RICANO

Privacy Policy

Controller responsible for data processing:

Ricano GmbH
Auguststraße 1
53229 Bonn

Phone: 0228469877

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time you access a page, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offering. This serves to safeguard our legitimate interests, which predominate within the scope of a balancing of interests, in the correct presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR.

Hosting

Hosting and website presentation services are provided in part by our service providers as processors on our behalf. Unless stated otherwise in this privacy policy, all access data and all data collected via forms provided on this website is processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection by decision: United Kingdom, Canada, USA.

An adequacy decision by the European Commission for the USA exists as a basis for a third-country transfer, insofar as the respective service provider is certified. Until certification by our service providers, data transfer continues to rely on this basis: Standard Contractual Clauses of the European Commission.

Our service providers are based in and/or use servers in these countries: Australia.

No adequacy decision by the European Commission exists for these countries. Our cooperation with you is based on the following safeguards: Standard Contractual Clauses of the European Commission.

2. Data Processing for Contract Fulfilment and Contact

2.1 Data Processing for Contract Fulfilment

For the purpose of contract fulfilment (including inquiries about and processing of any existing warranty and performance defect claims as well as any statutory update obligations) pursuant to Art. 6(1)(1)(b) GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, as in these cases we require the data for contract fulfilment and cannot ship the order without it. The data collected is evident from the respective input forms.

Further information on the processing of your data, in particular on disclosure to our service providers for order, payment and shipping processing, can be found in the following sections of this privacy policy. Once the contract has been fully performed, your data will be restricted from further processing and deleted after expiry of the tax and commercial law retention periods pursuant to Art. 6(1)(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or we reserve a further use permitted by law about which we inform you in this policy.

Inventory Management System

We use inventory management systems from external service providers to process orders and contracts. Our service providers act on our behalf as processors. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

2.2 Customer Account

Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR by choosing to open a customer account, we use your data for the purpose of opening the customer account and storing your data for future orders on our website. You can delete your customer account at any time, either by sending a message using the contact details described in this privacy policy, or via a function provided for this purpose in your customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or we reserve a further use permitted by law about which we inform you in this policy.

2.3 Contact

In the course of customer communication, we collect personal data pursuant to Art. 6(1)(1)(b) GDPR to process your inquiries, when you voluntarily provide it to us when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, as in these cases we require the data to process your inquiry. The data collected is evident from the respective input forms. Once your inquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or we reserve a further use permitted by law about which we inform you in this policy.

3. Data Processing for Shipping

For contract fulfilment pursuant to Art. 6(1)(1)(b) GDPR, we pass on your data to the shipping company commissioned with delivery, insofar as this is necessary for delivery of ordered goods.

Disclosure to Shipping Providers for Delivery Announcements

If you have given us your explicit consent during or after your order, we pass on your email address and phone number to the selected shipping provider on this basis pursuant to Art. 6(1)(1)(a) GDPR, so it can contact you before delivery for the purpose of announcing or coordinating delivery.

Consent can be withdrawn at any time by sending a message using the contact details described in this privacy policy, or directly to the shipping provider at the contact address listed below. After withdrawal, we delete the data you provided for this purpose, unless you have expressly consented to further use of your data, or we reserve a further use permitted by law about which we inform you in this policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

4. Data Processing for Payment

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the payment method selected, we pass on the data necessary to process the payment transaction to our technical service providers, who act as processors on our behalf, or to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary to process the payment. This serves contract fulfilment pursuant to Art. 6(1)(1)(b) GDPR. In some cases, payment service providers collect the data necessary to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies. If you have questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimising Our Payment Processes

Where applicable, we pass additional data to our service providers, which they use, together with the data necessary to process the payment, as our processors for fraud prevention and optimising our payment processes (e.g. invoicing, handling disputed payments, supporting accounting). This serves to safeguard our legitimate interests, which predominate within the scope of a balancing of interests, in protecting against fraud and efficient payment management, pursuant to Art. 6(1)(1)(f) GDPR.

5. Advertising by Email

5.1 Email Newsletter Without Registration and Your Right to Object

If we receive your email address in connection with the sale of goods or a service and you have not objected, we reserve the right, on the basis of Section 7(3) of the German Act Against Unfair Competition (UWG), to regularly send you offers by email for products similar to those already purchased from our range. This serves to safeguard our legitimate interests, which predominate within the scope of a balancing of interests, in advertising to our customers.

You can object to this use of your email address at any time by sending a message using the contact details described in this privacy policy, or via a link provided for this purpose in the promotional email, without incurring any costs other than the transmission costs according to the basic rates.

After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR, or we reserve a further use permitted by law about which we inform you in this policy.

5.2 Newsletter Dispatch

The newsletter may also be sent by our service providers as processors on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

6. Cookies and Other Technologies

General Information

To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. once you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies).

Protection of Privacy on Devices

When using our online offering, we use strictly necessary technologies to provide the telemedia service you expressly requested. Storing information on your device, or accessing information already stored there, does not require consent in this respect.

For non-essential functions, storing information on your device, or accessing information already stored there, requires your consent. Please note that if consent is not given, parts of the website may not be fully usable. Any consent given remains valid until you adjust or reset the relevant settings on your device.

Downstream Data Processing via Cookies and Other Technologies

We use technologies that are strictly necessary to use certain functions of our website (e.g. shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information, and information on your use of our website (e.g. information on the contents of the shopping cart). This serves our legitimate interests, which predominate within the scope of a balancing of interests, in an optimised presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR.

We also use technologies to fulfil the legal obligations we are subject to (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have consented to the use of these technologies pursuant to Art. 6(1)(1)(a) GDPR, you can withdraw your consent at any time by sending a message using the contact details described in this privacy policy.

7. Use of Cookies and Other Technologies

Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose no longer applies and our use of the respective technology ends, the data collected in this context is deleted. You can withdraw your consent at any time with effect for the future. Further information on your withdrawal options can be found in the "Cookies and other technologies" section. Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have questions about the providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

Use of Google Services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") described below. Information automatically collected by Google's technologies about your use of our website is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for the individual technologies, data processing takes place on the basis of an agreement concluded for the respective technology between joint controllers pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy notices.

Our service providers are based in and/or use servers in countries outside the EU and EEA, for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are based in and/or use servers in countries outside the EU and EEA. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on Standard Contractual Clauses of the European Commission.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information on your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded for processing on further Google servers. Data processing takes place on the basis of a data processing agreement with Google.

For the purpose of optimised marketing of our website, we have activated the data-sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google's services. Data sharing with Google under these data-sharing settings takes place on the basis of an additional agreement between controllers. We have no influence on the subsequent processing of data by Google.

We also use Google Analytics' extension Google Optimize to create and run tests.

For the purpose of optimised marketing of our website, we use the so-called User-ID function. This function allows us to assign a unique, permanent ID to your interaction data across one or more sessions on our online presences, and thus analyse your user behaviour across devices and sessions.

For web analysis and advertising purposes, Google Analytics' extension enables recognition of your browser when visiting other websites via the so-called DoubleClick cookie. Google will use this information to compile reports on website activity and to provide further services related to website use.

Google AdSense

Our website markets advertising space for third-party ads via Google AdSense. These ads are displayed to you at various points on this website. The so-called DoubleClick cookie enables the display of interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information on your use of our website), as well as the automatic assignment of a pseudonymous user ID, which is used to determine interests based on visits to this and other websites.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website. This automatically enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information on your use of our website), by means of a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have activated the "personalised advertising" setting in your Google account. If you are logged into Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we measure your subsequent usage behaviour via Google Ads Conversion Tracking if you reached our website through a Google Ads advertisement. Cookies may be used for this purpose, and data (IP address, time of visit, device and browser information, and information on your use of our website based on events we specify, such as visiting a page or newsletter sign-up) may be collected, from which usage profiles are created using pseudonyms.

Google Maps

For the visual display of geographic information, Google Maps collects data on your use of the Maps functions, in particular the IP address and location data, transmits it to Google, and Google then processes it. We have no influence on this subsequent data processing.

Google reCAPTCHA

To protect against misuse of our web forms and against spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information, and information on your use of our website) and analyses your use of our website using so-called JavaScript and cookies. In addition, other cookies stored in your browser by Google services are evaluated. Personal data is not read or stored from the input fields of the respective form.

8. Integration of the Trusted Shops Trustbadge / Other Widgets

Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR, Trusted Shops widgets are embedded on this website to display Trusted Shops services (e.g. quality seal, collected reviews) and to offer Trusted Shops products to buyers after placing an order.

The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly controllers under data protection law pursuant to Art. 26 GDPR. In this privacy notice, we inform you below about the essential contract contents pursuant to Art. 26(2) GDPR.

Within the scope of the joint controllership existing between us and Trusted Shops AG, please preferably contact Trusted Shops for data protection questions and to assert your rights, using the contact options given in their privacy notice. Regardless of this, you can always contact the controller of your choice. Your request will then, if necessary, be forwarded to the other controller for response.

8.1 Data Processing When Embedding the Trustbadge / Other Widgets

The Trustbadge is provided by a US-based CDN (content delivery network) provider. An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, available here for the USA. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection, so that the stored data cannot be attributed to you. The anonymised data is used in particular for statistical purposes and error analysis.

8.2 Data Processing After Order Completion

Where you have given your consent, after completing an order the Trustbadge accesses order information (order total, order number, product purchased if applicable) and your email address stored on your device, and your email address is hashed using a cryptological one-way function. The hash value is then transmitted to Trusted Shops together with the order information pursuant to Art. 6(1)(1)(a) GDPR.

This serves to check whether you are already registered for Trusted Shops services. If so, further processing follows the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, or do not consent to automatic recognition via the Trustbadge, you will subsequently be given the option to register manually for the services or complete cover under any existing usage contract.

For this purpose, after your order is completed, the Trustbadge accesses the following information stored on your device: order total, order number and email address. This is necessary so we can offer you buyer protection. Data is only transmitted to Trusted Shops once you actively decide to conclude buyer protection by clicking the correspondingly labelled button in the so-called Trustcard. Should you choose to use the services, further processing follows the contractual agreement with Trusted Shops pursuant to Art. 6(1)(b) GDPR, in order to complete your registration for buyer protection and secure the order, as well as to potentially send you review invitations by email afterwards.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, available here for the USA and here for Israel. Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

9. Social Media

Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest, LinkedIn

Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR to the respective social media operator, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms named above, from which usage profiles are created using pseudonyms. These may be used, for example, to place ads within and outside the platforms that presumably match your interests. Cookies are typically used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your related rights and privacy settings, please refer to the privacy notices of the providers linked below. Should you still need help, you may contact us.

Facebook (by Meta) is an offer from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our Facebook (by Meta) presence is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing when visiting a Facebook (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (on Insights data) is available here.

An adequacy decision by the European Commission for the USA exists as a basis for a third-country transfer, insofar as the respective service provider is certified. Certification exists.

Our service providers are based in and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. No adequacy decision by the European Commission exists for these countries. Our cooperation with you is based on the following safeguards: Standard Contractual Clauses of the European Commission.

Instagram (by Meta) is an offer from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our Instagram presence is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing when visiting an Instagram (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (on Insights data) is available here.

An adequacy decision by the European Commission for the USA exists as a basis for a third-country transfer, insofar as the respective service provider is certified. Certification exists.

YouTube is an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google about your use of our YouTube presence is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are based in and/or use servers in countries outside the EU and EEA, for which the European Commission has determined an adequate level of data protection by decision.

Pinterest is an offer from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). Information automatically collected by Pinterest about your use of our Pinterest presence is generally transferred to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Our service providers are based in and/or use servers in countries outside the EU and EEA, for which the European Commission has determined an adequate level of data protection by decision.

LinkedIn is an offer from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). Information automatically collected by LinkedIn about your use of our LinkedIn presence is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection by decision: USA.

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us, to the extent specified there;
pursuant to Art. 16 GDPR, the right to request immediate correction of incorrect data or completion of your personal data stored by us;
pursuant to Art. 17 GDPR, the right to request deletion of your personal data stored by us, unless further processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defence of legal claims;
pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful but you refuse deletion, we no longer need the data but you need it for the assertion, exercise or defence of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority of your usual place of residence or work, or of our company's registered office.

Right to Object

Where we process personal data as described above to safeguard our legitimate interests, which predominate within the scope of a balancing of interests, you may object to this processing with effect for the future. Where processing occurs for direct marketing purposes, you may exercise this right at any time as described above. Where processing occurs for other purposes, you are only entitled to a right to object where reasons arise from your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

This does not apply where processing occurs for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

10.2 Contact Options

If you have questions about the collection, processing or use of your personal data, or wish to request information, correction, restriction or deletion of data, or to withdraw consent given or object to a specific use of data, please contact us directly using the contact details in our Legal Notice.

Last updated: August 2026