Zwischen den Toren 9
21465 Wentorf bei Hamburg
Tel.: +49 (0)40 54 77 96 – 0
Fax: +49 (0)40 54 77 96 – 10
Email: [email protected]
Data Protection Officer
Contact details: [email protected]
Generally, we do not collect any Personal Data unless you voluntarily provide it to us e.g. by visiting the Site. While you may use some of the functionality of the Site without registration, some of the activities and services might require you to subscribe or create an account. If you do not subscribe or create an account on or through the Site, the only information we collect will be general information for the technical provision of the website and through the use of “Cookies” (see further information below under 2.1 and 2.2)
2. The Data We Gather
Sanrio gathers the following Personal Data about its users:
2.1. General information
When users come to the Site, we also collect and aggregate information indicating, among other things, which pages of the Site were visited, the order in which they were visited and which hyperlinks were “clicked.” Collecting such information involves the logging of the IP addresses, operating system and browser software used by each user to the Site. We can determine from an IP address a user’s Internet Service Provider and the geographic location of his or her point of connectivity. If you choose to subscribe or create an account through the Site, we may require you to submit Personal Data.
We also use “Cookies” (i.e. small data files that are stored on the hard drive of a computer used to view web sites that are accessible only by the party or site that placed the Cookie on the hard drive) to help us determine the type of content and sites to which a user to the Site links, the length of time each user spends at any particular area of the Site and the specific functionality that users choose to use. Essentially, Cookies are a user’s identification card for the Sanrio.eu servers. Cookies are only read by the server that placed them, and are unable to execute any code or virus. Cookies allow us to serve you better and more efficiently, and to personalize your experience at the Site. Cookies also may be used to facilitate a user’s log-in.
You are also able to control how and whether Cookies will be accepted by your web browser. Most browsers offer instructions on how to reset the browser to reject Cookies in the “Help” section of the toolbar. If you reject our Cookies, certain of the functions and conveniences of the Site may not work properly, but you can opt-out and do not have to accept our Cookies in order to productively use the Site.
2.3. Other information
We collect Personal Data that you provide to us when you create an account, make purchases in our online store, subscribe to e-mail newsletters, send e-cards or e-mail to friends, participate in contents, sweepstakes and other promotions, or participate in online polls and surveys.
(a) Subscribing to Newsletters. You may subscribe to the “Hello Kitty’s Sweet Happy News” and other e-mail newsletters offered by us. “Hello Kitty’s Sweet Happy News” is a monthly (occasionally bi-monthly) newsletter e-mailed to subscribers. When you subscribe to our “Hello Kitty’s Sweet Happy News” e-mail newsletter, we may ask for your first and last name, e-mail address, age, gender or favorite Sanrio character.
(b) Participating In Contests, Sweepstakes and Other Promotions. From time to time, Sanrio may offer you the opportunity to participate in a contest, sweepstakes or other promotion through the Site. If you desire to participate in any such contest, sweepstakes or other promotion, you will be asked to provide us with certain information necessary to conduct such contest, sweepstakes or other promotion. This information may include, among other things, your name, age, mailing address, e-mail address and phone number.
3. How We Use (and Do Not Use) the Information We Gather
Please take some time to familiarize yourself with the different purposes for which Sanrio uses the information that we gather.
3.1. Creating an Account
Sanrio may use the Personal Data that we collect from you when you create an account for performing our contract with you if you enter into a contract with us (Art. 6 (1) lit. b) GDPR) or for our legitimate interests of improving our website and offers (Art. 6 (1) lit. f) GDPR) in particular, to contact you in connection with your use of the Site and to track who uses the various features and functionality offered at the Site. Additionally, we may use this information in order to determine the types of features, functionality, products and services to offer through the Site or otherwise, which is also in our legitimate interest as mentioned before.
3.2. Subscribing to Newsletters
Sanrio uses contact information collected during subscription to send you the newsletter in accordance with Art. 6 (1) lit. a) GDPR.
3.3. Participating In Contests, Sweepstakes and Other Promotions
3.4. Communications with Sanrio
3.5. Disclosure to Sanrio Operations and Maintenance Contractors
Sanrio operations and maintenance contractors sometimes have limited access to your Personal Data in the course of providing products or services to Sanrio. These contractors include vendors and suppliers that provide us with technology, services, and/or content related to better operation and maintenance of the Site.
If you have opted-in to receiving e-mails and newsletters from Sanrio, these contractors also may have access to your e-mail address to send newsletters to you on our behalf. Access to your Personal Data by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for Sanrio. We also contractually require that our operations and maintenance contractors not use or disclose your Personal Data for any purpose other than providing us with products and services, that they secure your Personal Data with safeguards equivalent to our own safeguards.
3.6. Government Authorities; Legal Rights and Actions
In the event that we are legally compelled to disclose your Personal Data, we will attempt to notify you unless doing so would violate the law or court order.
4. Disclosure of Personal Data to Third Parties
Your Personal Data will only be transferred to third parties in the following cases or after you have given your explicit consent:
4.1. Google Analytics.
This website uses the “Google Analytics” service, which is offered by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) to analyze website usage by users. The service uses “cookies” – text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
IP anonymization applies to this website. The user’s IP address is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference to your IP address. As part of the agreement on the order data agreement that the website operator has concluded with Google Inc., the website operator uses the information collected to evaluate website usage and website activity and provides services related to internet usage.
You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
4.2. Use of social media plugins
This website uses Facebook Social Plugins, which is operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integration can be recognized by the Facebook logo or by the terms “Like”, “Like”, “Share” in the colors of Facebook (blue and white). You can find information on all Facebook plugins in the following link: https://developers.facebook.com/docs/plugins/
The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and scope of the data that the plugin transmits to the servers of Facebook Inc. You can find information on this here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that users have visited this website. There is a possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.
If you use the functions of the plugin – for example by sharing or “liking” a post – the corresponding information will also be transmitted to Facebook Inc.
Would you like to prevent the Facebook. Inc. linked this data to your Facebook account, please log out of Facebook before visiting this website.
This website also uses the “+1” button from Google Plus. This is operated by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). If you visit a page that contains the “+1” button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence on the nature and scope of the data that the plugin transmits to the servers of Google Inc. Click on the “+1” button while you are logged into Google+, share the content of the page on your public profile.
According to Google Inc., personal data is only collected when you click the button. The IP address is also saved, among other things, for logged-in Google users. If you would like to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.
You can find information on the “+1” button here: https://developers.google.com/+/web/buttons-policy
This website also uses Twitter buttons. These are operated by Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). If you visit a page that contains such a button, a direct connection is established between your browser and the Twitter servers. The website operator therefore has no influence over the nature and scope of the data that the plugin transmits to the Twitter Inc. server.
According to Twitter Inc., only your IP address is collected and saved.
Information on the handling of personal data by Twitter Inc. can be found here: https://twitter.com/privacy?lang=en
This data protection declaration contains more information on the processing of personal data when using the Instagram offer. https://www.instagram.com/invites/contact/?i=kr7ozfntxvne&utm_content=dsxqs2c .
Personal data is all information that relates to an identified or identifiable natural person. An identifiable person is a natural person who, directly or indirectly – in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person, can be identified (Art. 4 point 1 GDPR).
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbor
Dublin 2 Ireland
Fax: +1 650 543 5340
as jointly responsible in accordance with Art. 26 GDPR and the Facebook page insights supplement https://www.facebook.com/legal/terms/page_controller_addendum
If you no longer wish for your personal contact details to be stored using Mailchimp, please contact us at [email protected] and we will remove you from the system. Please note however that being removed from Mailchimp may result in you or your children no longer receiving communications from us.
5. Children’s Privacy
Sanrio requests that children consult with their parents before sending information to the Site. We encourage parents to monitor their children’s online activities, and to help us protect their privacy by instructing them never to provide their full name, address and other personal information without their parent’s permission.
6. Sanrio Security Procedures
The security and confidentiality of your information is extremely important to us. We have implemented technical, administrative, and physical security measures to protect your information from unauthorized access and improper use. From time to time, we review our security procedures in order to consider appropriate new technology and methods. Despite Sanrio’s efforts to protect your Personal Data, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet will be intercepted.
(a) Sanrio uses firewalls to protect information held in our servers.
(b) Sanrio utilizes Secure Socket Layer (SSL) encryption in transmitting Personal Data to our servers. In order to take advantage of encryption technology, you must have an Internet browser which supports 128-bit encryption.
(c) Sanrio closely monitors the limited number of Sanrio employees who have potential access to your Personal Data.
(d) Sanrio backs-up our systems to protect the integrity of your Personal Data.
|8. Right to object
Where data processing is based on our legitimate interest, including profiling, you have the right to object, on grounds relating to your particular situation, at any time. Sanrio will no longer process the personal data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
9. Your rights and choices
You have the legal right to:
(a) request access to the Personal Data we hold about you;
(b) request rectification or erasure of the Personal Data we hold about you;
(c) obtain from Sanrio restriction of processing the Personal Data we hold about you where one of the reasons laid out in Art. 18 GDPR applies;
(d) object to processing;
(e) receive the personal data concerning you and that you have provided to Sanrio, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance.
(f) request that we stop using your personal data for direct marketing by withdrawing at any time from your prior opt-in.
You can exercise these rights by e-mailing us at [email protected]
10. Questions, Comments or Concerns