Privacy Details

Privacy POLICY

Please Read This Privacy Policy Carefully Before Using the Site

Sanrio, GmbH (“Sanrio,” “we,” “us“, “our“) provides  (the “Site“). We are committed to safeguarding all personal information we collect through our Site and to explaining the choices you (“users,” “you” or “your“) can make as well as the rights you have with respect to the collection and use of your “Personal Data” (i.e. any information that can be traced back to you or used to identify you, including identifiers such as your full name, home address, telephone number and e-mail address but also cookie IDs and IP addresses) on or through the Site. This Privacy Policy governs your interaction with the Site, and your registration for and use of the Site. Except as set forth within this Privacy Policy and our Terms of Use and other published guidelines, we do not release personal data about our users without their prior consent.


Sanrio GmbH
Registered address:
Zwischen den Toren 9
21465 Wentorf bei Hamburg

Tel.: +49 (0)40 54 77 96 – 0
Fax: +49 (0)40 54 77 96 – 10
Email: [email protected]

Data Protection Officer

Contact details: [email protected]

1. Introduction

Generally, we do not collect any Personal Data unless you voluntarily provide it to us e.g. by visiting the Site. While you may use some of the functionality of the Site without registration, some of the activities and services might require you to subscribe or create an account. If you do not subscribe or create an account on or through the Site, the only information we collect will be general information for the technical provision of the website and through the use of “Cookies” (see further information below under 2.1 and 2.2)

2. The Data We Gather

Sanrio gathers the following Personal Data about its users:

2.1. General information

When users come to the Site, we also collect and aggregate information indicating, among other things, which pages of the Site were visited, the order in which they were visited and which hyperlinks were “clicked.” Collecting such information involves the logging of the IP addresses, operating system and browser software used by each user to the Site.  We can determine from an IP address a user’s Internet Service Provider and the geographic location of his or her point of connectivity. If you choose to subscribe or create an account through the Site, we may require you to submit Personal Data.

2.2. Cookies

We also use “Cookies” (i.e. small data files that are stored on the hard drive of a computer used to view web sites that are accessible only by the party or site that placed the Cookie on the hard drive) to help us determine the type of content and sites to which a user to the Site links, the length of time each user spends at any particular area of the Site and the specific functionality that users choose to use. Essentially, Cookies are a user’s identification card for the servers. Cookies are only read by the server that placed them, and are unable to execute any code or virus. Cookies allow us to serve you better and more efficiently, and to personalize your experience at the Site. Cookies also may be used to facilitate a user’s log-in.

You are also able to control how and whether Cookies will be accepted by your web browser. Most browsers offer instructions on how to reset the browser to reject Cookies in the “Help” section of the toolbar. If you reject our Cookies, certain of the functions and conveniences of the Site may not work properly, but you can opt-out and do not have to accept our Cookies in order to productively use the Site.

2.3. Other information

We collect Personal Data that you provide to us when you create an account, make purchases in our online store, subscribe to e-mail newsletters, send e-cards or e-mail to friends, participate in contents, sweepstakes and other promotions, or participate in online polls and surveys.

 (a) Subscribing to Newsletters. You may subscribe to the “Hello Kitty’s Sweet Happy News” and other e-mail newsletters offered by us. “Hello Kitty’s Sweet Happy News” is a monthly (occasionally bi-monthly) newsletter e-mailed to subscribers. When you subscribe to our “Hello Kitty’s Sweet Happy News” e-mail newsletter, we may ask for your first and last name, e-mail address, age, gender or favorite Sanrio character.

 (b) Participating In Contests, Sweepstakes and Other Promotions. From time to time, Sanrio may offer you the opportunity to participate in a contest, sweepstakes or other promotion through the Site. If you desire to participate in any such contest, sweepstakes or other promotion, you will be asked to provide us with certain information necessary to conduct such contest, sweepstakes or other promotion. This information may include, among other things, your name, age, mailing address, e-mail address and phone number.

3. How We Use (and Do Not Use) the Information We Gather

Please take some time to familiarize yourself with the different purposes for which Sanrio uses the information that we gather.

This Privacy Policy serves as notice that Sanrio collects Personal Data in the manners described herein. In addition to the other uses set forth in this Privacy Policy, we may disclose and otherwise use Personal Data as described below when you create an account, subscribe to e-mail newsletters or participate in contents, sweepstakes and other promotions.

3.1. Creating an Account

Sanrio may use the Personal Data that we collect from you when you create an account for performing our contract with you if you enter into a contract with us (Art. 6 (1) lit. b) GDPR) or for our legitimate interests of improving our website and offers (Art. 6 (1) lit. f) GDPR) in particular, to contact you in connection with your use of the Site and to track who uses the various features and functionality offered at the Site. Additionally, we may use this information in order to determine the types of features, functionality, products and services to offer through the Site or otherwise, which is also in our legitimate interest as mentioned before.

3.2. Subscribing to Newsletters

Sanrio uses contact information collected during subscription to send you the newsletter in accordance with Art. 6 (1) lit. a) GDPR.

3.3. Participating In Contests, Sweepstakes and Other Promotions

Sanrio uses the Personal Data, if any, it may collect from you related to a contest, sweepstakes or other promotion through the Site for processing purposes. This Personal Data will not be re-used, sold or shared in any manner by Sanrio or any third parties unless you elect and give your explicit consent to receive additional information and promotional material from Sanrio and/or third parties. If a third party administers the contest, sweepstakes or other promotion, your participation may be subject to that third party’s terms and conditions, and privacy policy. Detailed information about these terms will be provided on the applicable form you will be asked to fill out.

3.4. Communications with Sanrio

When you send an e-mail message to or otherwise contact Sanrio, Sanrio may use the information provided by you as described in this Privacy Policy and/or to respond to your communication in accordance with Art. 6 (1) lit. b) GDPR if the communication is necessary to perform our contract with you and/or Art. 6 (1) lit. f) GDPR if it is in our legitimate economic interest to do so.

3.5. Disclosure to Sanrio Operations and Maintenance Contractors

Sanrio operations and maintenance contractors sometimes have limited access to your Personal Data in the course of providing products or services to Sanrio. These contractors include vendors and suppliers that provide us with technology, services, and/or content related to better operation and maintenance of the Site.

If you have opted-in to receiving e-mails and newsletters from Sanrio, these contractors also may have access to your e-mail address to send newsletters to you on our behalf. Access to your Personal Data by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for Sanrio. We also contractually require that our operations and maintenance contractors not use or disclose your Personal Data for any purpose other than providing us with products and services, that they secure your Personal Data with safeguards equivalent to our own safeguards.

 3.6. Government Authorities; Legal Rights and Actions

Sanrio may share your Personal Data with various government authorities in response to subpoenas, court orders, or other legal obligations laid down by Union or Member State law to which Sanrio is subject in accordance with Art. 6 (1) lit. c) GDPR; to establish or exercise our legal rights and/or to defend against legal claims in accordance with Art. 6 (1) lit. f) GDRP; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us. We also may share your Personal Data when we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities and we are obliged to do so by Union or Member State law to which Sanrio is subject in accordance with Art. 6 (1) lit. c) GDPR or because it is in our legitimate economic interest to prevent such behavior in accordance with Art. 6 (1) lit. f) GDPR; to protect and defend the rights, property, or safety of the Site, which is in our legitimate commercial interest in accordance with Art. 6 (1) lit. f) GDPR, or to protect the vital interests of our users, customers, or other natural persons in accordance with Art. 6 (1) lit. d) GDPR; and in connection with our Terms of Use and other agreements.

In the event that we are legally compelled to disclose your Personal Data, we will attempt to notify you unless doing so would violate the law or court order.

4. Disclosure of Personal Data to Third Parties

Your Personal Data will only be transferred to third parties in the following cases or after you have given your explicit consent:

4.1. Google Analytics.

This Site uses Google Analytics, a web analytics service provided by Google, LLC. (“Google”). Google Analytics uses Cookies in order to give us the possibility to receive a better understanding of your experience at our Site which is in our legitimate interest (Art. 6 (1) lit. f. GDPR)). Your data will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating use of the Site, compiling reports on Site activity for us, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties in accordance with its own privacy policy, which is available at

You can prevent the storage of data relating to your use of the website and created via the cookie (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: .


We use Mailchimp, a platform of the US-provider Rocket Science Group LLC, 675 Ponce De Leon Ave NE no. 5000, Atlanta, GA 30308 USA, as a service provided by to store your contact details, this allows us to manage how we get in touch with you, and helps to plan and send out newsletter. It also helps ensure that we have an accurate database of details from which to contact you and provide you with information that we believe you may be interested in, which is in our legitimate interest (Art. 6 (1) lit. f. GDPR). Mailchimp may also transfer your data to third parties in accordance with its own privacy policy which I available fat the following link: . The Rocket Science Group LLC d/b/a Mailchimp is certified with the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield framework (

If you no longer wish for your personal contact details to be stored using Mailchimp, please contact us at [email protected] and we will remove you from the system. Please note however that being removed from Mailchimp may result in you or your children no longer receiving communications from us.

5. Children’s Privacy

Sanrio requests that children consult with their parents before sending information to the Site. We encourage parents to monitor their children’s online activities, and to help us protect their privacy by instructing them never to provide their full name, address and other personal information without their parent’s permission.

6. Sanrio Security Procedures

The security and confidentiality of your information is extremely important to us. We have implemented technical, administrative, and physical security measures to protect your information from unauthorized access and improper use. From time to time, we review our security procedures in order to consider appropriate new technology and methods. Despite Sanrio’s efforts to protect your Personal Data, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet will be intercepted.

(a) Sanrio uses firewalls to protect information held in our servers.

(b) Sanrio utilizes Secure Socket Layer (SSL) encryption in transmitting Personal Data to our servers. In order to take advantage of encryption technology, you must have an Internet browser which supports 128-bit encryption.

(c) Sanrio closely monitors the limited number of Sanrio employees who have potential access to your Personal Data.

(d) Sanrio backs-up our systems to protect the integrity of your Personal Data.

7. Changes To This Privacy Policy

Please note that Sanrio reviews its privacy practices from time to time, and that these practices are subject to change. We will inform you about any substantive changes and updates to this policy by the means of communication that you have subscribed to or on this Website but also ask that you bookmark and periodically review this web page to ensure continuing familiarity with the most current version of our Privacy Policy.

8. Right to object

Where data processing is based on our legitimate interest, including profiling, you have the right to object, on grounds relating to your particular situation, at any time. Sanrio will no longer process the personal data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

9. Your rights and choices

You have the legal right to:

(a) request access to the Personal Data we hold about you;

(b) request rectification or erasure of the Personal Data we hold about you;

(c) obtain from Sanrio restriction of processing the Personal Data we hold about you where one of the reasons laid out in Art. 18 GDPR applies;

(d) object to processing;

(e) receive the personal data concerning you and that you have provided to Sanrio, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance.

(f) request that we stop using your personal data for direct marketing by withdrawing at any time from your prior opt-in.

You can exercise these rights by e-mailing us at [email protected]

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.

10. Questions, Comments or Concerns

To contact Sanrio about privacy issues, to report a violation of our Privacy Policy, or to raise any other issue, please e-mail us at [email protected].