Skip to content
Convecto

Privacy

The following privacy policy applies to the use of the website www.convecto.com (hereinafter “website”).

Your personal data is collected and processed in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). This policy describes how and for what purpose your data is collected and used, and what choices you have in connection with personal data.

This website sets no cookies, neither its own nor third-party ones, and uses no analytics or advertising services. That is why you will not see a cookie banner here. The only external service is Adobe Fonts, which delivers our typeface, and Adobe sets no cookies in the process either. If you pause the animations, your browser remembers that setting on your device. It is never sent to us.

Controller within the meaning of the GDPR
Convecto GmbH
Ludwigstr. 180d
Heyne Fabrik
63067 Offenbach
Germany
Objection
If you wish to object to the collection, processing or use of your data by us, as a whole or for individual measures, please address your objection to the controller.

Data processing on this website

Access data

We collect, store and use data about every access to our website (so-called server log files). Access data includes the name and URL of the file retrieved, date and time of retrieval, amount of data transferred, notification of successful retrieval (HTTP response code), browser type and version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.

We use this log data without attributing it to you personally and without any other profiling, for statistical evaluations for the purpose of operating, securing and optimising our website, and to find and fix errors. We reserve the right to review the log data retrospectively if there are concrete indications of a legitimate suspicion of unlawful use. We store IP addresses in the log files for a limited period where this is necessary for security purposes, and also where we have a concrete suspicion of a criminal offence in connection with the use of our website.

Contact by email

If you contact us by email, we store your details in order to process your enquiry and in case follow-up questions arise. We only store and use further personal data if you consent to this or if it is legally permitted without special consent.

Fonts from Adobe Fonts

We use Adobe Fonts, a service of Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland, to display our typeface consistently. When you open a page, your browser loads the font files from Adobe servers (use.typekit.net and p.typekit.net). In the process, Adobe receives your IP address, the host name of this website, the fonts used and the ID of our font project.

According to Adobe, this data is used only to deliver the fonts, to fix delivery problems and to settle usage with the type foundries. According to Adobe, the IP address is not stored, and Adobe sets no cookies to deliver the fonts.

A transfer to Adobe Inc. in the USA cannot be ruled out. Adobe Inc. is certified under the EU-U.S. Data Privacy Framework. Transfers to certified companies are covered by the European Commission’s adequacy decision under Art. 45 GDPR.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a consistent presentation of the website. Further information is available in Adobe’s privacy information on Adobe Fonts at www.adobe.com/privacy/policies/adobe-fonts.html.

Legal basis and storage period

The legal basis for the data processing described in the sections above is Art. 6(1)(f) GDPR. Our interests in the data processing are in particular ensuring the operation and security of the website and making the website easier to use.

Unless specifically stated otherwise, we store personal data only for as long as is necessary to fulfil the purposes pursued.

Your rights

Right to confirmation and access

You have the right to obtain confirmation from us at any time as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain from us, free of charge, information about the personal data stored about you together with a copy of this data. You also have the right to the following information:

  1. the purposes of the processing;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
  4. where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
  5. the existence of the right to request rectification or erasure of personal data concerning you, restriction of processing by the controller, or to object to such processing;
  6. the right to lodge a complaint with a supervisory authority;
  7. where the personal data is not collected from you, any available information as to its source;
  8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.

Right to erasure (“right to be forgotten”)

You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:

  1. The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  2. You withdraw the consent on which the processing is based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
  3. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  4. The personal data has been unlawfully processed.
  5. The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
  6. The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged to erase it, we take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform controllers which are processing the personal data that you have requested the erasure of any links to, or copies or replications of, that personal data.

Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

  1. you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
  2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
  3. we no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
  4. you have objected to processing pursuant to Article 21(1) GDPR, pending the verification whether our legitimate grounds override yours.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, where

  1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
  2. the processing is carried out by automated means.

In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing.

You have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Automated decisions including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you is unlawful.