For our online content, and particularly for our blog., we use the service Gravatar by Automattic, Inc, 132 Hawthorne Street San Francisco, CA 94107, USA.
Gravatar is a service where a user logs in and can save their profile pictures and e-mail address. When a user leaves comments or contributions, (above all with blogs) this service enables a profile picture to be displayed next to the comments or contributions. To do this, the user’s e-mail address will be encrypted and transmitted with Gravatar to check whether a profile picture is attached. This is the only purpose of the data transmission and data will not be used for any other purpose, but rather will be immediately deleted.
The use of Gravatar occurs on the basis of our legitimate interests as per Art. 6 Par. 1 lit f of the GDPR, because we offer users the option of personalizing their contributions with a profile picture by means of Gravatar. Automattic is certified by the Privacy Shield Agreement and therefore guarantees compliance with the European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active).
If the user does not want a user photo connected with their e-mail address at Gravatar to be displayed next to their comments, then they should use an e-mail address that is not connected with Gravatar to leave comments. It is also possible to use an anonymous e-mail address, or none at all, if the user does not want their e-mail address to be shared with Gravatar. Users can completely prevent the transfer of data by not using the comment system.