Fuego Fonts (“we”, “our”, “us”) operates this website www.fuegofonts.com where we offer digital font licenses and related services. We respect your privacy and handle personal data in compliance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

‍

1. Controller

Responsible for data protection:  

Fuego Fonts  
LIT Create GmbH
Rosa-Luxemburg-Str. 17
10178 Berlin
Email: contact@fuegofonts.com

‍

2. What We Collect

We process only the data necessary to operate our shop and communicate with our customers. This includes:

• Contact details (name, company, email, billing address, country)
• Account and order data (licenses purchased, invoices)
• Payment data (processed via third-party providers, see below)
• Communication data (emails or contact form messages)
• Technical and usage data (browser type, IP address, access time, anonymized analytics)
• Newsletter subscription data (name, email, consent timestamp)

‍

3. Legal Basis and Purpose

We process personal data only when this is permitted by law and necessary for specific purposes in accordance with Article 6 GDPR:

• Contract fulfilment and customer management (Art. 6 (1)(b))
• Legal obligations (invoicing, tax) (Art. 6 (1)(c))
• Legitimate interests in maintaining website security and improving services (Art. 6 (1)(f))
• Consent-based processing (newsletter, analytics, cookie preferences) (Art. 6 (1)(a))

You can withdraw this consent at any time by contacting us at contact@fuegofonts.com.

‍

4. Website Hosting and Infrastructure

Our website is built and hosted on Webflow, which also provides the CMS and content delivery functions.
Data processed: IP address, browser information, usage data, form entries.
For details, see Webflow Privacy Policy.

We use Strato (in combination with Google) for email and domain hosting.
Data processed: Email metadata, server logs.

To manage and serve font files and license downloads, our shop integrates Fontdue, a font management platform.
Data processed: Possibly IP address, email addresses, names, usage statistics for font serving.
See Fontdue Privacy Policy.

‍

5. Payment Processing

Payments are handled securely via Stripe (credit card payments only) and Fontdue as part of the shop infrastructure.
When you complete a purchase, the necessary payment and billing data are transmitted directly to the respective provider.
We do not store or have access to full credit card or bank account information. For details, please see:

• Stripe
• Fontdue

‍

6. Newsletter and Communication

If you subscribe to our newsletter, we process your name, email address, signup timestamp, and consent logs.
We use Brevo (formerly Sendinblue) for newsletter delivery and Zapier to integrate form submissions from Webflow with Brevo.
Data processed: Email addresses, form field data. See Brevo.  

Each newsletter contains an unsubscribe link. If you contact us via email or form, we store your message and contact details to respond to your request.

‍

7. Analytics and Cookies

We use cookies only where technically necessary or based on your consent.

Consent Management:
Our cookie preferences are managed via Finsweet Consent Pro (Opt-In mode). You can accept or reject cookies and manage preferences by category (e.g. Essential, Analytics, Marketing, Personalization).
Consent records are stored via Cloudflare, in compliance with GDPR requirements for consent storage.
See Finsweet and Cloudflare.

Analytics:  
If you consent, we use Google Analytics (Google Ireland Limited) to analyse visitor interactions.
Data processed: Anonymized IP addresses, cookies, usage data.
Data processing occurs based on your consent (Art. 6 (1)(a) GDPR).
You can withdraw your consent anytime via the cookie settings or browser controls.
More information: Google Privacy Policy.

We do not use marketing or advertising cookies without explicit consent.

‍

8. Video Content

We embed videos hosted on Vimeo for background or inline display on our website. When you view a Vimeo video, your IP address and usage data may be processed by Vimeo LLC. For details, see Vimeo.

‍

9. Data Sharing and Processors

We do not sell or rent personal data. We share data only with carefully selected service providers as data processors under Art. 28 GDPR, based on binding Data Processing Agreements (DPAs):

• Webflow – Website hosting and CMS
• Fontdue – Shop and font delivery platform
• Stripe – Payment processing
• Strato – Email and domain hosting
• Brevo – Newsletter delivery
• Zapier – Automation of newsletter signups
• Google Analytics – Website analytics
• Vimeo – Video hosting
• Cloudflare – Consent record storage

Your personal data will generally not be disclosed to third parties. We only transfer personal data to third parties if:

• you have explicitly consented to the transfer (Art. 6(1)(a) GDPR),
• the transfer is necessary for the performance of a contract with you (Art. 6(1)(b) GDPR),
• we are legally obliged to do so (Art. 6(1)(c) GDPR), or
• the transfer is necessary to safeguard our legitimate interests, and there is no reason to assume that your interests or fundamental rights and freedoms requiring the protection of personal data outweigh such interests (Art. 6(1)(f) GDPR).

‍

10. Data Retention

We store personal data only as long as necessary for the purposes described or as required by law. Business documents (invoices, accounting records) are retained for up to 10 years under German commercial and tax law. You may request deletion of your data if it is no longer required for these purposes.

‍

11. International Data Transfers

If data is transferred outside the EU/EEA (e.g. to the United States), this occurs under GDPR-compliant safeguards such as EU Standard Contractual Clauses or adequacy decisions.

‍

12. Your Rights

You have the following rights under the GDPR:

• Access to your data (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent (Art. 7 (3))

To exercise your rights, contact contact@fuegofonts.com. We may require proof of identity to process your request.

‍

13. Security

We take the protection of personal data seriously and apply technical and organizational safeguards in accordance with Article 32 GDPR.
All data transmitted through our website and shop is encrypted via SSL/TLS.

Our website is hosted and managed via Webflow, which provides secure hosting through Amazon Web Services (AWS) with automatic SSL encryption, regular backups, and managed security updates.

The online shop and license management are operated through Fontdue, which uses encrypted connections and processes payments via Stripe, a PCI DSS–certified provider.

Access to stored customer and license data is restricted to authorized personnel only.
Security measures are reviewed and updated regularly.

‍

14. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The current version is always available at www.fuegofonts.com.

‍

15. Contact

For privacy-related inquiries, please contact:
Fuego Fonts  
LIT Create GmbH
Rosa-Luxemburg-Str. 17
10178 Berlin
Email: contact@fuegofonts.com

If you believe your data protection rights have been violated, you can lodge a complaint with the competent data protection authority:
Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit – BlnBDI)
More information is available at: https://www.datenschutz-berlin.de/