Data Privacy

1. Contact and controller

Different companies are responsible for data processing in connection with the use of this website and our customer service. We explain to you below which company is responsible in which case, in particular under point 6.

1.1. General Data Protection Officer If you would like to contact us about data protection, please contact our General Data Protection

Officer to ensure your question is answered as efficiently as possible. We can pass on your inquiry to the right department if you specify the nature of your interaction with Ravensburger and/or whether you are inquiring about a concrete offer. You can contact the General Data Protection Officer of the Ravensburger Group at: Ravensburger AG Rechtsabteilung – Konzerndatenschutzbeauftragte Robert-Bosch-Straße 1 88214 Ravensburg Germany E-mail: privacy@ravensburger.com

1.2. Responsible companies

1.2.1. Ravensburger AG

Ravensburger AG
Robert-Bosch-Straße 1
88214
Ravensburg
E-Mail: info@ravensburger.de
Phone: +49 (0) 751 86 1377
Fax: +49 (0)751 86 13 11

1.2.2. Ravensburger Verlag GmbH

Ravensburger Verlag GmbH
Robert-Bosch-Straße 1
88214
Ravensburg
E-Mail: info@ravensburger.de
Phone: +49-(0)751 86 0
Fax: +49 (0)751 86 13 11

1.2.3. Ravensburger Freizeit und Promotion GmbH

Ravensburger Freizeit und Promotion GmbH
Am Hangenwald 1
88074
Meckenbeuren
E-Mail: spieleland@ravensburger.de oder museum@ravensburger.de
Phone: +49 (0) 7542 400 0
Fax: +49 (0)7542 400 101

1.2.4 Other companies of the Ravensburger Group

If you contact another company of the Ravensburger Group with your request, this company is responsible for data protection. You can find the contact details here https://www.ravensburger-gruppe.de/e...cts/index.html.

2. Your rights

Please note that different data protection rights may apply to you depending on the country from which you visit our website.

2.1 Rights depending on your country of origin

2.1.1 EU citizens

If you are from a European Union (EU) or European Economic Area (EEA) country, you have specific rights under the General Data Protection Regulation (GDPR). This includes the right of access, rectification, erasure, restriction of processing, data portability and the right to object to the processing of your personal data.

If you have given your consent to the processing of your data, you can revoke this consent with effect for the future at any time. This does not affect the processing of your data up to the time of your revocation of consent, which remains permitted.

If we base the processing of your personal data on the balancing of interests, you can object to the processing based on legitimate interests. If you express such an objection, we request that you give us the reasons why you do not wish us to process your personal data as we normally do. After you have submitted your objection, we examine the circumstances and either cease or modify the data processing, or explain to you our compelling legitimate grounds for continuing to process the data.

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time.

2.2 U.S. citizens

If you are from the U.S., you may have specific rights under the local data protection laws of the state in which you reside. For example, some states provide the right to be informed about the personal data collected and to have it deleted.

Users who reside in California and have provided their personal information to Ravensburger may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such requests must be submitted to us at CAPrivacy@ravensburger.com. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted other than to the address specified in this paragraph.

2.3 Citizens of other countries

In numerous nations, rights comparable to those detailed for "EU citizens" exist. This includes citizens of the UK. Regardless of your country of origin, please reach out if you wish to exercise any of the rights mentioned. We commit to handling your request diligently and in strict accordance with our legal responsibilities.

If you are from other countries, please refer to your country's data protection laws to understand your specific rights. We strive to protect the data of all our visitors in accordance with applicable data protection laws.

2.4 Who to contact

We can deal with your inquiry most efficiently if you e-mail it to our General Data Protection Officer. Of course, you can also directly contact the respective company responsible for data processing. Please specify the nature of your interaction with Ravensburger and/or whether you are inquiring about a concrete offer. We expressly point out here that, in accordance with legal requirements, we may need to ask you to provide identification and we may possibly also take further measures to clearly establish your identity.

3. Possible consequences of non-submitted data

We may collect your personal data on the basis of legal requirements or to fulfill a contract. If you do not provide this data to the extent required, the consequence may be that we cannot fully meet our obligations and/or we are unable to provide you with the service.

4. Possible external recipients of data

4.1. Data processing by external processors

In some cases, we use external service providers to process your data. We select these service

providers carefully and commit them to observe our instructions. We regularly check their compliance.

4.2. Transfer to third parties

Furthermore, we can pass your personal data on to third parties if we offer participation in campaigns, prize draws, conclusions of contracts, or similar services together with these partners. You will receive further information about this when you enter your personal data or, if the offer is described in more detail in this data protection declaration, below.

4.3. EU citizens: Information on data transfer outside the EEA

If our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the consequences of this when you enter your personal data, or in this data protection declaration.

5. Processing the data of minors

Stricter legal requirements apply to the processing of the data of children or minors. We carefully examine and comply with these requirements.

All our offers are intended for adults of full legal age.

If we discover that we have unintentionally collected the data of children, we immediately erase this data, unless there are legal reasons not to do so. In all cases we block access to the data so that it cannot be used for marketing purposes. Please inform us if you find that your child has used one of our online offers without your agreement.

If you provide us with your child/children’s data, we exclusively process the data for the purpose of the relevant offer and in accordance with your consent and/or the legal requirements.

If, in an individual case, one of our offers is addressed to children under the age of 16, we restrict data processing to the data reasonably required for use of the offer. We only store this data as long as necessary for the use of the offer. Furthermore, we display these offers with a note on data protection specially formulated for easy understanding by the target group.

In compliance with legal requirements, we only accept data transfers or consents to data processing from people under the age of 16 with the agreement of their legal custodian.

If, as an exception, we allow minors under the age of 16 to directly take part in prize draws, we only request the data that is absolutely necessary for the prize draw.

When processing the data of children and minors, we apply appropriate technical and organizational measures. We do not use this data for marketing purposes.

Children are not always able to understand the dangers of digital communication and providing data to third parties. Please explain this to your children and make them aware of the dangers. Keep an eye on your children’s online activities and take an active part in them!

6. Data processing when you visit our website

6.1. Controller responsible under data protection law

The controller responsible under data protection law for the provision of the website is the company named in the legal notice as the provider of the website. You can find the contact data in the legal notice as well as above under No. 1.2.

6.2. Data processing when you visit our website

If you visit our website simply to find out information, i.e. if you do not register or otherwise provide us with information, we only process the personal data your browser sends to our server. The data described below is technically necessary so that we can display our website to you and ensure its

stability and security. This is why we must process this data. (EU citizens: The legal basis is Art. 6 Section 1 p. 1 lit. b, f of the GDPR.)

• Your IP address
• The browser you use as well as the browser version and language settings
• The operating system you use
• The date and time of access, including the difference to Greenwich Mean Time (GMT),
• The concrete website you visit
• Access status/http status code
• The website via which you access the website

This data is stored for the duration of the session and deleted after a maximum of 30 days.

6.3. Tools

We use various tools which can differ depending on the website. If the use of tools requires you consent, you can grant or revoke your consent as described under No. 8.4.

6.3.1. Friendly Captcha (Bot/Spam Protection)

We use the "Friendly Captcha" service on our website (www.friendlycaptcha.com). This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. Friendly Captcha is a new type of privacy-friendly security solution to make it increasingly difficult for automated programs and scripts (so-called "bots") to use our website. For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms) so that the visitor's end device can establish a connection to Friendly Captcha's servers in order to receive a computational task from Friendly Captcha. The visitor's end device solves the computational task, which requires certain system resources, and sends the computation-al results to our web server. Our server contacts the Friendly Captcha server via an API and receives a response stating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, further process or reject them.

The data is used exclusively for the protection against spam and bots as described above. Friendly Captcha does not set or read cookies on the visitor's end device. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

If personal data is stored, this data will be deleted after 30 days.

(EU citizens: The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests)).

Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/.

6.3.2. Web analysis with Matomo

a) On our websites, we use the web analysis tool Matomo to analyze and check the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.

b) We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. Furthermore, we collect your IP address so that we, as the website operator, can determine from which country the respective user originates (so-called "IP location determination"). For your protection, however, the IP address is not displayed to us; instead, it is completely masked and not stored. We do not store any personally identifiable information such as the user's e-mail address. We store the anonymized web analytics data for an unlimited period of time.

c) We host Matomo on our own server structure within the European Union. A transfer to third parties or outside the EU / EEA therefore does not take place.

d) The legal basis for the collection and further processing of the information is your consent. The revocation of your consent is possible at any time, without affecting the permissibility of the processing until the revocation. In apps, you can reset the advertising ID under the Android or iOS settings. You can perform the revocation via your cookie settings (see No. (Ziff. 8.4).

e) The Matomo program is an open source project. Information from the third-party provider on data protection is available at matomo.org/privacy-policy/.

6.3.3 Use of Cookie Bot

a) This website uses Cookiebot, a cookie management service provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot enables us to provide a cookie banner. With this we can inform you on the one hand that and which cookies we use on our website. On the other hand, you can use the cookie banner to decide which cookies you want to allow, and we can save your settings according to the legal requirements. For all information on cookies and your setting options, see section 8.4.

b) In connection with the Cookiebot service, we process the following data: Your IP address in shortened form (the last three digits are set to "0"), our website URL, date and time of your consent. By means of an anonymous key, which is randomly generated and anonymized, we store your consent status.

c) All data is stored within the EU. After 12 months, the data will be deleted continuously.

d) The legal basis for the use is our legitimate interest in operating our website efficiently and in compliance with the law, Art. 6 para. 1 p. 1 lit. f GDPR. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can find more information about data protection at Cookiebot here: https://www.cookiebot.com/de/privacy-policy/.

7. Data processing when you use our offers

7.1. Customer service

7.1.1. Controller responsible under data protection law

If you require customer service with regard to Ravensburger products and brands (tiptoi®, puzzles, games, activity products, books, etc.) or if you contact the Ravensburger Group in general, your contact partner is our customer service at Ravensburger Verlag GmbH.

If you require customer service with regard to Ravensburger theme worlds (Spieleland, Museum, Feriendorf, Escape Room Duisburg, retail stores), your contact partner is our customer service at Ravensburger Freizeit und Promotion GmbH.

If you contact another company of the Ravensburger Group with your service request, this company is the data controller.

7.1.2. Data processing in connection with your service request

We process the personal data you provide when you submit a service request in order to process your service request.

If your request concerns a different Ravensburger company, we may pass it on to the specialist area responsible if this is necessary.

We also save your data in a customer profile so that we can provide the best possible support if you have any requests or inquiries in the future. When we send replacement parts, we also store the transaction data in order to prevent misuse of our service.

After we have handled your service request, we send you an anonymous customer satisfaction survey. We also carry out anonymized analyses of service requests so that we can continually

improve our product and service quality.

We erase your data after three years.

7.2 Further offers and functions of our websites

If our websites contain further offers, especially time-limited campaigns, you will receive information on data protection as well as the controller responsible via the relevant offer, unless everything is already covered in our data protection declaration.

8. Cookies and settings options

8.1. Controller responsible under data protection law

The controller responsible under data protection law for the use of cookies on the website is the company named in the legal notice as the website provider. You can find the contact data in the legal notice as well as above under No. 1.2.

8.2. Use of cookies on this website

When you use our website, cookies and similar tools are saved on your computer. Cookies are small text files that are stored on your computer and linked to the browser you use. They provide certain information to the organization which places the cookie (in this case our company). Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make websites generally more user-friendly and effective.

We distinguish between cookies that are necessary for the technical functions of the website and optional cookies. Optional cookies enable us to make our websites easy to use as well as functional and to compile anonymous statistics on the use of our website so that we can improve it and tailor advertising to your interests – both on Ravensburger Group and third-party websites. You decide which cookies you want to accept. However, if you block cookies, you may not be able to use all the functions of the websites.

8.3. We use the following categories of cookie:

8.3.1. Technically necessary cookies

These cookies are always necessary for the website to be displayed, for it to be technically secure, and for the provision of other basic functions of the website. (EU citizens: The legal basis for the use is Art. 6 Section 1 p. 1 lit. b of the GDPR.)

8.3.2. Comfort

These cookies make it easier and more convenient for you to use the website. For example, we can show you articles you placed in the shopping cart during a previous visit or save other settings you have made. This means you can always continue where you left off. The legal basis for use is your consent (EU citizens: Art. 6 Section 1, p. 1 lit. a of the GDPR)). We only use this cookies with your consent which you can revoke at any time by changing your settings, see Sec. 8.4.

8.3.3. Statistics

These cookies enable Ravensburger Group to statistically evaluate visits to and use of our websites. We use them for example to determine user numbers and what content is popular. Armed with this knowledge, we can improve our offer and our websites. All these statistics and the data they contain are anonymous. The legal basis for use is your consent (EU citizens: Art. 6 Section 1, p. 1 lit. a of the GDPR), which you can revoke at any time by changing your settings, see Sec. 8.4.

8.3.4. Marketing

These cookies enable us to show you content, including advertising, which is especially relevant and tailored to your personal interests. In order to personalize content for you, we can analyze your use of the Ravensburger websites of the companies listed above, then determine relevant content and show

it to you. In this context, we also use external partners who give us the opportunity to post personalized advertising on other websites as well. For this purpose, we transfer to our partners your data which is necessary for the use of our offers. You can find them under No. 6.3 of this data protection declaration. The legal basis for use is your consent (EU citizens: Art. 6 Section 1, p. 1 lit. a of the GDPR), which you can revoke at any time by changing your settings, see Sec. 8.4.

8.4. Your settings options

You can choose your personal settings and revoke your consent here.