management software level, where data is stored in a relational database. The details are described below.
Access Logs
The hosting provider logs any page view activity of users containing information like time, IP adddress, the page being viewed, http status codes, referrer and user agent. This data is necessary to guarantee that the service is running as expected and identify problems i fit doesn’t. The IP addresses in the access logs are stored anonymously by being truncated and they are removed completely after 60 days. Error logs are removed after 7 days. Logs for web mails are stored anonymously (by removing sender and receiver) after 24 hours and removed after 60 days. Mail logs for the mail server are deleted after 4 weeks.
Cookies and Embedded Content
opentype.space makes use of cookies, but only sets functional cookies to make the use of the website possible (e.g. session cookies) or to improve the usage (e.g. by storing user settings for easy access). A detailed description of our cookies can be found on this page: https://opentype.space/cookies/
opentype.space does not use cookies which track the user’s activity for statistical purposes (e.g. Google Analytics, Facebook Pixel) or for advertising purposes.
Users and administrators might embed content from external sources into their posts. For example: videos from YouTube and Vimeo, images from sites like Flickr, maps from providers like Mapbox and so on. Keep in mind that those services can also set cookies and track user data like IP addresses.
Captcha
Registrations and guest posts are are protected from spam using Google’s Invisible Captcha. The use of reCAPTCHA is subject to the Google privacy policy and terms of use.
Personal Data collected: Cookies and usage data. Place of processing: United States.
User Registration
In order to post on opentype.space, users need to register an account. The data will be stored on the web server. opentype.space only collects as little information as necessary. The only personal data required is a correct and permanently used email address. The address is neccessary to verify the account and to regain access once a user looses the password accociated with the account. In addition, users can add more personal information, e.g. their real name as their display name. This is optional and can be changed at any time.
A full address is required once a user makes a purchase in our shop. In this case, the address is necessary to calculate tax, verify the purchase and as proof of the purchase for governmental bodies. Data related to purchases will be stored for 10 years to comply with governmental requirements.
User registration data is never passed on to third-parties, unless it is techically required, e.g. spam services.
User Activity
In addition to the server log files, the content management software also logs user activity in order to make it possible to prevent spam, fraud, harassment, trolling, hacking attempts and similar issues.
Posts made on the community website will save the IP address, which was used while posting. This data will be removed from the posts after 3 years.
The content management system will also log login information, which includes the IP address, an estimate of the user’s location and information about their devices. This is necessary for the user and the admin to identify hacking attemts and similar issues.
To comply with GDRP rules, the content management system will also log when consent is given or removed, e.g. agreeing to the terms, subscribing to the newsletter and so on.
Right to be Informed and Data Portability
The data described under User Registration and User Activity can be requested free of charge as human- and machine-readable XML file. The data will be provided within 7 days. opentype.space might demand verification for each request, so personal data is not send to anyone but the user itself.
Right to Lodge a Complaint
Every user has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the user considers that the processing of personal data relating to him or her infringes the General Data Protection Regulation.
Right to Restriction of Processing
The user has the right to restrict the processing of the personal data, e.g. while contested data is being verified; if the data might have been collected unlawfully; or if the deletion needs to be prevented in order for the data to be available for a legal defense.
Right to Object; Right for Data Correction and Right to be Forgotten
To allow the registered member a permanent use of our community website, the email address and optional personal information added to the account will be stored as long as the user does not change or remove the data. The user can change the information at any time, delete optional information, ask administrators of opentype.space to change or delete personal information or to stop specific data use. To object to any data use, the user can permanently delete the account. Account deletions are processed manually and usually performed within 48 hours.
Automated Decision-Making and Profiling
opentype.space does not process personal data in a way that would qualify as automated decision-making, including profiling.
Newsletter and Notifications
Registered users are in full control regarding notifications and emails received from opentype.space. The settings can be changed at any time here: https://opentype.space/notifications/options/
When users are unable to change the settings themselves (e.g. because they can’t log in), they can also request that the settings are changed for them.