d7design

Privacy

Draft. Retention and legal bases are still open. The contact-form section is a placeholder and is not approved yet.

Controller

David Siebenförcher, D7design, sole proprietorship (Einzelunternehmen), Dreiheiligenstraße 3, 6020 Innsbruck, Österreich. Email: office@d7design.at.

License server

The server licence.d7design.at checks licenses for the D7versions plugin.

Data on the license server, as far as known
DataPurpose, as far as known
Email of the Adobe IDDemo activation and matching the license
userGuidIdentifier of the Adobe ID, so a running demo is resumed and not created again
Device IDMatching the check to an installation

Types: paid, promo, demo. Demo: 7 days. Offline grace period: 2 days. That is product behavior. This page does not claim that no data is created during those two days, or that data is deleted afterwards.

Purpose: check a license, start a demo, continue a still valid demo of the same Adobe ID.

Legal basis: [CONTRACT or another basis — qualified person]

Recipients: operator and host of licence.d7design.at — [HOST, PLACE]. Adobe, as far as the Adobe ID comes from there. Sales run through the Adobe Marketplace first.

Third country: [UNKNOWN, until the host is fixed]

Retention: [PERIOD or criterion]

Without this data there is no demo and no check. What happens after the 2-day offline grace period without a network belongs in the help.

Version report

In certain company installations, D7versions reports the installed version and the Adobe ID to d7design.at, only for version management. Nothing is sent for public users. We store the plugin key, plugin name, version, Adobe ID, and the first and last time in UTC, without the IP address, in a SQLite file outside the web root.

Website

Visiting d7design.at: the website runs on a server we rent from Hostinger International Ltd. (Cyprus) in the data centre in Frankfurt am Main, Germany. Hostinger processes data solely on our behalf under a data processing agreement (Art. 28 GDPR). The web server processes connection data (IP, time, requested URL) in server logs. Retention [PERIOD].

Contact by email to office@d7design.at or through the form. What the form processes is in the contact-form section. Retention [PERIOD].

Type: Schibsted Grotesk, IBM Plex Mono and Newsreader are hosted on this server. There is no request to Google Fonts. If a third-party service is added, it will be listed here.

No marketing cookies. A strictly necessary session cookie is set only for the interest-list form. It is described in the interest-list section.

Audience measurement with Plausible Analytics

We use the software “Plausible Analytics” (Community Edition) on this website to statistically analyse the use of our website and to improve it. We operate the software ourselves on a virtual server at stats.d7design.at. We rent this server from Hostinger; it is located in a data centre in Germany (Frankfurt am Main). Hostinger processes data solely on our behalf under a data processing agreement (Art. 28 GDPR). No data is passed on to any other third party.

Plausible does not set cookies and does not store any information on your device for recognition purposes. No persistent identifier is assigned; you are not tracked across websites or devices. When a page is loaded, the following data is processed: the page address (URL), the referring page (referrer), browser and operating-system type and device type (derived from the user agent), approximate location (country/region/city, derived from the IP address), time of the visit, and information on time spent on the page and scroll depth.

Your IP address and user agent are processed only briefly and are not stored in plain text. From them, a random identifier (hash) is formed using a key that changes daily, which allows visits within one day to be counted together; the keys are deleted after 48 hours at the latest. Recognition on other days is therefore not possible. Evaluation is aggregated.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in designing and improving our website as needed and in detecting technical errors. Statistics data is deleted after 24 months.

You can object to this processing at any time with effect for the future (Art. 21 GDPR): Opt out of audience measurement or by email to office@d7design.at. When you opt out, an entry “plausible_ignore” is saved in your browser (local storage) so that your visits are not recorded; this entry serves solely to honour your objection. If you delete it, measurement becomes active again.

Contact form

The form sends name, email address, the answers to three questions (What do you produce? How often? What costs the most time?) and the language of the page to office@d7design.at. Purpose: reply to the inquiry. An optional topic may be D7versions, D7catalog, D7server, Support or Agency.

Legal basis: [CONTRACT or another basis — qualified person]

Recipient: office@d7design.at. The form script runs on our server at Hostinger (Frankfurt am Main, Germany). The message is sent through the mail server of ALL-INKL.COM – Neue Medien Münnich (Germany) and arrives in the mailbox at ALL-INKL.COM, which acts as processor.

Retention: [PERIOD]

A hidden field is used against spam. If it is filled in, the message is dropped and not stored.

Interest list

If you sign up on the D7server, D7catalog or D7versions page, we store your signup so we can email you news about that product. We only write when there is news. You can withdraw your consent at any time.

Data: email address, language, product, signup time, confirmation time and the version of the consent text. Optionally company, role and, on D7server only, whether you run InDesign Server. Also the page the signup came from. We store only a hash of the confirmation token and of the unsubscribe token. To limit spam we store a hash of the IP address for 24 hours, not the address itself.

When the form loads we set a session cookie. It checks that the signup comes from our page and is not used for statistics.

Storage location: a SQLite file on our server at Hostinger (Frankfurt am Main, Germany), outside the public web root. The form script runs there as well. We send the confirmation emails through the mail server of ALL-INKL.COM – Neue Medien Münnich (Germany).

Retention: without confirmation we delete the entry after 30 days. A confirmed entry stays until you unsubscribe. The unsubscribe link in every email deletes the entry completely. We delete the IP hashes after 24 hours.

Legal basis: [CONSENT — qualified person]

A hidden field is used against spam. If it is filled in, we do not store the signup.

Rights

Access, rectification, erasure, restriction, portability, objection — in each case as far as the GDPR provides them. Complaint to the Austrian data protection authority.

Status

[DATE of approval]