Privacy Policy
Letter Library (“the controller”) is a web service owned and managed by Schriftkontor Ralf Herrmann. It is hosted in Germany with the hosting Provider Mittwald. Letter Library processes information of guests and registered members henceforth referred to as users (“the data subjects”). The user data is processed at the server level (e.g. server logs) as well as the content management software level, where data is stored in a relational database. The details are described below.
Access Logs
The hosting provider logs any page view activity of users containing information like time, IP adddress, the page being viewed, http status codes, referrer and user agent. This data is necessary to guarantee that the service is running as expected and to identify problems if it doesn’t. The IP addresses in the access logs are stored anonymously by being truncated and they are removed completely after 60 days. Error logs are removed after 7 days. Logs for web mails are stored anonymously (by removing sender and receiver) after 24 hours and removed after 60 days. Mail logs for the mail server are deleted after 4 weeks.
Cookies and Embedded Content
Letter Library makes use of cookies, but only sets functional cookies to make the use of the website possible (e.g. session cookies) or to improve the usage (e.g. by storing user settings for easy access). A detailed description of our cookies can be found on this page: https://letterlibrary.org/cookies/
Letter Library does not use cookies which track the user’s activity for statistical purposes (e.g. Google Analytics, Facebook Pixel) or for advertising purposes.
Since we are a community website, users and administrators might embed content from external sources into their posts. For example: videos from YouTube and Vimeo, images from sites like Flickr, maps from providers like Mapbox and so on.
The webfonts on Letter Library are embedded from Adobe Fonts, a service provided by Adobe Inc. Their privacy policy can be found here:
https://www.adobe.com/privacy/policies/adobe-fonts.html
Captcha
Registrations and guest posts are are protected from spam using the hCaptcha service by Intuition Machines, Inc. Personal Data collected: Cookies and usage data. Place of processing: United States.
https://www.hcaptcha.com/privacy
User Registration
In order to post on Letter Library, users need to register an account. The data will be stored on the web server. Letter Library only collects as little information as necessary. The only personal data required is a correct and permanently used email address. The address is neccessary to verify the account and to regain access once a user looses the password accociated with the account. In addition, users can add more personal information, e.g. their real name as their display name. This is optional and can be changed at any time.
A full address is required once a user makes a purchase in our shop. In this case, the address is necessary to calculate tax, verify the purchase and as proof of the purchase for governmental bodies. Data related to purchases will be stored for 10 years to comply with governmental requirements.
User registration data is never passed on to third-parties, unless it is techically required, e.g. spam services.
User Activity
In addition to the server log files, the content management software also logs user activity in order to make it possible to prevent spam, fraud, harassment, trolling, hacking attempts and similar issues.
Posts made on the community website will save the IP address, which was used while posting. This data will be removed from the posts after 3 years.
The content management system will also log login information, which includes the IP address, an estimate of the user’s location and information about their devices. This is necessary for the user and the admin to identify hacking attemts and similar issues.
To comply with GDRP rules, the content management system will also log when consent is given or removed, e.g. agreeing to the terms, subscribing to the newsletter and so on.
Right to be Informed and Data Portability
The data described under User Registration and User Activity can be requested free of charge as human- and machine-readable XML file. The data will be provided within 7 days. Letter Library might demand verification for each request, so personal data is not send to anyone but the user itself.
Right to Lodge a Complaint
Every user has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the user considers that the processing of personal data relating to him or her infringes the General Data Protection Regulation.
Right to Restriction of Processing
The user has the right to restrict the processing of the personal data, e.g. while contested data is being verified; if the data might have been collected unlawfully; or if the deletion needs to be prevented in order for the data to be available for a legal defense.
Right to Object; Right for Data Correction and Right to be Forgotten
To allow the registered member a permanent use of our community website, the email address and optional personal information added to the account will be stored as long as the user does not change or remove the data. The user can change the information at any time, delete optional information or ask administrators of Letter Library to change or delete personal information or stop specific data use. To object to any data use, the user can permanently delete the account. Account deletions are processed manually and usually performed within 48 hours.
Automated Decision-Making and Profiling
Letter Library does not process personal data in a way that would qualify as automated decision-making, including profiling.
Newsletter and Notifications
Users are in full control regarding notifications and emails received from Letter Library. The settings can be changed at any time here: https://Letter Library/notifications/options/
When users are unable to change the settings themselves (e.g. because they can’t log in), they can also request that the settings are changed for them.
Our site newsletter informs registered members about new content on the site and news from the field of typography (e.g. upcoming events). It may contain affiliate links and sponsored content. It is usually not sent out more than once a month. To comply with EU data protection regulations, receiving the newsletter needs active consent by the user and the consent is being logged.
Content Distribution Network
Letter Library uses the content distribution network provided by Cloudflare Inc. to speed up the delivery of our website around the globe and to protect the server from attacks and other security threats. This use therefore has a legitimate interest. The Cloudflare privacy policy can be found here: https://www.cloudflare.com/privacypolicy/
