Data controller. The data controller responsible for data processing on this website is Iñigo Uriarte, Indigo Alphabets, Markgrafendamm 28, 10245 Berlin, Germany. Contact: hi@indigoindigo.org.
Data we collect. When you make a purchase, we collect your name, email address, and billing information. Payment is processed by Stripe (Stripe, Inc.), which handles your payment card details directly — we do not store your card information. When you visit our website, your browser automatically transmits certain technical data (IP address, browser type, access time) which our hosting provider Vercel processes for the purpose of delivering the website.
Legal basis. We process your data on the following legal bases under Art. 6 GDPR: (a) performance of a contract (Art. 6(1)(b)) — to process your purchase and deliver font files; (b) legitimate interests (Art. 6(1)(f)) — to operate and secure our website; (c) legal obligation (Art. 6(1)(c)) — to comply with tax and accounting requirements.
Third-party services. We use the following services: Stripe (payment processing, USA — EU Standard Contractual Clauses apply), Vercel (hosting, USA — EU Standard Contractual Clauses apply), and Google Fonts (typography, loaded from Google servers — your IP address is transmitted to Google). We do not use analytics or tracking tools.
Data retention. Purchase records are retained for the statutory retention period required by German tax law (10 years). Technical server logs are deleted automatically after 30 days. Download links expire after 48 hours.
Your rights. Under the GDPR you have the right to: access your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). To exercise these rights, contact hi@indigoindigo.org. You also have the right to lodge a complaint with the supervisory authority — Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Cookies. This website uses only technically necessary cookies (theme preference stored in localStorage). No tracking or marketing cookies are used. No consent is required for technically necessary cookies under § 25 TDDDG.
[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]