Last updated August 24, 2026
Personal data (usually referred to just as „data“ below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the „GDPR“), „processing“ refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.
Our privacy policy is structured as follows:
I. Information about us as controllers of your data
I. Information about us as controllers of your data
The party responsible for this website (the “controller”) for purposes of data protection law, also acting as the data protection officer, is:
phospho
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Cookies
a) Session cookies
We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.
This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.
The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
When you close your browser, these session cookies are deleted.
b) Third-party cookies
If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.
Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.
c) Disabling cookies
You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.
If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.
The following cookies that are categorized as "Necessary" are stored on your browser. They are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
cookie-consent
Stores the visitors’ cookie preferences so that their preferences are respected on their subsequent visits to this site. It does not collect or store any personal information of the site visitors. Provider: phospho, Duration: 1 year
_fontdue_session
Needed for font display, type-tester, cart/checkout. Provider: Fontdue, Duration: Session
_fontdue_cc
Stores the cookie consent choice for Fontdue Analytics, so this setting is respected on future visits. Provider: Fontdue, Duration: 1 year
__stripe_mid
Unique browser ID to prevent fraud. Provider: Stripe, Duration: 1 year
__stripe_sid
Tracks user sessions on the Stripe payment platform. Provider: Stripe, Duration: 30 minutes
The following Marketing & Analytics Cookies ("Optional") are set only after you give explicit consent. They help us analyse how visitors use our site, measure the success of advertising campaigns, and show you more relevant ads on platforms such as Facebook, Instagram, Pinterest or Google (so-called retargeting).
Legal basis: your consent under Art. 6 (1)(a) GDPR. You can withdraw consent at any time via the “Cookie Settings” link on our website. The information stored is pseudonymised; it does not allow us to identify you directly. If you decline these cookies, you will still see advertising, but it will be less tailored to your interests, and we will lose the ability to evaluate campaign performance accurately.
_fontdue_state
Pseudonymous visitor ID used to recognise returning visits and to link UTM/referrer data captured on the first pageview. Provider: Fontdue, Duration: 1 year
_fbp
Unique ID for ad-delivery & conversion tracking. Provider: Meta, Duration: 3 months
fr
Ad delivery/retargeting. Provider: Meta, Duration: 3 months
_pin_unauth
UUID for non-logged-in users (conversion tracking).Provider: Pinterest, Duration: 1 year
_pinterest_sess
Authentication & user preferences. Provider: Pinterest, Duration: 1 year
_pinterest_ct_rt
Conversion & retargeting cookie (in-app browsers). Provider: Pinterest, Duration: 1 year
gcl_au
Stores the Google Ads click information (conversion linker). Provider: Google (Tag Manager/Ads), Duration: 3 months
Fontdue/Render
For some functionalities and the store function of this website (display of fonts, type tester, character map, newsletter form, font purchase, checkout forms, customer log-in, management of customer data), as well as for hosting the typefaces/font files, we use the services of “Fontdue” (ecommerce platform for independent type foundries) in cooperation with the web hosting service “Render”. The corresponding servers are located in the United States.
Information about Fontdue’s privacy policy can be found here:https://www.fontdue.com/privacy-policy
Information about Render’s privacy policy can be found here:https://www.render.com/privacy/
Fontdue Analytics
We use Fontdue Analytics on our website, a web analytics service provided by Fontdue Inc., USA, hereinafter "Fontdue" (see also the "Fontdue/Render" section above).
Fontdue Analytics helps us analyse the use of our website, including pageviews, unique visitors, traffic sources and country-level visitor geography. It does not include click or scroll tracking or session recording. The legal basis is Art. 6(1)(a) GDPR. Consent is collected via our own cookie banner and can be withdrawn at any time with future effect via the "Cookie Settings" on our website. Without consent, Fontdue records pageviews anonymously, without storing a persistent visitor ID. Only once consent has been given are returning visits linked to a pseudonymous visitor ID. Data processing takes place on Fontdue's servers in the USA.
Stripe
All payments in the checkout process are handled by the payment service provider “Stripe”, which is certified as PCI Service Provider Level 1. This is the highest level of certification available.
Information about Stripe’s privacy policy can be found here:https://stripe.com/privacy
Newsletter
If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address, will be sent to us. We also store the IP address of your computer and the date and time of your registration. During the registration process, we will obtain your consent to receive this newsletter and the type of content it will offer, with reference made to this privacy policy. The data collected will be used exclusively to send the newsletter and will not be passed on to third parties.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.
You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.
Facebook
To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Facebook platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
The data protection officer of Facebook can be reached via this contact form:https://www.facebook.com/help/contact/540977946302970
We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link:https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.
When accessing our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).
This data of the user is used for statistical information on the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Facebook based on your interests. If you are logged into Facebook at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.
If you contact us via Facebook, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.
Facebook Ireland Ltd. might also set cookies when processing your data.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Facebook may be fully usable.
Details on the processing activities, their suppression, and the deletion of the data processed by Facebook can be found in its privacy policy:https://www.facebook.com/privacy/explanation
It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025.
Instagram
To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Instagram platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
The data protection officer of Instagram can be reached via this contact form:https://www.facebook.com/help/contact/540977946302970
We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link:https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.
When accessing our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).
This data of the user is used for statistical information on the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Instagram based on your interests. If you are logged into Instagram at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.
If you contact us via Instagram, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.
Facebook Ireland Ltd. might also set cookies when processing your data.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Instagram may be fully usable.
Details on the processing activities, their suppression, and the deletion of the data processed by Instagram can be found in its privacy policy:https://help.instagram.com/519522125107875
It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025.
Pinterest
We maintain an online presence on Pinterest to present our company and our services and to communicate with customers/prospects. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to Pinterest.
The Pinterest privacy policy can be found here:https://policy.pinterest.com/de/privacy-policy
General linking to third-party profiles
The provider includes a link on the website to the social media listed below.
The legal basis for this is Article 6 para. 1 lit. f GDPR. The legitimate interest of the provider is to improve the quality of use of the website.
The plugins are integrated via a linked graphic. The user is only forwarded to the service of the respective social media by clicking on the corresponding graphic.
After the customer has been forwarded, information about the user is recorded by the respective social media. This is initially data such as IP address, date, time and page visited. If the user is logged into his/her user account of the respective social media at the same time, the social media operator can, if required, assign the information collected from the user’s specific visit to the user’s personal account. If the user interacts via a “Share” button of the respective social media, this information can be stored in the user’s personal user account and, if required, be published. If the user wants to prevent the collected information from being directly assigned to his/her user account, the user must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.
The following social media are linked by the provider:
Instagram
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.https://help.instagram.com/519522125107875
Facebook Pixel – Conversion Tracking
We use the Facebook visitor action pixel on our website, a web analysis and conversion measurement service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, hereinafter referred to as “Facebook”.
The Facebook visitor action pixel helps us analyse user behaviour on our website and promote our services on the Facebook platform. The basis for this is Art. 6 para. 1 lit. a GDPR. The user can revoke consent to use at any time for the future in accordance with Art. 7 para. 3 GDPR via the settings of the Consent Manager (“cookie settings”) on our website.
The visitor action pixel establishes a connection to Facebook’s servers in the USA. Facebook records the IP address and information about the user’s browser. In addition, an individual pixel ID is stored along with the user’s associated website activities.
Meta Platforms Inc. is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Thanks to this data processing, Facebook can show the user personalised advertising from us on Facebook or on third-party sites. Conversion measurement also enables us to analyse and evaluate user behaviour after clicking on a Facebook ad and then being redirected to our website in order to increase the effectiveness of our Facebook ads.
In this context, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, within the meaning of Art. 26 GDPR.
The joint controllers have defined their respective obligations under the GDPR in an agreement. This agreement can be viewed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The data protection officer of Meta Platforms Ireland Limited can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
Detailed information on data processing by Facebook as well as on the rights and protection options of users are described in Facebook’s privacy policy:
https://www.facebook.com/policy.php
Google Analytics
We use Google Analytics on our website, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Google Analytics helps us analyse website usage and measure the effectiveness of our marketing campaigns. The legal basis for this is Art. 6 para. 1 lit. a GDPR. The user can revoke consent to the use of Google Analytics in accordance with Art. 7 para. 3 GDPR at any time for the future via the “Cookie Settings” on our website.
Information such as time, location and frequency of website visits as well as interactions with the website (e.g. click paths, ads seen/clicked, clicks on links) including the user’s IP address are transferred to a Google server in the USA and stored there for a maximum of 2 months.
Google LLC is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Google also records “demographic characteristics” and can create statistics that allow statements to be made about the age, gender and interests of site visitors. This is done through the automated analysis of advertising and information from third parties.
If the user has activated personalised ads in their Google account and agrees to Google Analytics, Google can analyse usage behaviour across devices – that is, across all devices that the user has linked to their Google account. Google creates models for cross-device conversions; only anonymous statistics are sent to us, no personal data.
If the user wishes to deactivate this cross-device analysis, he or she can deactivate the “Personalised Advertising” function in the settings of his or her Google account using the following link:
https://support.google.com/ads/answer/2662922?hl=de
We use Google Analytics with an anonymisation function. As a result, Google will shorten the user’s IP address within the EU member states or in other contracting states to the EEA Agreement.
Google uses the data collected to evaluate the user’s visit to the website and to compile reports on website activities for us. The data are also used to provide other services related to website and internet usage. Google may transfer this information to third parties where required by law, or where such third parties process the data on Google’s behalf.
According to Google, under no circumstances will the user’s IP address be linked to other Google data. Google offers further information and options for preventing data usage here:
https://www.google.com/intl/de/policies/privacy/partners
If the user does not agree to the collection, he or she can also prevent it by installing the browser add-on to deactivate Google Analytics.
Google Tag Manager
We use the Google Tag Manager to integrate various functions on our website. This product comes from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
The Google Tag Manager is used exclusively to integrate certain content into our website and to enable the management of these functions via an interface provided by Google.
When you access the website, the corresponding functions are loaded from a Google server, which may also be located in the USA. The user’s IP address is processed in order to provide the functions.
The functions used are listed in our privacy policy. Any consent not granted by the user for certain functions will also be respected when using the Google Tag Manager.
Google LLC is also part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
The legal basis for use is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.
Pinterest Pixel
We use the Pinterest visitor action pixel on our website, a web analysis and conversion measurement service provided by Pinterest Europe Limited (hereinafter referred to as: „Pinterest“), 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland.
The Pinterest visitor action pixel helps us analyse the use of our website and promote our services on the Pinterest platform. The legal basis for this is Art. 6 para. 1 lit. a GDPR. The user can withdraw consent in accordance with Art. 7 para. 3 GDPR via the settings of the Consent Manager (“cookie settings”) on our website.
By using the visitor action pixel, a connection is established to the Pinterest server. Pinterest records the IP address and information about the user’s browser. Pinterest also stores an individual pixel ID and the user’s associated website activities.
This data processing enables Pinterest to show the user personalised advertising from us on Pinterest or on third-party sites.
Pinterest processes these data under its own responsibility.
Transfers to third countries are possible. To ensure appropriate guarantees, so-called standard contractual clauses were adopted in accordance with Art. 46 GDPR. For third countries for which an adequacy decision exists, this adequacy decision also applies.
For further information:
https://policy.pinterest.com/de/privacy-policy
MailChimp – Newsletter
We offer you the opportunity to register for our free newsletter via our website.
We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as „The Rocket Science Group“.
In addition, the Rocket Science Group offers further information about its data protection practices at http://mailchimp.com/legal/privacy/
If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date and time of your registration will be saved. During the registration process, your consent to receive this newsletter will be obtained together with a concrete description of the type of content it will offer and reference made to this privacy policy.
The newsletter then sent out by The Rocket Science Group will also contain a tracking pixel called a web beacon. This pixel helps us evaluate whether and when you have read our newsletter and whether you have clicked any links contained therein. In addition to further technical data, such as data about your computer hardware and your IP address, the data processed will be stored so that we can optimize our newsletter and respond to the wishes of our readers. The data will therefore increase the quality and attractiveness of our newsletter.
The legal basis for sending the newsletter and the analysis is Art. 6 Para. 1 lit. a) GDPR.
You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.
This Privacy Policy statement is based on the Model Data Protection Statement by Anwaltskanzlei Weiß & Partner
Cookie Settings 
