Privacy Details
Privacy POLICY
Please Read This Privacy Policy Carefully Before Using the Sanrio.eu Site
Sanrio, GmbH (“Sanrio,” “we,” “us“, “our“) provides www.sanrio.eu (the “Site“). We are committed to safeguarding all personal information we collect through our Site and to explaining the choices you (“users,” “you” or “your“) can make as well as the rights you have with respect to the collection and use of your “Personal Data” (i.e. any information that can be traced back to you or used to identify you, including identifiers such as your full name, home address, telephone number and e-mail address but also cookie IDs and IP addresses) on or through the Site. This Privacy Policy governs your interaction with the Site, and your registration for and use of the Site. Except as set forth within this Privacy Policy and our Terms of Use and other published guidelines, we do not release personal data about our users without their prior consent.
Controller
Sanrio GmbH
Registered address:
Zwischen den Toren 9
21465 Wentorf bei Hamburg
Tel.: +49 (0)40 54 77 96 – 0
Fax: +49 (0)40 54 77 96 – 10
Email: [email protected]
Data Protection Officer
Contact details: [email protected]
1. Introduction
Generally, we do not collect any Personal Data unless you voluntarily provide it to us e.g. by visiting the Site. While you may use some of the functionality of the Site without registration, some of the activities and services might require you to subscribe or create an account. If you do not subscribe or create an account on or through the Site, the only information we collect will be general information for the technical provision of the website and through the use of “Cookies” (see further information below under 2.1 and 2.2)
2. The Data We Gather
Sanrio gathers the following Personal Data about its users:
2.1. General information
When users come to the Site, we also collect and aggregate information indicating, among other things, which pages of the Site were visited, the order in which they were visited and which hyperlinks were “clicked.” Collecting such information involves the logging of the IP addresses, operating system and browser software used by each user to the Site. We can determine from an IP address a user’s Internet Service Provider and the geographic location of his or her point of connectivity. If you choose to subscribe or create an account through the Site, we may require you to submit Personal Data.
2.2. Cookies
We also use “Cookies” (i.e. small data files that are stored on the hard drive of a computer used to view web sites that are accessible only by the party or site that placed the Cookie on the hard drive) to help us determine the type of content and sites to which a user to the Site links, the length of time each user spends at any particular area of the Site and the specific functionality that users choose to use. Essentially, Cookies are a user’s identification card for the Sanrio.eu servers. Cookies are only read by the server that placed them, and are unable to execute any code or virus. Cookies allow us to serve you better and more efficiently, and to personalize your experience at the Site. Cookies also may be used to facilitate a user’s log-in.
You are also able to control how and whether Cookies will be accepted by your web browser. Most browsers offer instructions on how to reset the browser to reject Cookies in the “Help” section of the toolbar. If you reject our Cookies, certain of the functions and conveniences of the Site may not work properly, but you can opt-out and do not have to accept our Cookies in order to productively use the Site.
2.3. Other information
We collect Personal Data that you provide to us when you create an account, make purchases in our online store, subscribe to e-mail newsletters, send e-cards or e-mail to friends, participate in contents, sweepstakes and other promotions, or participate in online polls and surveys.
(a) Subscribing to Newsletters. You may subscribe to the “Hello Kitty’s Sweet Happy News” and other e-mail newsletters offered by us. “Hello Kitty’s Sweet Happy News” is a monthly (occasionally bi-monthly) newsletter e-mailed to subscribers. When you subscribe to our “Hello Kitty’s Sweet Happy News” e-mail newsletter, we may ask for your first and last name, e-mail address, age, gender or favorite Sanrio character.
(b) Participating In Contests, Sweepstakes and Other Promotions. From time to time, Sanrio may offer you the opportunity to participate in a contest, sweepstakes or other promotion through the Site. If you desire to participate in any such contest, sweepstakes or other promotion, you will be asked to provide us with certain information necessary to conduct such contest, sweepstakes or other promotion. This information may include, among other things, your name, age, mailing address, e-mail address and phone number.
3. How We Use (and Do Not Use) the Information We Gather
Please take some time to familiarize yourself with the different purposes for which Sanrio uses the information that we gather.
This Privacy Policy serves as notice that Sanrio collects Personal Data in the manners described herein. In addition to the other uses set forth in this Privacy Policy, we may disclose and otherwise use Personal Data as described below when you create an account, subscribe to e-mail newsletters or participate in contents, sweepstakes and other promotions.
3.1. Creating an Account
Sanrio may use the Personal Data that we collect from you when you create an account for performing our contract with you if you enter into a contract with us (Art. 6 (1) lit. b) GDPR) or for our legitimate interests of improving our website and offers (Art. 6 (1) lit. f) GDPR) in particular, to contact you in connection with your use of the Site and to track who uses the various features and functionality offered at the Site. Additionally, we may use this information in order to determine the types of features, functionality, products and services to offer through the Site or otherwise, which is also in our legitimate interest as mentioned before.
3.2. Subscribing to Newsletters
Sanrio uses contact information collected during subscription to send you the newsletter in accordance with Art. 6 (1) lit. a) GDPR.
3.3. Participating In Contests, Sweepstakes and Other Promotions
Sanrio uses the Personal Data, if any, it may collect from you related to a contest, sweepstakes or other promotion through the Site for processing purposes. This Personal Data will not be re-used, sold or shared in any manner by Sanrio or any third parties unless you elect and give your explicit consent to receive additional information and promotional material from Sanrio and/or third parties. If a third party administers the contest, sweepstakes or other promotion, your participation may be subject to that third party’s terms and conditions, and privacy policy. Detailed information about these terms will be provided on the applicable form you will be asked to fill out.
3.4. Communications with Sanrio
When you send an e-mail message to or otherwise contact Sanrio, Sanrio may use the information provided by you as described in this Privacy Policy and/or to respond to your communication in accordance with Art. 6 (1) lit. b) GDPR if the communication is necessary to perform our contract with you and/or Art. 6 (1) lit. f) GDPR if it is in our legitimate economic interest to do so.
3.5. Disclosure to Sanrio Operations and Maintenance Contractors
Sanrio operations and maintenance contractors sometimes have limited access to your Personal Data in the course of providing products or services to Sanrio. These contractors include vendors and suppliers that provide us with technology, services, and/or content related to better operation and maintenance of the Site.
If you have opted-in to receiving e-mails and newsletters from Sanrio, these contractors also may have access to your e-mail address to send newsletters to you on our behalf. Access to your Personal Data by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for Sanrio. We also contractually require that our operations and maintenance contractors not use or disclose your Personal Data for any purpose other than providing us with products and services, that they secure your Personal Data with safeguards equivalent to our own safeguards.
3.6. Government Authorities; Legal Rights and Actions
Sanrio may share your Personal Data with various government authorities in response to subpoenas, court orders, or other legal obligations laid down by Union or Member State law to which Sanrio is subject in accordance with Art. 6 (1) lit. c) GDPR; to establish or exercise our legal rights and/or to defend against legal claims in accordance with Art. 6 (1) lit. f) GDRP; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us. We also may share your Personal Data when we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities and we are obliged to do so by Union or Member State law to which Sanrio is subject in accordance with Art. 6 (1) lit. c) GDPR or because it is in our legitimate economic interest to prevent such behavior in accordance with Art. 6 (1) lit. f) GDPR; to protect and defend the rights, property, or safety of the Site, which is in our legitimate commercial interest in accordance with Art. 6 (1) lit. f) GDPR, or to protect the vital interests of our users, customers, or other natural persons in accordance with Art. 6 (1) lit. d) GDPR; and in connection with our Terms of Use and other agreements.
In the event that we are legally compelled to disclose your Personal Data, we will attempt to notify you unless doing so would violate the law or court order.
4. Disclosure of Personal Data to Third Parties
Your Personal Data will only be transferred to third parties in the following cases or after you have given your explicit consent:
4.1. Google Analytics.
This website uses the “Google Analytics” service, which is offered by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) to analyze website usage by users. The service uses “cookies” – text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
IP anonymization applies to this website. The user’s IP address is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference to your IP address. As part of the agreement on the order data agreement that the website operator has concluded with Google Inc., the website operator uses the information collected to evaluate website usage and website activity and provides services related to internet usage.
You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
4.2. Use of social media plugins
This website uses Facebook Social Plugins, which is operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integration can be recognized by the Facebook logo or by the terms “Like”, “Like”, “Share” in the colors of Facebook (blue and white). You can find information on all Facebook plugins in the following link: https://developers.facebook.com/docs/plugins/
The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and scope of the data that the plugin transmits to the servers of Facebook Inc. You can find information on this here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that users have visited this website. There is a possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.
If you use the functions of the plugin – for example by sharing or “liking” a post – the corresponding information will also be transmitted to Facebook Inc.
Would you like to prevent the Facebook. Inc. linked this data to your Facebook account, please log out of Facebook before visiting this website.
This website also uses the “+1” button from Google Plus. This is operated by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). If you visit a page that contains the “+1” button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence on the nature and scope of the data that the plugin transmits to the servers of Google Inc. Click on the “+1” button while you are logged into Google+, share the content of the page on your public profile.
According to Google Inc., personal data is only collected when you click the button. The IP address is also saved, among other things, for logged-in Google users. If you would like to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.
You can find information on the “+1” button here: https://developers.google.com/+/web/buttons-policy
This website also uses Twitter buttons. These are operated by Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). If you visit a page that contains such a button, a direct connection is established between your browser and the Twitter servers. The website operator therefore has no influence over the nature and scope of the data that the plugin transmits to the Twitter Inc. server.
According to Twitter Inc., only your IP address is collected and saved.
Information on the handling of personal data by Twitter Inc. can be found here: https://twitter.com/privacy?lang=en
Instagram privacy policy
This data protection declaration contains more information on the processing of personal data when using the Instagram offer. https://www.instagram.com/invites/contact/?i=kr7ozfntxvne&utm_content=dsxqs2c .
Personal data is all information that relates to an identified or identifiable natural person. An identifiable person is a natural person who, directly or indirectly – in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person, can be identified (Art. 4 point 1 GDPR).
Responsible
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbor
Dublin 2 Ireland
[email protected]
Fax: +1 650 543 5340
as jointly responsible in accordance with Art. 26 GDPR and the Facebook page insights supplement https://www.facebook.com/legal/terms/page_controller_addendum
4.3. Mailchimp
We use Mailchimp, a platform of the US-provider Rocket Science Group LLC, 675 Ponce De Leon Ave NE no. 5000, Atlanta, GA 30308 USA, as a service provided by to store your contact details, this allows us to manage how we get in touch with you, and helps to plan and send out newsletter. It also helps ensure that we have an accurate database of details from which to contact you and provide you with information that we believe you may be interested in, which is in our legitimate interest (Art. 6 (1) lit. f. GDPR). Mailchimp may also transfer your data to third parties in accordance with its own privacy policy which I available fat the following link: https://mailchimp.com/legal/privacy/ . The Rocket Science Group LLC d/b/a Mailchimp is certified with the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield framework (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
If you no longer wish for your personal contact details to be stored using Mailchimp, please contact us at [email protected] and we will remove you from the system. Please note however that being removed from Mailchimp may result in you or your children no longer receiving communications from us.
5. Children’s Privacy
Sanrio requests that children consult with their parents before sending information to the Site. We encourage parents to monitor their children’s online activities, and to help us protect their privacy by instructing them never to provide their full name, address and other personal information without their parent’s permission.
6. Sanrio Security Procedures
The security and confidentiality of your information is extremely important to us. We have implemented technical, administrative, and physical security measures to protect your information from unauthorized access and improper use. From time to time, we review our security procedures in order to consider appropriate new technology and methods. Despite Sanrio’s efforts to protect your Personal Data, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet will be intercepted.
(a) Sanrio uses firewalls to protect information held in our servers.
(b) Sanrio utilizes Secure Socket Layer (SSL) encryption in transmitting Personal Data to our servers. In order to take advantage of encryption technology, you must have an Internet browser which supports 128-bit encryption.
(c) Sanrio closely monitors the limited number of Sanrio employees who have potential access to your Personal Data.
(d) Sanrio backs-up our systems to protect the integrity of your Personal Data.
7. Changes To This Privacy Policy
Please note that Sanrio reviews its privacy practices from time to time, and that these practices are subject to change. We will inform you about any substantive changes and updates to this policy by the means of communication that you have subscribed to or on this Website but also ask that you bookmark and periodically review this web page to ensure continuing familiarity with the most current version of our Privacy Policy.
| 8. Right to object
Where data processing is based on our legitimate interest, including profiling, you have the right to object, on grounds relating to your particular situation, at any time. Sanrio will no longer process the personal data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. |
9. Your rights and choices
You have the legal right to:
(a) request access to the Personal Data we hold about you;
(b) request rectification or erasure of the Personal Data we hold about you;
(c) obtain from Sanrio restriction of processing the Personal Data we hold about you where one of the reasons laid out in Art. 18 GDPR applies;
(d) object to processing;
(e) receive the personal data concerning you and that you have provided to Sanrio, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance.
(f) request that we stop using your personal data for direct marketing by withdrawing at any time from your prior opt-in.
You can exercise these rights by e-mailing us at [email protected]
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.
10. Questions, Comments or Concerns
To contact Sanrio about privacy issues, to report a violation of our Privacy Policy, or to raise any other issue, please e-mail us at [email protected].
