Privacy Policy 

 

Last Updated: June 2024, Version: 3.0 

 

Below we inform you in accordance with the legal requirements about the data processing in connection with the visit to our website https://www.disneylorcana.com/.  Disney Lorcana is an immersive card game featuring characters from throughout Disney’s film history, and the website is intended for Lorcana players and families.

 

This privacy policy covers the collection and use of information on the website. We take privacy seriously at Ravensburger, and this policy is designed to tell you what information we collect and how we use it.

 

Please review this policy from time to time as we may make changes. It forms part of our terms of service and explains your rights and responsibilities when using our services.  If we do make a change, we will post notice at the top of this policy.  If we make a material change to the way we collect or process your personal information, we will provide email notice if we have your contact information and add a notice at the top of this policy prior to making the change.   

 

1. Contact and controller 

 

1.1. Responsible company

Ravensburger Verlag GmbH 
Robert-Bosch-Straße 1 
88214 Ravensburg

Germany
E-mail: [email protected] 
Phone: +49-(0)751 86 0 
Fax: +49 (0)751 86 13 11 
 
1.2. General Data Protection Officer 
If you would like to contact us about data protection, please contact our General Data Protection Officer to ensure your question is answered as efficiently as possible. 
We can pass on your inquiry to the right department if you specify the nature of your interaction with Ravensburger and/or whether you are inquiring about a concrete offer. 
You can contact the General Data Protection Officer of the Ravensburger Group at: 

Ravensburger AG 
Rechtsabteilung – Konzerndatenschutzbeauftragte 
Robert-Bosch-Straße 1 
88214 Ravensburg 
Germany 

E-mail: [email protected] 
  

2. Your rights

 

2.1. U.S. citizens

In the U.S., you may have specific rights under the local data protection laws of the state in which you reside. For example, some states provide the right to be informed about the personal data collected and to have it deleted. 

 

Users who reside in California and have provided their personal information to Ravensburger may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such requests must be submitted to us at [email protected]. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted other than to the address specified in this paragraph. 

 

 

2.2 Who to contact 

We can deal with your inquiry most efficiently if you e-mail it to our General Data Protection Officer. Of course, you can also directly contact the respective company responsible for data processing. Please specify the nature of your interaction with Ravensburger and/or whether you are inquiring about a concrete offer.  
We expressly point out here that, in accordance with legal requirements, we may need to ask you to provide identification and we may possibly also take further measures to clearly establish your identity. 

 

3. Possible consequences of non-submitted data 

We may collect your personal data on the basis of legal requirements or to fulfill a contract. If you do not provide this data to the extent required, the consequence may be that we cannot fully meet our obligations and/or we are unable to provide you with the service. 

 

4. Possible external recipients of data 

 

4.1. Data processing by external processors 
In some cases, we use external service providers to process your data. We select these service providers carefully and commit them to observe our instructions. We regularly check their compliance. 
 

5. Information we collect from Children

 

We do not actively collect personal data from any users, including children. We use service providers that automatically collect personal data when you visit our website. For more information regarding the service providers in use with children, see sections 6.1.1 and 6.1.2 under Service Providers. This data is used solely to support the operations of the website and for no other purpose. The data is not disclosed to any other third parties.

Children are restricted from using certain features on the website, such as Google Maps.

If you are a parent or guardian and would like to know more about data collected from your child or believe that we may have inadvertently collected personal information from your child, please contact us at [email protected] so that we can take appropriate steps to remove such information from our systems. If we discover that we unintentionally collected personal information from a child, we will either delete it or obtain parent consent. If a child contacts us, we’ll use their email to respond once and promptly delete it. 

 

Kids Privacy Assured by PRIVO: COPPA Safe Harbor Certification

Ravensburger Verlag GmbH is a member of the PRIVO Kids Privacy Assured COPPA safe harbor certification Program (“the Program”). The Program certification applies to the digital properties listed on the certification page that is viewable by clicking on the PRIVO Seal. PRIVO is an independent, third-party organization committed to supporting online services to safeguard children’s personal information collected online. The PRIVO COPPA safe harbor certification Seal posted on this page indicates Ravensburger Verlag GmbH has established COPPA compliant privacy practices and has agreed to submit to PRIVO’s oversight and consumer dispute resolution process. If you have questions or concerns about our privacy practices, please contact us at +49 - (0) 751 - 86 0 or [email protected]. If you have further concerns after you have contacted us, you can contact PRIVO directly at [email protected].

COPPA Safe Kids Privacy Seal

 6. Data processing when you visit our website 
When you visit our website, we automatically collect some personal information.  This information is technically necessary so that we can display our website to you and ensure its stability and security.        

Your IP address:

  • The browser you use as well as the browser version and language settings 
  • The operating system you use 
  • The date and time of access, including the difference to Greenwich Mean Time (GMT), 
  • The concrete website you visit 
  • Access status/http status code 
  • The website via which you access the website 

 
This data is stored for the duration of the session and deleted after a maximum of 30 days. 
 
6.1. Service Providers
We use various tools which can differ depending on the website.
 
6.1.1. Friendly Captcha (Bot/Spam Protection) 
We use the "Friendly Captcha" service on our website (www.friendlycaptcha.com). 
This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. 
Friendly Captcha is a new type of privacy-friendly security solution to make it increasingly difficult for automated programs and scripts (so-called "bots") to use our website. 
For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms) so that the visitor's end device can establish a connection to Friendly Captcha's servers in order to receive a computational task from Friendly Captcha. The visitor's end device solves the computational task, which requires certain system resources, and sends the computation-al results to our web server. Our server contacts the Friendly Captcha server via an API and receives a response stating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, further process or reject them. 


The data is used exclusively for the protection against spam and bots as described above. 
Friendly Captcha does not set or read cookies on the visitor's end device. 
IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person. 
 

6.1.2. Integration of Google Maps

a) We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. This service is restricted for children aged 12 or under.

b) When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

c) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

 

6.1.3 Matomo

Matomo, an open-source web analytics platform, supports privacy-friendly tracking techniques, including 2-byte IP masking to anonymize user data.

How 2-Byte Masking Works in Matomo:

When IP anonymization is enabled, Matomo applies 2-byte masking by replacing the last two octets of a visitor’s IP address with zeros. For example:

  • Original IP: 192.168.1.100
  • Masked (2-byte): 192.168.0.0

This reduces tracking granularity while still allowing general geographic and network analysis. The masked IP ensures compliance with privacy laws (e.g., GDPR) by limiting personally identifiable data.

Matomo also supports 1-byte, 2-byte, or 3-byte masking, depending on the level of anonymity required.

 

Data That Can Still Be Used for Tracking with Two-Byte Masking:

  1. General Location Data
    • Approximate geographic location (country or region-level, but not city-level).
    • Internet Service Provider (ISP), but with lower accuracy.
  2. Session & Behavioral Data
    • Page views and time spent on each page.
    • Navigation paths (entry and exit pages).
    • Clicks and interactions (e.g., button presses, downloads).
    • Referrer information (where the visitor came from).
  3. Technical Data
    • Browser type and version.
    • Operating system and device type (mobile, desktop, tablet).
    • Screen resolution.

Limitations of Two-Byte Masking:

  • Visitors cannot be precisely identified by IP.
  • City-level geolocation is lost.
  • Multiple users from the same network (e.g., corporate offices) may appear as the same visitor.

If you have any questions about these service providers in relation to you or your child, please contact us at the information provided at the top of this policy.

 

7. Data processing when you use our offers 


7.1. Customer service 


7.1.1. Controller responsible under data protection law 
If you require customer service or if you contact the Ravensburger Group in general, your contact partner is our customer service at Ravensburger Verlag GmbH. 


 
7.1.2. Data processing in connection with your service request 

We process the personal data you provide when you submit a service request in order to process your service request. 
If your request concerns a different Ravensburger company, we may pass it on to the specialist area responsible if this is necessary. 
 

We also save your data in a customer profile so that we can provide the best possible support if you have any requests or inquiries in the future. When we send replacement parts, we also store the transaction data in order to prevent misuse of our service. 
After we have handled your service request, we send you an anonymous customer satisfaction survey. We also carry out anonymized analyses of service requests so that we can continually improve our product and service quality. 
We erase your data after three years. 
 

8. Cookies and settings options

 

8.1. Use of cookies on this website 
When you use our website, cookies and similar tools are saved on your computer. Cookies are small text files that are stored on your computer and linked to the browser you use. They provide certain information to the organization which places the cookie (in this case our company). Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make websites generally more user-friendly and effective. 
We distinguish between cookies that are necessary for the technical functions of the website and optional cookies. Optional cookies enable us to make our websites easy to use as well as functional and to compile anonymous statistics on the use of our website so that we can improve it. If you block cookies, you may not be able to use all the functions of the websites. 
 
8.2. We use the following categories of cookie: 
 
8.2.1. Technically necessary cookies 
These cookies are always necessary for the website to be displayed, for it to be technically secure, and for the provision of other basic functions of the website.

8.2.2. Statistics 
These cookies enable Ravensburger Group to statistically evaluate visits to and use of our websites. We use them for example to determine user numbers and what content is popular.
 

Data Security

Ravensburger uses generally accepted security measures and safeguards in an attempt to keep the data it collects secure and requires that the service providers it works with agree to do the same. The measures and safeguards include limiting access to the data to those persons who need it to complete their work for Ravensburger and using a fire-wall protected environment and storing personal information in secure operating environments. Please be aware though that, despite our best efforts, no security measures are perfect or impenetrable.