Schick‑Toikka GbR
Owners: Florian Schick, Lauri Toikka
Simplonstraße 54
10245 Berlin
Germany
E‑mail: ######################
This website is hosted by MK Netzdienste GmbH & Co. KG, Dresdener Str. 18, 32423 Minden, Germany. All data collected via this site are stored on the host’s servers. We have concluded a data‑processing agreement with the host pursuant to Art. 28 GDPR. Legal bases: Art. 6 (1)(b) GDPR (performance of a contract) and Art. 6 (1)(f) GDPR (our legitimate interest in the secure and efficient provision of our online offering).
We process personal data only to the extent necessary to provide a functional website and our content and services. Processing of personal data for marketing or analysis purposes (e.g. by tracking or marketing cookies) does not take place.
When you visit our website the provider automatically collects and stores the following information in server log files that your browser transmits to us:
• IP address
• Date and time of the request
• Requested URL and HTTP status code
• Amount of data transferred
• Referrer URL
• Browser type/version and operating system
Processing is based on Art. 6 (1)(f) GDPR (legitimate interest in the technically error‑free presentation and security of the website) and the data are deleted automatically after 7 days.
If you contact us, your details (name, e‑mail address, phone number, postal address, content of enquiry) are processed for the purpose of handling the enquiry. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract or pre‑contractual measures) or Art. 6 (1)(f) GDPR (our legitimate interest in effective communication). We delete the data once your enquiry has been fully resolved unless statutory retention obligations exist.
We currently do not use cookies or comparable technologies for analytics, marketing or convenience purposes. Technically necessary session cookie: If you purchase a font (see section 5), a session cookie is set that stores your selected fonts in the cart. The cookie is essential for the performance of the contract (Art. 6 (1)(b) GDPR); no separate consent is required.
For the purchase of our fonts we provide a digital shopping cart. Registration is not required. Full licenses (paid): standard checkout with entry of required data, cart and payment via the payment service provider listed below. Demo licenses (free): same checkout procedure but without payment and with entry only of the necessary details (name, e‑mail address, company if applicable).
• Inventory and contact data (name, billing / company address, e‑mail, VAT ID if applicable)
• Contract and license data (fonts ordered, license type [demo or full], price, currency, order ID)
• Payment and transaction data (full licenses only: payment method, status, amount, date, partial / refunds)
• Device and protocol data (IP address, browser information)
Payment processing for paid licenses is carried out via 2Checkout.com Inc., 548 Market St PMB 57274, San Francisco CA 94104, USA.
For the technical handling of payments 2Checkout acts as a processor; we have concluded a data‑processing agreement including standard contractual clauses with 2Checkout. For fraud and money‑laundering prevention as well as statutory reporting obligations 2Checkout acts as an independent controller (see privacy provisions at https://www.2checkout.com/legal/data-privacy-provisions/). When you access the payment page for paid licenses, 2Checkout may process personal data on its own responsibility. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in secure payment processing).
Contract fulfillment and delivery of digital products or demo licenses: Art. 6 (1)(b) GDPR Fulfillment of commercial and tax retention obligations: Art. 6 (1)(c) GDPR in conjunction with § 147 AO, § 257 HGB (10 years) Fraud and abuse prevention and IT security: Art. 6 (1)(f) GDPR
Invoices and transaction data (full license purchases): 10 years (§ 147 AO, § 257 HGB) License records for demo licenses: 3 years to document grant of license and to defend possible claims (Art. 17 (3)(e) GDPR) License and contact data for full licenses: as long as the respective license is valid and no statutory retention obligations apply.
Where data are transferred by 2Checkout.com Inc. to the USA, this is based on the EU Commission’s standard contractual clauses. An adequate level of data protection is thereby ensured.
You have the following rights at any time: Access (Art. 15 GDPR) Rectification (Art. 16 GDPR) Erasure (“right to be forgotten”, Art. 17 GDPR) Restriction of processing (Art. 18 GDPR) Data portability (Art. 20 GDPR) Objection to processing based on Art. 6 (1)(f) GDPR (Art. 21 GDPR) To exercise your rights simply send an informal message to the e‑mail address stated above.
You have the right to lodge a complaint with the data protection supervisory authority responsible for you, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The current version applies to your next visit.