The Slider Revolution and Essential Grid plugins will not collect any personal data in order to send them to us (please check third parties though, such as Google fonts, YouTube, etc.). Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. The following privacy policy for our website is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience, which may result in said third parties also processing data they collect and control.
1. Introduction
Welcome to ThemePunch OHG. We take the privacy of our users seriously. This Privacy Policy outlines how we collect, use, and protect your personal data when you interact with our website and services.
2. Information About Us
Controller for the purposes of the General Data Protection Regulation (GDPR):
- Name: ThemePunch OHG
- Address: Im Mediapark 5, 50670 Köln, Germany
- Telephone: +49 221 16836020 (No Support!)
- Email: info@themepunch.com
- Data Protection Officers: Krisztian Horvath, Moritz Praetorius, Dirk Gavor
3. Definitions
For the purpose of this policy, we adhere to the definitions provided in Art. 4 of the General Data Protection Regulation (GDPR).
4. Your Rights
Under GDPR, you have various rights including the right to:
- Access, correct, or delete your data
- Object to or restrict processing of your data
- Data portability
- File a complaint with a supervisory authority For more information, refer to Art. 15-21 GDPR.
5. Data We Collect
We collect personal data to offer a functional and user-friendly website. Types of data collected may include:
- Contact details
- IP addresses
- Browser types
- Usage data
- Cookies
6. How We Use Your Data
Your personal data is processed for the following purposes:
- To maintain and improve our website
- To fulfill contracts and provide services
- To communicate with you
- To comply with legal obligations
Legal Basis for Processing:
- Contractual necessity (Art. 6 Para. 1 lit. b GDPR)
- Legitimate interests (Art. 6 Para. 1 lit. f GDPR)
- Consent (Art. 6 Para. 1 lit. a GDPR)
7. Data Retention and Deletion
We retain your personal data for as long as necessary to fulfill the purposes we collected it for. Data may be stored longer for legal reasons.
8. Cookies and Tracking Technologies
We use cookies to improve our services. You have the option to reject or manage cookies through your browser settings. For details on the third-party cookies we use, please refer to the separate section below.
9. Data Sharing and Transfers
We may share your personal data with:
- Third-party service providers (e.g., payment processors)
- Legal authorities when required
10. Security Measures
We implement robust security measures to protect your data. However, no system is completely secure, and we cannot guarantee the absolute security of your data.
11. Contact Information
For any questions about this Privacy Policy or your data, contact us at info@themepunch.com.
12. Changes to This Policy
We reserve the right to update or modify this Privacy Policy at any time.
13. Third-Party Services
Note on US Data Transfers: For the third-party services listed below that process data in the United States, data transfer is primarily safeguarded by the EU-US Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs) to ensure compliance with European privacy standards.
X (formerly Twitter) We maintain an online presence on X to present our company and communicate with customers/prospects. X is a service provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. X Corp. complies with the EU-US Data Privacy Framework. Privacy policy: https://twitter.com/en/privacy
Pinterest Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA. Pinterest complies with the EU-US Data Privacy Framework. Privacy policy: https://policy.pinterest.com/en/privacy-policy
YouTube & Google Services (Analytics, Maps, reCAPTCHA, Fonts) We use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These services include YouTube (in advanced privacy mode), Google Analytics (with IP anonymization), Google Maps, Google reCAPTCHA, and Google Fonts. Google LLC is certified under the EU-US Data Privacy Framework. Privacy policy: https://policies.google.com/privacy
LinkedIn LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. LinkedIn complies with the EU-US Data Privacy Framework. Privacy policy: https://www.linkedin.com/legal/privacy-policy
Plerdy Plerdy prioritizes user privacy and does not record or store personal data entered in website fields. All our servers are located in Germany. Read more: https://www.plerdy.com/faq/
Meta Platforms (Facebook & Instagram) We maintain an online presence on Facebook and Instagram. We are jointly responsible with Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in analysis and communication) or your consent (Art. 6 para. 1 lit. a GDPR). Data may be transferred to Meta Platforms Inc. in the US, which is certified under the EU-US Data Privacy Framework. Privacy policy: https://www.facebook.com/privacy/explanation Note: Slider Revolution and Essential Grid use Meta’s API functionality to fetch data on your server (never ours) if you choose to. Instructions to delete gathered data are provided in our documentation.
Social Media Links via Graphics We integrate social media sites via linked graphics. Clicking these prevents automatic connection to their servers upon loading our site. Only by clicking the graphic will you be forwarded to the respective service, which may then record your data.
Adobe Typekit Fonts Our website uses Adobe Typekit Fonts provided by Adobe Systems Incorporated, San Jose, California, USA. When you access our site, your browser loads the required fonts directly from Adobe. Privacy Policy: https://www.adobe.com/privacy/policies/adobe-fonts.html
FontAwesome We use FontAwesome’s external fonts, a service of Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA. Privacy policy: https://fontawesome.com/privacy
Vimeo We use Vimeo to display videos, a service of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Vimeo complies with the EU-US Data Privacy Framework. Privacy policy: http://vimeo.com/privacy
Trustpilot We may contact you via email to invite you to review our services using Trustpilot A/S. We share your name, email address, and reference number with Trustpilot for this purpose. Privacy Policy: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
CloudFlare To secure our website and optimize loading times, we use the CDN of Cloudflare Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare complies with the EU-US Data Privacy Framework. Privacy policy: https://www.cloudflare.com/privacypolicy/
MailChimp – Newsletter We use MailChimp, a service of Intuit Inc. (formerly The Rocket Science Group, LLC), Atlanta, GA, USA. Intuit complies with the EU-US Data Privacy Framework. The newsletters contain a tracking pixel to evaluate readership. You may revoke consent at any time. Privacy policy: https://www.intuit.com/privacy/statement/
Paddle (Check-Out & Payments) To process orders through our online shop, we use Paddle as our Merchant of Record. By completing an order, your payment and billing data (such as email, product type, and credit card data) is processed by Paddle in order to fulfill the payment securely. Paddle acts as the data controller for the payment process. Privacy policy: https://paddle.com/privacy/
Tidio (Chatbot) We use Tidio to connect users with our customer support. We collect email addresses/names only with user consent. Messages are stored within the Tidio application. Privacy Policy: https://www.tidio.com/privacy-policy/
14. AI-Powered Content Generation
Our services include optional AI-powered content generation features within the editor, such as AI text generation, AI image generation, and optional image background removal.
How AI content features work When a user invokes an AI-powered content feature:
- Text input provided by the user is transmitted to external AI infrastructure providers to generate synthetic text or images.
- Generated images may optionally be further processed to remove backgrounds.
- Users cannot upload images for AI processing.
- AI image features operate exclusively on images generated within the editor.
- Users are instructed not to enter personal data (such as names, email addresses, or other identifiable information), sensitive information, or references to identifiable individuals when using AI-powered content features.
Third-party AI service providers To provide AI-powered content generation, we rely on specialized third-party AI infrastructure providers acting as technical service providers. These providers process data solely to perform the requested AI operations on our behalf. This includes AI text generation services and AI image generation services (e.g., fal.ai, OpenAI). Processing is limited to what is necessary to deliver the requested functionality and is transient in nature. Additional information:
Data retention and training According to our AI service providers:
- Input data and generated content are processed temporarily to fulfill the request.
- Data is not retained beyond request fulfillment.
- Data is not used to train AI models. We do not store AI prompts or generated content longer than necessary to deliver the requested functionality.
Personal data considerations AI-powered content generation features are designed for the creation of synthetic content only. No image uploads are supported. Users are responsible for ensuring that no personal data, sensitive information, or references to identifiable individuals are included when using these features.
