Privacy Policy

In compliance with Article 13 of the EU General Data Protection Regulation (GDPR), we inform you fully in the following about how we process your personal data when you access our websites.

1. Contact and controller

Various companies are responsible for the websites of the Ravensburger Group in Germany. You can find all details on the controllers responsible under data protection law on the relevant website and/or in the following information.

1.1 General Data Protection Officer

If you would like to contact us about data protection, please contact our General Data Protection Officer to ensure your question is answered as efficiently as possible.

We can pass on your inquiry to the right department if you specify the nature of your interaction with Ravensburger and/or whether you are inquiring about a concrete offer.

You can contact the General Data Protection Officer of the Ravensburger Group at:

Ravensburger AG
Rechtsabteilung – Konzerndatenschutzbeauftragte
Robert-Bosch-Straße 1
88214 Ravensburg
Germany

E-Mail: privacy@ravensburger.com

 

1.2 Responsible companies

1.2.1 Ravensburger AG

Ravensburger AG
Robert-Bosch-Straße 1
88214 Ravensburg, Germany
E-Mail: info@ravensburger.de
Phone: +49 (0) 751 86 1377
Fax: +49 (0)751 86 13 11

1.2.2 Ravensburger Verlag GmbH

Ravensburger Verlag GmbH
Robert-Bosch-Straße 1
88214 Ravensburg, Germany
E-Mail: info@ravensburger.de
Phone: +49-(0)751 86 0
Fax: +49 (0)751 86 13 11

2. 2. Your rights

You have the following rights which you can exercise in relation to us:
The right to information, rectification, erasure, restriction of processing, data portability, and objection.

Please contact us if you want to exercise one of your rights. You can find our contact data in the chapter Contact. We can deal with your inquiry most efficiently if you e-mail it to our General Data Protection Officer. We can pass on your inquiry to the right department if you specify the nature of your interaction with Ravensburger and/or whether you are inquiring about a concrete offer.

We expressly point out here that, in accordance with legal requirements, we must ask you to provide identification and we may possibly also take further measures to clearly establish your identity.

2.1 Right to information

If you want information about the personal data we process, please send your request in writing. For reasons of security and according to regulations, we may make certain data partly unreadable when we send you information, e.g. credit card details.

2.2 Right to rectification

If you find or believe that we have processed incorrect information about you, please inform us of this in writing. We will investigate and, if necessary, rectify the data.

2.3 Right to erasure

If you want us to erase your data, please inform us in writing. We will check your request in terms of the legal requirements and erase your data accordingly.

Please note that in some cases we are legally obliged to store data for a certain period and cannot erase it before the end of this period. For example, we are obliged to store tax-related data and data relevant for possible warranty claims.

Please also note that, while we immediately block access to your data, for technical reasons it can take a few days before we have fully erased your data.

Please also note that it is no longer possible to recover your data after we have confirmed your re-quest for erasure.

2.4 Right to restriction of processing

You have the right to restrict our processing of your data. To do this, please inform us in writing which data categories you want the restriction to apply to and the reasons for your request. We will immediately examine the circumstances and inform you of the result.

2.5 Right to data portability

Please inform us in writing which data you want to be transferred to which recipient. We will immediately examine your request and inform you of the result.

2.6 Right to object and right to revocation

2.6.1. Revocation of consent

If you have given your consent to the processing of your data, you can revoke this consent with effect for the future at any time. This does not affect the processing of your data up to the time of your revocation of consent, which remains permitted.

You can find out how to revoke your consent on the relevant website. Alternatively, you can contact our General Data Protection Officer using the contact data in the chapter Contact. If you want to revoke your consent to cookies, you can do this below under No. 8.4. For information on your con-sent to receiving our newsletter, see No. 7.1.

2.6.2 Objection to data processing based on a balancing of interests

If we base the processing of your personal data on the balancing of interests, you can object to this processing.

If you express such an objection, we request that you give us the reasons why you do not wish us to process your personal data as we normally do. After you have submitted your objection, we ex-amine the circumstances and either cease or modify the data processing, or explain to you our com-pelling legitimate grounds for continuing to process the data.

2.6.3 Objection to direct advertising based on a balance of interests

Of course you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. Ideally, please inform us about your objection to processing for adver-tising purposes using the contact data given in the chapter Contact.

2.7 Right to object

If you believe that our actions do not comply with the applicable data protection regulations, you can lodge a complaint with the supervisory authority responsible for data protection in your federal state.

3. Possible consequences of non-submitted data

We may collect your personal data on the basis of legal requirements or to fulfill a contract. If you do not provide this data to the extent required, the consequence may be that we cannot fully meet our obligations and/or we are unable to provide you with the service.

4. Possible external recipients of data

4.1 Data processing by external processors

In some cases, we use external service providers to process your data. We select these service providers carefully and commit them to observe our instructions. We regularly check their compliance.

4.2 Transfer to third parties

Furthermore, we can pass your personal data on to third parties if we offer participation in cam-paigns, prize draws, conclusions of contracts, or similar services together with these partners. You will receive further information about this when you enter your personal data or, if the offer is de-scribed in more detail in this data protection declaration, below.

4.3 Data transfer outside the EEA

If our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the consequences of this when you enter your personal data, or in this data protection declaration.

5. Processing the data of minors

Stricter legal requirements apply to the processing of the data of children or minors. We carefully examine and comply with these requirements.

All our offers are intended for adults of full legal age.

If we discover that we have unintentionally collected the data of children, we immediately erase this data, unless there are legal reasons not to do so. In all cases we block access to the data so that it can not be used for marketing purposes. Please inform us if you find that your child has used one of our online offers without your agreement.

If you provide us with your child/children’s data, we exclusively process the data for the purpose of the relevant offer and in accordance with your consent and/or the legal requirements.

If, in an individual case, one of our offers is addressed to children under the age of 16, we restrict data processing to the data reasonably required for use of the offer. We only store this data as long as necessary for the use of the offer. Furthermore, we display these offers with a note on data pro-tection specially formulated for easy understanding by the target group.
In compliance with legal requirements, we only accept data transfers or consents to data processing from people under the age of 16 with the agreement of their legal custodian.

If, as an exception, we allow minors under the age of 16 to directly take part in prize draws, we only request the data that is absolutely necessary for the prize draw.

When processing the data of children and minors, we apply appropriate technical and organizational measures. We do not use this data for marketing purposes.

Children are not always able to understand the dangers of digital communication and providing data to third parties. Please explain this to your children and make them aware of the dangers. Keep an eye on your children’s online activities and take an active part in them!

6. Data processing when you visit our website

6.1 Controller responsible under data protection law

The controller responsible under data protection law for the provision of the website is the company named in the legal notice as the provider of the website. You can find the contact data in the legal notice as well as above under No. 1.2.

6.2 Data processing when you visit our website

If you visit our website simply to find out information, i.e. if you do not register or otherwise provide us with information, we only process the personal data your browser sends to our server. The data described below is technically necessary so that we can display our website to you and ensure its stability and security. This is why we must process this data. The legal basis is Art. 6 Section 1 p. 1 lit. b, f of the GDPR.

• Your IP address
• The browser you use as well as the browser version and language settings
• The operating system you use
• The date and time of access, including the difference to Greenwich Mean Time (GMT)
• The concrete website you visit
• Access status/http status code
• The website via which you access the website

This data is stored for the duration of the session and deleted after a maximum of 30 days.

6.3 Tools

We use various tools which can differ depending on the website. If the use of tools requires you consent, you can grant or revoke your consent as described under No. 8.4.

6.3.1 Web tracking with Google Analytics

a) Our websites use Google Analytics, a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (Google). We use this tool to analyze your user interactions on web-sites and in apps. We use the statistics and reports gained here to improve our service and tailor it to your interests as the user.

b) We primarily track the interaction between you the user and our website using cookies, data about your device/browser, IP addresses, and website or app activities. Google Analytics also stores your internet protocol addresses to ensure the security of our service and to give us, as the website opera-tor, information about the country, region, or location of each user (IP location tracking). For your protection, we naturally use the IP masking function, which means that within the EU and EEA, Google truncates IP addresses by removing the last octet.

c) Google acts as a data processor for us and we have a contract with Google for this purpose. Usual-ly, the information on your use of this website generated by the cookie and the (usually truncated) IP addresses are saved to a Google server in the USA and processed there. According to Google’s own information, for these cases it applies a standard comparable to the previous EU-US Privacy Shield. Google also assures that it observes the data protection laws applicable to international data transfer.

Additionally, we have agreed standard contract clauses with Google. Their purpose is to ensure adherence to an appropriate data protection level in a third country.

d) The legal basis for the collection and processing of the information (for a maximum period of 14 months) is your consent (Art. 6 Section 1 p. 1 lit. a of the GDPR). You can revoke your consent at any time without any effect on the permissibility of processing prior to your revocation. In apps, you can reset the ad ID under the Android or iOS settings. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4) or installing the browser add-on from Google, which is available at: tools.google.com/dlpage/gaoptout?hl=de/.

e) You can find more information about the services provided by Google Analytics at marketingplatform.google.com/about/ analytics/terms/de/. Google provides information about data processing in the context of the use of Google Analytics here: support.google.com/analytics/answer/6004245?hl=de/. You can find general information about data processing, which according to Google also applies to Google Analytics, in Google’s privacy policy at www.google.de/intl/de/policies/privacy/.

6.2.3 Use of Google Ads

a) We use Google Ads in order to draw attention to our offers by means of advertising (so-called Google Ads). If you have reached our website via a Google ad, Google Ads will save a cookie on your terminal device. The legal basis for processing your data is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) The advertising material is supplied by Google via so-called ad servers. For this purpose, we and other websites use ad-server cookies which use certain parameters to measure success, such as the display of the advertisements, or clicks by the user. The Google Ads cookies saved on our website give us information on the success of our advertising campaigns. These cookies are not intended to identify you personally. As a rule, the following are saved to this cookie as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (note that a user does not want to be contacted again).

c) The cookies placed by Google enable Google to recognize your browser. If a user visits certain pag-es in the website of an Ads customer and the cookie stored on his or her computer has not yet ex-pired, Google and the customer can see the user has clicked on the ad and been directed to this website. Every Ads customer is allocated a different cookie. This means cookies cannot be traced via the websites of other Ads customers. The embedding of Ads means that Google receives a notifica-tion that you have called up the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can allocate the visit to your account. Even if you have not registered with Google or are not logged in, there is a possibility that the advertising provider may find your internet protocol address and save it.

d) Based on the marketing tools used, your browser automatically makes a direct connection with the Google server. We do not collect personal data ourselves in these advertising activities, but merely provide Google with the option of collecting the data. Google merely makes statistical evaluations available to us which tell us what ads were clicked how often and at what prices. We do not receive any further data collected from the use of the advertising material. In particular, we are unable to identify the users from this information.

e) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4. or using the following functions:

i) Appropriate setting of your browser software. The sup-pression of third-party cookies in particular means that you will not receive any ads from third party advertisers;

ii) Setting your browser to block cookies from the domain http://www.googleadservices.com“, http://www.google.de/settings/ads, although this setting will be deleted if you delete your cookies;

iii) Using the link www.aboutads.info/choices, to deactivate the targeted ads of the advertising providers that form part of the self-regulating “About Ads” campaign, although this setting will be deleted if you delete your cookies;

iv) Perma-nent deactivation in your Firefox, Internet Explorer or Google Chrome browser via the link www.google.com/settings/ads/plugin. We must point out that in this case you may not be able to use all the functions of this offer to their full extent.

v) You can find further information on privacy policy at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, here: www.google.com/intl/de/policies/privacy und services.google.com/sitestats/de.html.

6.3.3 Google Conversion Tracking

a) We use Google Ads with the additional application Google Conversion Tracking. This enables us to check the success of our advertising campaigns. The ads are marked with a technical marker, e.g. an ID that allows us to determine how a user interacts with the ads after the initial click and whether they actually follow through on one of our offers. This gives us statistics about the total volume of readers of our ads, which ads are most popular, and if applicable also further information about results from the ad.

b) The legal basis for processing your data is again Art. 6 Section 1 p. 1 lit. f GDPR, in other words only with your consent. You can disable or discontinue the conversion tracking function in the same way as described above for Google Ads.

6.3.4 Google Remarketing

a) We use Google Ads with the additional application Google Remarketing. This allows us to create ads based on information available about you and to address you again during your further use of the internet. This is done via the cookies saved when you access our offers (usually via cookies), which are used by Google to record your user behavior in visiting various websites, and in order to evaluate it in pseudonymized form. According to Google’s own statements, there is no merging of your per-sonal data with data collected as part of the remarketing process which may have been saved by Google.

b) The legal basis for processing your data is again Art. 6 Section 1 p. 1 lit. f GDPR, in other words only with your consent. You can disable or discontinue the remarketing function in the same way as de-scribed above for Google Ads.

6.3.5 Advertising with Facebook (Pixel and Conversion Tracking)

a) On some websites, we continue to use advertising options from Facebook Inc. (Facebook). By em-bedding Facebook Pixel on our website, we can show users of our website and the Facebook social network our advertisements (Facebook ads) and measure and evaluate their success (conversion tracking). This link between Facebook and our website is enabled technically by Facebook Pixel. The legal basis for processing your data is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) Based on the marketing tools used, your browser automatically makes a direct connection with the Facebook server when you visit our website. We have no influence over the scope and further use of data collected by Facebook by means of this tool and therefore inform you according to the state of our knowledge: The embedding of Facebook Pixel means that Facebook receives a notification that you have called up the relevant page of our website or clicked on one of our ads. If you are registered with a Facebook service, Facebook can allocate the visit to your account. Even if you have not registered with Facebook or are not logged in, there is a possibility that the provider may find your internet protocol address and other identifying data and use these to profile you.

c) The information collected is stored on Facebook servers, also in the USA. In such cases, according to its own information, the provider has adopted a standard that corresponds with the former EU-US Privacy Shield and has pledged to observe applicable data protection laws in international data trans-fer. We have agreed the so-called standard data protection clauses with Facebook which are de-signed to ensure an appropriate data protection level in the third country.

d) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4). Furthermore, you can revoke your consent via the provider’s function using this link (only if you are logged in): www.facebook.com/settings/?tab=ads#_.

e) You can find more information about data processing by Facebook from Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA in its privacy policy here: www.facebook.com/about/privacy.

6.3.6 Embedded YouTube Videos

a) We have embedded YouTube videos into our websites. These are saved on http://www.YouTube.com and can be played directly from our website. The legal basis for the dis-play of the videos is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) When you visit the website, YouTube obtains the information that you have accessed the relevant sub-page of our website. Furthermore, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether you have a YouTube user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is allocated directly to your account. If you do not wish the data to be allocated to your YouTube profile, you will need to log out before activating the button. YouTube saves your data as a user profile and uses it for purposes of advertising, market research and/or to design its website to better reflect demand. Such an evaluation is made particularly to provide appropriate advertising (even for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to the creation of this user profile, although you must contact YouTube to exercise this right.

c) The information saved is stored on Google servers, also in the USA. In such cases, according to its own information, the provider has adopted a standard that corresponds with the former EU-US Pri-vacy Shield and has pledged to observe applicable data protection laws in international data transfer. Furthermore, we have agreed standard data protection clauses with Google which are designed to ensure an appropriate data protection level in the third country.

d) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4).
e) You can find further information on the purpose and scope of the data collected and its processing by YouTube in the privacy policy. Here you can also obtain further information on your rights and setting options to protect your privacy www.google.de/intl/de/policies/privacy.

6.3.7 Embedded Google Maps

a) On some websites, we use Google Maps. This service means we can display interactive maps for you directly on the website and enable convenient use of the map function for you. The legal basis for the use of the maps is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) When you visit the website, Google obtains a notification that you have accessed the relevant sub-page of our website. Furthermore, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google has provided a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is allocated directly to your account. If you do not wish the data to be allocated to your Google profile, you will need to log out before activating the button. Google saves your data as a user profile and uses it for purposes of advertising, market research and/or to design its website to better reflect demand. Such an evaluation is made particularly to provide appropriate advertising (even for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to the creation of this user profile, although you must contact Google to exercise this right.

c) The information saved is stored on Google servers, also in the USA. In such cases, according to its own information, the provider has adopted a standard that corresponds with the former EU-US Pri-vacy Shield and has pledged to observe applicable data protection laws in international data transfer. Furthermore, we have agreed standard data protection clauses with Google which are designed to ensure an appropriate data protection level in the third country.

d) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4).

e) You can find further information on the purpose and scope of the data collection and its processing by the plug-in provider in the provider’s privacy policy. Here you can also obtain further information on the rights and setting options to protect your privacy in this matter: www.google.de/intl/de/policies/privacy.

6.3.8 Address verification with Endereco

On our website we give you the option to verify, in real time, your entries in the address forms used for our web store. The purpose of this is to prevent any problems with the delivery of your ordered products due to incorrect information.

Furthermore, we aim to ensure that your contact information is valid so that we can send you infor-mation about your order or respond to any queries.
For the provision of these features, we use the service provider Endereco, registered address: Bal-thasar-Neumann-Straße 4b, 97236 Randersacker, Germany. This service provider processes your data exclusively in accordance with our instructions. The legal basis for the transmission, processing, and temporary storage of your data by this service provider is Art. 6 (1) (b) GDPR, since it is abso-lutely necessary for the performance of the contract or the implementation of pre-contractual measures that some of the data entered by you on the input screen is checked for accuracy. The following data is processed by the service provider:

– Address (country, city, postal code, street, house number if applicable)
The data is processed separately by the service provider and is not merged with other data. Your enquiries are deleted by the service provider as soon as the status of the submitted data has been determined and its storage in the web store has been completed, and at the latest after 30 days.

Friendly Captcha (Bot/Spam Protection)

We use the “Friendly Captcha” service on our website (www.friendlycaptcha.com).

This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

Friendly Captcha is a new type of privacy-friendly security solution to make it increasingly difficult for automated programs and scripts (so-called “bots”) to use our website.

For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms) so that the visitor’s end device can establish a connection to Friendly Captcha’s servers in order to receive a computational task from Friendly Captcha. The visitor’s end device solves the computational task, which requires certain system resources, and sends the computation-al results to our web server. Our server contacts the Friendly Captcha server via an API and receives a response stating whether the puzzle was solved correctly by the end device. Depending on the re-sult, we can apply security rules to requests via our website and thus, for example, further process or reject them.

The data is used exclusively for the protection against spam and bots as described above.

Friendly Captcha does not set or read cookies on the visitor’s end device.
IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

If personal data is stored, this data will be deleted after 30 days.
The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in pro-tecting our website against abusive access by bots, i.e. spam protection and protection against at-tacks (e.g. mass requests).
Further information on data protection when using Friendly Captcha can be found atwww.friendlycaptcha.com/legal/privacy-end-users/.

6.3.10 Bounce Commerce Plugin

On our websites with online store, the plugin of the professional bounce management service pro-vider Bounce Commerce GmbH, Lindenallee 39, 47608 Geldern, is used. No personal or personal-related data is transferred to the technical service provider. Technically necessary cookies are used, which contain purely technical information but no personal data. Further information on data protec-tion at Bounce Commerce GmbH can be found at www.bounce-commerce.de/datenschutz.

7. Data processing when you use our offers

7.1 Ravensburger Foreign Rights

Ravensburger Verlag GmbH is the controller responsible under data protection law (contact details above under No. 1.2).
If you contact us (e.g. by e-mail, telephone or via a contact form), we process your data in order to respond to your inquiry.

If we enter into a business relationship with you, the data processing serves the execution of our business relationship.

If you subscribe to our newsletter, the sending of the newsletter is based on your consent. The legal basis is Art. 6 para. 1 lit. a GDPR. For the subscription to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possi-ble misuse of your personal data. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, or by sending a message to foreignrights@ravensburger.de.
Your data will only be processed for as long as is necessary to achieve the above-mentioned pro-cessing purposes. Subsequently, we will delete your data unless and insofar as there are no legal retention obligations.

7.2. Further offers and functions of our websites

If our websites contain further offers, especially time-limited campaigns, you will receive information on data protection as well as the controller responsible via the relevant offer, unless everything is already covered in our data protection declaration.

8. Cookies

8.1 Controller responsible under data protection law

The controller responsible under data protection law for the use of cookies on the website is the company named in the legal notice as the website provider. You can find the contact data in the legal notice as well as above under No. 1.2.

8.2 Use of cookies on this website

When you use our website, cookies and similar tools are saved on your computer. Cookies are small text files that are stored on your computer and linked to the browser you use. They provide certain information to the organization which places the cookie (in this case our company). Cookies cannot execute programs or transfer viruses to your computer.

On this website we use technically necessary cookies so that the website can be displayed, is technically secured and some other basic functions of the website can be provided. If you want to use certain functions of this website, e.g. submitting a form, cookies are used to perform these functions technically.

8.3 We use the following categories of cookie

Technically necessary cookies
These cookies are always necessary for the website to be displayed, for it to be technically secure, and for the provision of other basic functions of the website. The legal basis for the use is Art. 6 Section 1 p. 1 lit. b of the GDPR.

You can find an overview of all the cookies we use here.