Privacy Statement


Scope of the processing of personal data
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website and our contents and services. The processing of personal data of our users regularly only takes place with the user’s consent. An exception is made in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Who is responsible for data processing and whom can I contact?
Monotype GmbH
Spichernstr. 2
10777 Berlin

Phone: +49 30 69596-418
e-mail: [email protected]

Contact details of the data protection officer:
Michael Stalla

[email protected]

On which legal basis do we process your data?
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6 paragraph 1 lit. b GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

We collect and store the data of customers and business partners Customer data almost exclusively on the basis of contractual or pre-contractual relationships (Art.6 lit.b GDPR). For marketing activities towards potential customers we rely on Art.6 lit.f GDPR, i.e. a balancing of interests. We have a legitimate interest in acquiring new customers. In doing so, we only approach contacts in their professional capacity as representatives of their companies. The data originates from the persons concerned themselves or from publicly available sources. In doing so, it is not apparent that we are interfering with the rights or freedoms of the persons concerned in any way.

How long is this data stored?
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. The data of our customers, our business partners and their contact persons remain stored as long as business relations exist or you express interest in our products. For data concerning licences, contractual agreements and invoicing, there are statutory retention periods of 6 or 10 years.

Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Which personal data do we process?
Whenever our website is called up, our system automatically collects data and information from the computer system of the calling computer. Which personal data we collect from you depends on which services you use on our website. If you access our web pages without registering or conducting electronic commerce, we collect data:

  • Information about your browser type and version used

  • Information about your device with which you access our website

  • Information about your operating system

  • Your Internet service provider

  • your IP address

  • Date and time of access and geolocation data, if applicable

  • Websites from which your system accesses our website

  • Websites that are accessed by your system via our website

When you create an account on our site (as a customer, as an invited user, or as a font designer or manufacturer), subscribe to receive our communications, update your account information, enter our contests or sweepstakes, answer surveys, purchase something, contact us with questions or comments, apply for a job, connect to us through social networking platforms, submit user-generated content or participate in our online forums or promotions, interact with our sales representatives and/or contact our customer service department, we may collect the following additional information:

  • Your full name, username, password, email address, telephone number, postal or billing address if you are paying by credit card, the last 4 digits of your credit card number (the entire number will be sent to a third party payment processor, see below) and the expiration date of your credit card if you are receiving royalties from us, your social security or tax number, geolocation and other information that you provide to us when you access or use any of our sites and if you have contacted us on behalf of a company or other legal entity or have accessed any of our sites, your professional contact information and relevant details about your company or legal entity and how you relate to it;

  • Comments you post in any of our forums, attitudes and opinions about our products and the use of our products that may be attributed to you, your demographics, location, interests, job information or lifestyle information, job description, level of satisfaction with our sites, purchasing behavior or history, and browsing, downloading or other Internet or mobile-based activities;

  • Information about you contained in a resume, details about you that you provide in connection with a job application or request, including profile information on social networking sites (such as LinkedIn) when you apply for a job in this way;

  • Information about you that is publicly available or provided by third parties, such as information published on social media sites, blogs and other websites and/or information about you contained in email lists, mailing lists, lists of potential customers and/or other information that we may purchase or obtain from third parties for our promotional and marketing purposes

Cookies are small text files that are stored in your web browser and enable our sites or a third party to recognize you. Cookies can be used to collect, store and share information about your activities on various websites, including our sites. We use cookies to enable certain features and store your preferences (for example, language or currency preferences) and to analyze user behavior in order to improve the user experience on our site.

Both session cookies and permanent cookies are used on our pages. A session cookie is used to identify a particular visit to our pages. These cookies expire after a short time or when you close your web browser after using our pages. We use these cookies to identify you during a single browsing session, for example when you log on to our sites. A permanent cookie remains on your devices for a period of time specified in the cookie. We use these cookies if we need to identify you over a longer period of time.

We cannot offer our site experience without storing cookies at that time. Therefore, if you continue to use our sites, you agree that we may store a cookie. However, if you do not like the idea of cookies or certain types of cookies, you can change your browser settings so that cookies already placed are deleted and no new cookies are accepted. Please refer to the help pages of your browser for more information.

However, please note that if you delete or do not accept cookies, you may not be able to use all the features we offer, you may not be able to save your preferences, and some of our pages may not be displayed correctly.

On our website there is the possibility to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us, i.e. your name and/or your e-mail address.

In addition, the following data is collected during registration:

  1. IP address of the calling computer

  2. Date and time of registration

If you purchase goods or services on our website and enter your e-mail address, we may subsequently use this to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter.

We process the aforementioned personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

  • For fulfilment of contractual obligations (Article 6 para 1 b GDPR)
    Personal data is processed to fulfill contractual and pre-contractual obligations, such as the execution of transactions that you have requested or the fulfillment of orders that you have placed, including orders that you have placed with us through third party font manufacturers.

  • In the context of the balancing of interests (Article 6 para 1 f GDPR)
    As far as necessary, we process your data beyond the actual fulfilment of the contract in order to protect legitimate interests of us or third parties. Examples:

    • Consultation of and data exchange with credit agencies (e.g. SCHUFA) to determine creditworthiness or default risks

    • Reply to or process your comments, reviews, inquiries, including product inquiries and other requests;

    • Deliver targeted advertising, videos, messages, product solutions and content;

    • Ensure compliance with the terms of any agreements you have entered into with us;

    • Prevention of fraud in connection with certain products or services offered by us;

    • Research and analysis activities in connection with our business or pages;

    • Provision of information to third party brands about your interaction with our sites in connection with such third party brands;

    • Improve our sites and customize the sites to your use or preferences;

    • Communicate with you about sweepstakes, contests, coupons, product and prize promotions or other matters in which you have participated or about which you have requested information;

    • Implementation of social networking features that you have activated;

    • Publish your reviews, comments, photos, videos, and other content that you have posted on any of our interactive or user-generated features

    • communicating with you about your account or your use of our sites, including providing customer service

    • Enforcing the terms of use of our sites or otherwise managing our business;

    • Sending you promotional messages by email or SMS which we think may be of interest to you and/or invitations to events, both in cases where you have opted to receive such messages and in cases where you have not opted out of receiving such messages; and/or

    • Sending important communications about your use of our site, our products or services.

  • On the basis of your consent (Article 6 para. 1 a GDPR)
    If you have given us your consent to process personal data for specific purposes (e.g. transfer of data within the association/group), the legality of this processing is based on your consent. Any consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before GDPR came into force, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing operations that took place before the revocation are not affected by this.

  • Due to legal requirements (Article 6 para. 1 c GDPR)
    We are also subject to various commercial and tax law related statutory archive requirements for business documents.

We do not sell or rent your personal data to third parties. We share your personal information with our subsidiaries and affiliated companies.

In addition, we provide and receive certain content from our Sites through and/or using third party applications, our programming interfaces or third party programming interfaces, extensions hosted on our Sites or through other third party websites, social and professional networking platforms and/or news platforms. When you use our Sites or otherwise participate in our services, products or applications, or connect to, or "accept" or "accept" third party applications, networks, platforms or services through our Sites, you are consenting to these third parties receiving your information and also (based on your privacy or other settings on the third party’s network or platform) potentially sharing any or all of your information with us. Such information sharing is for the following purposes:

  • Research and/or analysis activities regarding our sites, market trends, our products and services and other topics;

  • Allow third party font manufacturers - from whom you may have licensed a font through us - to provide you with customer service, respond to your inquiries or resolve product issues;

  • Allow service providers to provide their services in connection with some of our sites;

  • prevent parties from sending promotional communications on our behalf to persons who have asked us not to send them such communications; and/or

  • if you have opted to receive promotional communications from us, the sending of customized promotional communications which together offer a product or service.

We rely on third party service providers to perform various services on our behalf and may disclose your personal information to such service providers. These service providers include, but are not limited to, fulfillment services, business information providers, advertisers, customer service providers, delivery services, e-commerce providers, credit card or other payment processors, and research and analysis providers. We do not allow these third parties to use your personal information for any purpose other than the purpose for which it was provided and we do not allow these third parties to disclose such information to unauthorized parties.

Below is a list of the third parties we work with to provide the Sites, a list of the personal information we send to each partner, and the purpose of any such transfer:
Category/PartnerPersonally Identifiable Information TransferredPurpose of Transfer
Analytics Partners
Google AnalyticsSee description below in section entitled “What other technologies do you use?”Internal Analytics
Heap AnalyticsSee description below in section entitled “What other technologies do you use?”Internal Analytics
FullStorySee description below in section entitled “What other technologies do you use?”Internal Analytics
ClaritySee description below in section entitled “What other technologies do you use?”Internal Analytics
Firebase Analytics and Crashlytics (MyFonts mobile application)See description below in section entitled “What other technologies do you use?”Internal Analytics
Delighted User Testing.comE-mail address, geo-locationInternal Analytics, Services Improvement
QualtricsE-mail address, geo-location, IP addressInternal Analytics
ClearbitIP addressInternal Analytics
DemandbaseIP address, browser informationInternal Analytics
Payment Gateway and Processing Partners
PayPalName, E-mail addressCustomer Payment Processing
Ingenico (Ogone)Credit card number, credit card code, credit card expiration, billing Name, billing AddressCustomer Payment Processing
CyberSourceName, e-mail address, billing address, credit card number, credit card code, credit card expiration, IP addressCustomer Payment Processing
Western UnionName, e-mail address, address, banking account numbersRoyalty Payment Processing
Bank of AmericaName, e-mail address, address, banking account numbersRoyalty Payment Processing
Marketing Partners
Google AdwordsGeo-location, IP addressAdvertising Retargeting
NextRollGeo-location, IP address See description below in section entitled ‘Do we participate in interest-based advertising programs?’ for additional informationAdvertising Retargeting
SendGridName, e-mail address, IP addressE-mail Marketing
SailthruName, e-mail address, IP addressE-mail Marketing
ReachdeskName, e-mail address, IP addressE-mail Marketing
Salesforce Marketing CloudName, e-mail addressE-mail Marketing
Brite VerifyE-mail addressE-mail Marketing
Mail ChimpName, e-mail address, IP address, geo-locationE-mail Marketing
ZeroBounceName, address, e-mail address, location, IP addressE-mail Marketing
PrivyName, e-mail address, IP address, device and browser informationE-mail Marketing
IntercomUser name, password, email address, IP address as well as customer attribute data, website page view data, click data and social media informationWeb Conversational Marketing
MaxMindE-mail domain, addressFraud Prevention
Salesforce Service CloudName, e-mail address, address, telephone numberProvision of Customer Service
Internal Technology Partners
Amazon Web Services, Inc.Address, e-mail address, IP address, location, name, telephone number, timestampExternal data storage on Amazon Web Servers
Auth0E-Mail address, SSO informationSSO Service Provider
CloudflareAddress, e-mail address, IP address, location, name, telephone number, timestampWeb Application Firewall
ShopifyName, address, billing information, e-mail address, telephone number, IP address, timestampE-Commerce Solution
Verizon Digital Media Services Inc.IP addressExternal content distribution network
CRM Systems
SalesforceName, address, e-mail address, telephone numberCustomer relationship maintenance (customer database)
Insight SquaredName, address, e-mail address, telephone numberCustomer relationship maintenance (customer database)
SAPName, address, e-mail address, telephone number, payment informationCustomer relationship maintenance (customer database for billing)
CloudFactory International LimitedName, title, job function (department), seniority (manager, director, c-level, etc), emailCustomer relationship maintenance (customer database)
SplashName, address, e-mail address, telephone number, device informationCustomer relationship maintenance (event management)

What guarantees have been agreed for data protection?
When we share your personal information with third parties, we require such third parties to maintain the confidentiality of your personal information, to comply with applicable laws regarding the sharing of personal information, and we do not allow such third parties to use the personal information we provide for their direct marketing purposes unless we have given you an explicit opportunity to consent or decline such sharing.

Do we transfer data to other countries?
Data is only transferred to countries outside the EU or the EEA (so-called third countries), as far as this is necessary for the execution of your orders, legally required, you have given us your consent or in the context of an order data processing.

Third parties commissioned by us who process your personal data outside the EEA are contractually obliged to comply with standards that guarantee a level of data protection equivalent to that applicable in the European Union. The third parties are either bound by data processing agreements that include the EU standard contractual clauses or are certified under the US-EU Privacy Shield.

Do we participate in interest-based advertising programs?
Yes, we may place a unique cookie on your browser or recognize when you access some of our pages or use some of our pages to display customized advertising (also known as "online behavioral advertising"). We also allow third party companies to place their own cookies on your browser when you visit our sites so that they can collect information. This may include personally identifiable information, information about your online activities over time and on various pages, and the display of customized advertisements when you browse the Internet.

These third parties can participate in the Digital Advertising Alliance’s self-regulatory program for behavior-based online advertising. Under this program, customized advertisements may be displayed with an AdChoices-symbol help you better understand how information about you is used and to give you the opportunity to opt-out of such customized behavioral advertising. You can click the AdChoices icon to learn more about your choices regarding interest-based advertising. From a mobile device, you can visit the Digital Advertising Alliance’s AppChoices-Website d and download a free app that allows you to set preferences for data collection and use on different mobile apps. You can also opt-out of receiving personalized ads from third-party advertisers and advertising networks that are members of the Network Advertising Initiative visiting the opt-out page on their website.

Some browsers have a "do-not-track" feature that allows you to tell web sites that you do not want your online activity tracked. Only some of our sites are currently set to respond to these signals. However, sites that are set to not respond to a "do not track" setting will give you other choices and options described in this Privacy Policy regarding our various types of advertisements and communications in connection with electronic marketing.

What other technologies do we use?
Clear gifs
Some of our sites use software technology called "clear gifs" (or web beacons/web bugs) that helps us better manage our content and newsletters by telling us what content is effective. "Clear gifs" are tiny graphics with a unique identifier and are similar in function to cookies. Unlike cookies, which are stored on a user’s hard drive, "clear gifs" are invisible on web pages and embedded in emails and are about the size of the dot at the end of this sentence. We do not associate the information collected by "clear gifs" with the personally identifiable information of our customers. We use "clear gifs" in our HTML-based emails to help us learn which emails have been opened by recipients. This allows us to measure the effectiveness of certain communications and the effectiveness of our marketing campaigns.

Google Analytics
Some of our pages use "Google Analytics" to collect data on the use of such pages. For example, Google Analytics collects data on how often users visit this site, which pages they visit and which other pages they viewed before coming to this site. We use the data we receive from Google Analytics solely for the purpose of improving the pages. Google Analytics only collects the IP address assigned to you on the date you visit this site, not your name or other identifying information. We do not combine the data collected through the use of Google Analytics with personally identifiable information. Although Google Analytics places a permanent cookie on your web browser to identify you as a unique user the next time you visit the site, the cookie cannot be used by anyone other than Google. Google’s ability to use and share information collected by Google Analytics about your visits to this site is limited by the Google Analytics Terms of Use (as amended from time to time for government websites) and Google’s Privacy Policy. You can prevent Google Analytics from recognizing you when you return to a page by disabling the cookie or by installing a browser add-on to disable Google Analytics.

Heap Analytics
Some of our pages use Heap Analytics, a web analytics service provided by Heap Inc, 460 Bryant St., Suite 300, San Francisco, CA 94107, USA ("Heap"). Heap uses cookies to help the website analyze how users use the website. The data generated by the cookie about your use of the website is transferred to Heap and stored by Heap on servers in the USA. If IP anonymization is activated on the respective website, your IP address in member states of the European Union or in other signatory states to the Agreement on the European Economic Area ("EEA") will be shortened by Heap beforehand. A complete IP address is transmitted to a heap server in the USA and is only shortened there in exceptional cases. Heap uses this data for the purpose of evaluating your use of a website, compiling reports on website activity for website operators and providing other services to website operators in connection with website activity and internet usage. You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of a page to their full extent. You can prevent Heap from recording the data generated by the cookie in connection with your use of our pages (including your IP address) or the processing of this data by deactivating cookies in your browser.

Some of our Sites use Microsoft Clarity, an analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Clarity is a technology service that helps us with our legitimate interest to understand our users’ experience (e.g. how much time they spend on the Sites, which links they choose to click, what users do and do not like on the Sites, etc.) and enables us to build and maintain our Sites with user feedback. Clarity uses cookies and other technologies to collect data about our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers, browser information, geographic location (country only), and the preferred language used to display our Sites. Clarity stores this information in a pseudonymized user profile. Microsoft through Clarity collects or receives personal data from you to provide Microsoft Advertising as detailed in the Microsoft Privacy Statements:

Is there an obligation to provide the data?
If you do not enter into a contractual relationship with us, there is no obligation on your part to provide us with data.

Is there automated decision making or profiling?
We do not carry out any automated decision making on the basis of your personal data which has a legal effect on you or which may have a considerable effect on you in a similar way (Art.22 GDPR).

We process your data partly automatically with the aim of evaluating certain personal aspects (Profiling). We use Profiling, for example, to provide you with targeted information and advice on products, we use evaluation tools. These enable communication and advertising to be tailored to your needs, including market and opinion research.

In accordance with Chapter III of the GDPR, you have the right of access to the data stored about you, the right to have incorrect data corrected, the right to have your data deleted or to have processing restricted, the right to object to processing, the right to data portability and the right to withdraw any consent given, if you have given such consent.

You have the right to complain to the Bavarian or any other data protection supervisory authority if you believe that our company is handling your data illegally or improperly.

Version August 2021