A. Name and address of the person responsible
We, Ricoma Europe GmbH, are responsible under data protection Regulation within the meaning of Art. 4 No. 7 GDPR (DSGVO) for the data processed under eu.ricoma.com ("website") and the associated data processing. If offers from other providers ("third-party offers") are accessible from our website, our privacy policy does not apply to these third-party offers. In this case, we are also not responsible for the processing of your personal data in the context of such third-party offers.
Our contact details are:
Ricoma Europe GmbH
Ferdinand-Porsche-Ring 13
63110 Rodgau
Telephone number: 06106/660 2930
E-mail address: […]
You can also contact datenschutz@.... if you have any questions about data protection.
B. Type and scope of data processing
I. Provision of the website and log files
Each time our website is accessed, we process the following access data in so-called server log files
- Host name of the accessing computer
- IP address (anonymized)
- Date and time of accessing our website
- Browser type used
- Operating system used
- Referrer URL (i.e. the website you visited previously)
The IP address can be a personal date because, under certain circumstances, it is possible to find out the identity of the owner of the Internet access used by obtaining information from the respective Internet provider. However, we only store and process the IP address in anonymized form so that it is no longer personally identifiable.
This data is processed for the purpose of ensuring the trouble-free operation of our website and for the purpose of ensuring the security of our information technology systems.
II. Processing of your requests
We process the personal data that you voluntarily provide to us when you contact us, in particular by e-mail or via our contact form. We cannot process your inquiries without this data.
This data will only be processed for this correspondence with you and for the purpose for which you have provided us with the data in the context of this communication, e.g. to process your request or to contact you at your request.
In this case, the processing of personal data takes place with your consent and is permissible in accordance with Art. 6 para. 1 lit. a) GDPR. Insofar as the processing is necessary for the fulfillment of a contract with you or for the implementation of pre-contractual measures at your request, the legal basis is Art. 6 para. 1 lit. b) GDPR.
After your request has been fully processed, your data will be blocked for further use and deleted after any existing retention periods have expired, unless you have expressly consented to further use of your data or we otherwise have a right to store it.
III. Cookies
We use cookies on our website. These are data records that are stored on your end device by the Internet browser. A cookie contains, for example, a string of characters that enables your browser to be uniquely identified when you return to the website.
We use both cookies that are absolutely necessary for the operation of our website ("technically necessary cookies") as well as cookies that serve analysis, marketing or other convenience purposes ("other cookies").
In detail, we use the following cookies:
- XSRF-TOKEN
- _GRECAPTCHA
- __cf_bm
- __cf_bm
- _cfuvid
- ricoma_session
IV. Presence in social networks (social media)
We maintain a presence on social networks and process user data in this context to communicate with the users who are active there. We have a legitimate interest in this, Art. 6 para. 1 lit. f) GDPR.
In this process, user data may also be processed outside the European Economic Area.
The user data can also regularly be used by the respective social networks for market research and advertising purposes. User profiles can also be created for this purpose. For a comprehensive description of the type and scope of the processing of personal data by the respective social networks, please refer to their privacy policies. If you make use of your data subject rights in connection with the processing of your data in connection with social networks and our presence there (see section C. below), we would like to point out that these can be asserted most effectively with the providers. Only the social networks themselves have access to the user data and can take the actions you request and provide information. However, you can of course contact us if you require assistance in asserting your claims.
Facebook: We are jointly responsible with Meta Platforms Ltd ("Facebook") for the collection of data from visitors to our fan page. This also includes information about the content you have viewed or the interaction with our fan page or about the device you are using. You can find further information at https://www.facebook.com/privacy/policy/.
Facebook also uses this information to provide us with analysis services ("Page Insights") so that we can gain insights into how visitors to our fan page interact with our fan page. We have concluded a special agreement with Facebook for this purpose, which you can view at https://www.facebook.com/legal/terms/page_controller_addendum Among other things, this agreement regulates which security measures Facebook must observe and that Facebook is responsible for the fulfillment of data subject rights. Further information can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data.
To clarify: joint responsibility is limited to the collection and transmission of data to Facebook. Facebook is based in the EU. The further processing of the data is the sole responsibility of Facebook. This applies in particular to the transmission of data to the parent company Meta Platforms, Inc. in the USA. The parent company is certified under the EU-US Privacy Framework.
You can view the general privacy policy at https://www.facebook.com/privacy/policy/.
X: You can view the privacy policy of the provider (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland) at https://x.com/de/privacy.
Instagram: You can view the privacy policy of the provider (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) at https://privacycenter.instagram.com/policy/.
YouTube: You can view the privacy policy of the provider (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) at https://policies.google.com/privacy.
Pinterest: You can view the privacy policy of the provider (Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland) at https://policy.pinterest.com/de/privacy-policy.
TikTok: The privacy policy of the provider (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, United Kingdom, EC1A 9HP) can be viewed at https://www.tiktok.com/de/privacy-policy.
C. Your rights
You have the following rights in connection with the processing of your personal data by us:
I. Revocation of consents granted
You can revoke any consent given to us at any time with effect for the future.
II. Information
You have a right of access to the personal data stored about you. In addition, you are entitled to information about the information listed in Art. 15 GDPR.
III. Correction and deletion
You also have the right to correction of inaccurate personal data and completion of incomplete personal data in accordance with Art. 16 GDPR, as well as the right to have your personal data deleted if the requirements of Art. 17 GDPR are met.
IV. Restriction of processing
You can restrict the processing of your personal data under the conditions set out in Art. 18 GDPR.
V. Release of data and data transfer
Furthermore, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right, insofar as this is technically feasible, for us to transfer this data to another controller on your instructions. The right to data portability only applies to personal data where the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the processing is carried out by automated means. The right to transfer data to another controller is excluded if this would adversely affect the rights and freedoms of other persons (e.g. personal data of third parties, our business and trade secrets or copyrights).
VI. Right of objection
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, insofar as this is done on the basis of Art. 6 para. 1 lit. e) or lit. f) GDPR. In the event of such an objection, we will no longer process this data unless we can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for the purpose of direct marketing,. you have the right to object at any time to the processing of your personal data for the purpose of such marketing. In this case, we will no longer process your personal data for the purpose of direct advertising.
The assertion of all of the above rights is generally free of charge for you.
However, in the case of manifestly unfounded or - especially in the case of frequent repetition - excessive requests regarding the rights under II. to VI. we may, in accordance with Art. 12 (5) GDPR, either
(i) charge a reasonable fee taking into account the administrative costs of providing the information or notification or implementing the requested measure; or
(ii) refuse to act on the application.
To exercise your rights, please contact the contact addresses given above, in particular datenschutz@.....
VII. Right of appeal
If you are of the opinion that we are not properly fulfilling our data protection obligations, you can contact the data protection supervisory authorities at any time.
You can contact the supervisory authority ultimately responsible for us as follows:
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 31 63
65021 Wiesbaden
Phone: 06 11/140 80
E-mail: poststelle@datenschutz.hessen.de
D. Obligation to provide data
There is no legal or contractual obligation to provide us with personal data. However, the provision of data that is absolutely necessary for the provision of the respective service (see above) is necessary if you wish to make use of these services.
E. Updating this privacy policy
From time to time it may be necessary to update this privacy policy, for example due to new legal or regulatory requirements or new offers on our website. We will then inform you here. In general, we recommend that you visit this privacy policy regularly to check whether there have been any changes. You can recognize such changes, among other things, by the fact that the status indicated at the bottom of this document has been updated.
Status: July 2024
