Privacy Policy

Datenschutzerklärung — last updated 19 October 2026

1. Who is responsible

The controller responsible for processing personal data on this website under the EU General Data Protection Regulation (GDPR) is:

Rosalie Wagner
c/o Distaff Studio
Friesenstr. 18
10965 Berlin
Germany
E-mail: mailyoyo@rosaliewagner.com

See also the Impressum.

2. Hosting and server log files

This website is hosted by OVH GmbH, a subsidiary of the OVH SAS group (registered in the Lille trade and companies register under no. 537 407 926, 2 rue Kellermann, 59100 Roubaix, France). When you visit the site, your browser automatically sends information that the server stores in log files: IP address, date and time of the request, page requested, referring page, browser and operating system. This is technically necessary to deliver the website and to keep it secure.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). The log files are kept for a limited period set by the host and then deleted. OVH processes this data on my behalf under a data processing agreement.

3. Cookies and tracking

This website uses no analytics, no advertising and no tracking. The only cookie is a technically necessary session cookie on the workshop access page (see section 4). It keeps your access open for a few hours after you complete the form and is deleted when it expires or when you sign out. It requires no consent (§ 25(2) TDDDG).

4. Font Production Database: access form

To give access to the Font Production Database and document the licence, the access form collects:

Purpose: to grant and manage your access, to send you a copy of your licence by e-mail, and to be able to prove that the licence was accepted. Legal basis: Art. 6(1)(b) GDPR (performance of the licence agreement) and Art. 6(1)(f) GDPR (legitimate interest in documenting the licence and protecting my rights).

The data is stored on the web server in a protected file that is not publicly accessible, and a copy is sent to my e-mail inbox. The confirmation e-mails are sent through the e-mail service of OVH. The data is not shared with anyone else and is not used for marketing.

Storage period: for as long as your licence exists, and afterwards until the end of the statutory limitation period for claims arising from it (generally three years from the end of the year in which access ended). Data that is part of an invoice is kept as required by tax law (up to ten years).

5. Embedded Notion pages

The workshop page and the type-links page display pages hosted on Notion, a service of Notion Labs, Inc., San Francisco, USA. When such a page is shown, your browser connects to Notion’s servers, which receive your IP address and browser information. Notion may set its own cookies. Data may be transferred to the USA; Notion states that it relies on the EU–US Data Privacy Framework and/or the EU standard contractual clauses for such transfers.

Legal basis: for the workshop page, Art. 6(1)(b) GDPR (providing the Database you have licensed); for the type-links page, Art. 6(1)(f) GDPR (legitimate interest in presenting the content in an easy-to-maintain way). More information: Notion’s privacy policy.

6. Font Testing Page

Fonts you drop into the Font Testing Page are opened and displayed locally in your browser. They are not uploaded to the server. Some settings may be stored in your browser’s local storage, on your own device only.

The page loads the open-source library opentype.js from the jsDelivr content delivery network, which receives your IP address and browser information when the file is requested. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a reliable delivery of the tool).

7. Contact by e-mail

If you write to me, I process your e-mail address and the content of your message to answer you. Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR. Messages are deleted when they are no longer needed, unless legal retention periods apply.

8. Your rights

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). To exercise these rights, write to the e-mail address above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for me: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

9. Changes

I may update this privacy policy when the website or the legal requirements change. The current version is always available on this page.