Privacy Policy of GONSO | Maier Sports GmbH
Preamble
GONSO | Maier Sports GmbH is pleased that you are visiting our website. We attach great importance to data protection and data security when using our website. We would therefore like to inform you below about which of your personal data we collect when you visit our website and for which purposes this data is used.
As amendments to legislation or changes to our internal corporate processes may require this Privacy Policy to be amended, we ask you to read this Privacy Policy regularly.
This Privacy Policy applies to GONSO’s online services, which are available at https://www.gonso.de.
1. Name and address of the controller
The controller and service provider is GONSO | Maier Sports GmbH, Nürtinger Str. 27, 73257 Köngen, Germany, hereinafter referred to as “GONSO”.
2. Name and address of the Data Protection Officer
Our Data Protection Officer is Sebastian Meyer, Schwanweg 1, 90562 Heroldsberg, Germany.
You may also contact our Data Protection Officer at any time with any questions relating to data protection. The best way to contact him is by email at:
3. General information on data processing
As a general rule, we collect and use our users’ personal data only to the extent necessary to provide a functional website and our content and services.
3.1 Personal data
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour.
Information that cannot be associated with you, or can only be associated with you with disproportionate effort, for example because it has been anonymised, does not constitute personal data.
3.2 Processing of personal data
Processing means any operation or set of operations performed on personal data, whether or not by automated means. This includes, in particular, the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
3.3 Legal bases for processing personal data
As a general rule, the collection and use of our users’ personal data takes place only with the user’s consent. Where we obtain the consent of the data subject for processing operations involving personal data, the legal basis is Article 6(1)(a) of the EU General Data Protection Regulation (“GDPR”).
An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR constitutes the legal basis. This also applies to processing operations that are necessary in order to take steps at the request of the data subject prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Article 6(1)(c) GDPR constitutes the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and the interests, fundamental rights and freedoms of the data subject do not override those interests, Article 6(1)(f) GDPR constitutes the legal basis.
4. Data processing operations
Personal data is collected via this website if you provide it to us voluntarily, for example by completing forms or sending emails.
We use this data for the purposes specified in each case or for purposes arising from your enquiry, such as using your email address to contact you.
Personal data is only transferred to third parties if this is expressly permitted by law or if you have consented to such transfer in the course of an active business relationship.
4.1 Informational use of the website
You can visit our website without providing any personal information. If you use our website solely for informational purposes, meaning that you do not provide us with any information about yourself, we do not process any personal data, with the exception of data transmitted by your browser to enable you to visit the website.
For the technical provision of our website, it is necessary for us to process certain information transmitted automatically by you so that your browser can display our website and you can use it.
This information is automatically collected each time our website is accessed and stored in our server log files. The information relates to the computer system used to access the website.
The following information is processed:
- Host
- User’s IP address
- Date and time of access
- Access method, such as GET or POST
- Request
- Protocol, such as HTTPS
- Status, such as error messages
- Amount of data retrieved
- Referrer
- User’s browser and operating system
The legal basis for processing this data is Article 6(1)(f) GDPR. Processing the above-mentioned data is necessary to provide the website and therefore serves to safeguard our company’s legitimate interest.
As soon as the above-mentioned data is no longer required to display the website, it is deleted. The collection of data for the provision of the website and the temporary storage of data in log files are essential for operating the website.
The data may be stored for a longer period in individual cases if this is required by law.
In addition to using our website for purely informational purposes, you may also actively use it, for example to contact us. In this case, in addition to the processing described above, we process the following personal data:
4.2 Registration — customer account and service account — and registration process
On our website, we offer users the opportunity to register by providing personal data for the purpose of creating a customer account in the GONSO online shop.
The data is entered into an input form and transmitted to us and stored by us. As a general rule, the data is not passed on to third parties unless this is essential for the performance of a contract.
The following personal data is collected as part of the registration process:
- First name and surname
- Address
- Email address
- Telephone number
- Password chosen by you
The password cannot be viewed by GONSO | Maier Sports GmbH.
In addition, the following personal data is collected:
- IP address
- Date and time of registration
Using the processed data, we create an individualisable user account for you, which allows you to use certain content and services, such as the GONSO online shop on our website.
As soon as the registration on our website is cancelled or amended, the data processed during the registration process is deleted. The data may be stored for a longer period in individual cases if this is required by law.
As a user, you may cancel your registration at any time. To do so, send us an email expressing your wish to:
You may request changes to the data stored about you in your customer account at any time.
Pursuant to Article 6(1)(b) GDPR, the processing of the personal data described above serves to take steps prior to entering into a contract or to perform a contract.
4.3 Ordering process in the GONSO online shop
To process orders placed in the GONSO online shop, we require the following information about you:
- First name and surname
- Address
- Email address
- Telephone number
- Date of birth
- Where applicable, gender and size
You are free to decide whether to provide us with this data. However, without this information, we cannot process your order.
Please note that we use third-party companies. We cooperate with Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany, formerly heidelpay GmbH, to provide you with a convenient online payment option.
The following data is transmitted to the service provider as part of the payment process:
- Name of the invoice recipient
- Billing address
- Name of the parcel recipient
- Delivery address
- Order number
- Order contents, such as items, quantity, price, discounts or similar information
You can view Unzer’s privacy information here:
Your data is then forwarded to the credit institution or online payment service commissioned to process the payment.
Some of the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider using your access details during the ordering process.
The Privacy Policy of the respective payment service provider applies in this respect.
For the processing of your personal data that is necessary to perform a purchase contract concluded with us, in particular for payment processing, Article 6(1)(b) GDPR constitutes the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
In some cases, we may also be legally obliged to transmit data relating to you. This applies in particular to the implementation of strong customer authentication pursuant to Directive (EU) 2015/2366 (“PSD2”) or the German Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz — ZAG).
Where we are legally obliged to transmit the data, Article 6(1)(c) GDPR in conjunction with the relevant provisions of Directive (EU) 2015/2366 (“PSD2”) or the German Payment Services Supervision Act constitutes the legal basis.
Once the contract has been fully performed and the purchase price has been paid in full, your data will be blocked from further use and deleted once the retention periods under tax and commercial law have expired, unless you have expressly consented to the further use of your data.
The data may be stored for a longer period in individual cases if this is required by law.
Payment via PayPal
If you choose to pay via “PayPal” during the ordering process, your personal data will be automatically transmitted to PayPal via the payment service provider Unzer GmbH described above.
PayPal is a service provided by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
PayPal acts as an online payment service provider and escrow agent and offers buyer protection services.
The personal data transmitted to PayPal generally includes your first name, surname, address, email address, IP address and other data required to process the payment.
Personal data relating to the respective order is also required to process the purchase contract, such as the number of items, item number, invoice amount, taxes and other billing information.
This corresponds to our legitimate interest in offering an efficient and secure payment method pursuant to Article 6(1)(f) GDPR.
In this context, we disclose the aforementioned data to PayPal to the extent necessary to perform the contract pursuant to Article 6(1)(b) GDPR.
PayPal also reserves the right to collect personal data from the buyer. According to PayPal, this may include the following information:
- Name
- Address
- Telephone number
- Email address
- Account number
PayPal may disclose your personal data to affiliated companies, service providers or subcontractors where this is necessary to fulfil contractual obligations or where the data is processed on PayPal’s behalf.
The personal data transmitted by us to PayPal may, under certain circumstances, be transmitted by PayPal to credit reference agencies. This transmission serves the purpose of identity and creditworthiness checks.
PayPal uses the result of the creditworthiness check, taking into account the statistically calculated probability of payment default, to decide whether to provide the respective payment method.
The creditworthiness information may contain probability values, known as score values. Where score values are included in the result of the creditworthiness check, they are based on a scientifically recognised mathematical and statistical procedure.
You can find out which credit reference agencies are involved here:
You may withdraw your consent to the processing of your personal data by PayPal at any time.
However, withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal, provided that the personal data must be processed, used or transmitted for the contractual processing of the payment.
You can access PayPal’s Privacy Policy at:
The personal data collected by the service provider for invoicing purposes will be deleted once it is no longer required to achieve the purposes described above or if a user requests its deletion.
The data may be stored for a longer period if this is required by law, for example due to retention obligations under tax and commercial law.
4.4 Delivery
Delivery is carried out by the following shipping company:
DHL Paket GmbH
Pursuant to Article 6(1), first sentence, point (b) GDPR, your data is disclosed to the shipping company commissioned with the delivery to the extent necessary to deliver the goods you have ordered.
If you have expressly consented, during or after placing your order, to us notifying you of or coordinating the delivery, we will disclose your email address and telephone number to the selected shipping service provider on the basis of this consent pursuant to Article 6(1), first sentence, point (a) GDPR.
The shipping service provider may contact you before delivery for the purpose of announcing or coordinating the delivery.
You may withdraw your consent at any time by sending a message to the contact details described above or directly to the shipping service provider at the following address:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Following withdrawal of your consent, we will delete the data provided for this purpose unless statutory retention obligations prevent us from doing so.
4.5 Active use of the website — newsletter
To subscribe to our email newsletter, we require at least your email address, to which the newsletter will be sent, in addition to your consent.
You are free to decide whether to provide us with this data. However, without this information, we may not be able to send you our newsletter.
Please note that we currently cooperate with InxMail GmbH, Wentzingerstraße 17, 79106 Freiburg, Germany, for the distribution of our newsletter. InxMail processes your data on our behalf and ensures the proper dispatch of the emails.
Your data is not disclosed to third parties in connection with the distribution of the newsletter beyond this.
Further information about InxMail GmbH, your data protection rights and the available settings for protecting your privacy can be found at:
To optimise or personalise the newsletter, and provided that you have given your additional consent, we analyse how often it is opened by readers and which links they click. This enables us to analyse user behaviour.
The use of the newsletter software enables us to access personal recipient responses. By subscribing to our newsletter, you consent to tracking and the processing of personal responses.
You may withdraw your consent to tracking at any time using the link at the end of each newsletter.
For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you the newsletter once you have confirmed your subscription by clicking the link in a confirmation email sent to you for this purpose.
This is intended to ensure that only you, as the holder of the email address provided, can subscribe to the newsletter.
You must confirm your subscription promptly after receiving the confirmation email; otherwise, your newsletter subscription will automatically be deleted from our database.
Where the user has provided consent, the legal basis for processing the data after subscribing to the newsletter is Article 6(1)(a) GDPR.
When you subscribe to the newsletter, your email address is used for our own advertising purposes until you unsubscribe from the newsletter.
To unsubscribe and withdraw your consent with effect for the future, you may send us an informal email at any time and without stating a reason to:
Alternatively, you may unsubscribe using the link at the end of the newsletter.
Your data will be stored for as long as you are subscribed to the newsletter. After you unsubscribe from the newsletter, your data will be deleted.
The data may be stored for a longer period in individual cases if this is required by law.
4.6 Contact form
If you use our contact form to send us an enquiry, we process your first name, surname and email address.
You may also send us an individual message using the message field.
You are free to decide whether to provide us with this data. However, without this information, we may not be able to fulfil your request to contact us, or may only be able to do so to a limited extent.
Your email address is used to allocate your enquiry and to enable us to respond to you.
Your personal data is not disclosed to third parties when you use the contact form.
The legal basis for processing the data transmitted when contacting us is Article 6(1)(f) GDPR.
When you contact us, processing your enquiry constitutes the necessary legitimate interest in processing the data.
If the email contact is aimed at concluding a contract, the legal basis for processing is Article 6(1)(b) GDPR.
As soon as your enquiry has been dealt with and the relevant matter has been conclusively clarified, the personal data processed via the contact form will be deleted.
The data may be stored for a longer period in individual cases if this is required by law.
4.7 Other forms of contact
Our website also provides our email address, info@gonso.de, and our postal address.
You may send us a message using the email address provided or by post. In this case, we process your first name, surname and the personal data transmitted with your message. In the case of an email, we also process your email address.
You may also send us an individual message using the message field.
You may also contact us by telephone. In this case, we process the data you provide.
You are free to decide whether to provide us with this data. However, without this information, we may not be able to fulfil your request to contact us, or may only be able to do so to a limited extent.
The data is not disclosed to third parties in this context. The data is used exclusively to process the conversation.
The legal basis for processing the data transmitted when contacting us is Article 6(1)(f) GDPR.
When you contact us, processing your enquiry constitutes the necessary legitimate interest in processing the data.
If the email contact is aimed at concluding a contract, the legal basis for processing is Article 6(1)(b) GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The conversation is considered concluded when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The data may be stored for a longer period in individual cases if this is required by law.
4.8 Competitions
If you wish to participate in one of our competitions, we require your name, address and email address.
Depending on the prize involved, we may also ask for your size and gender.
As a general rule, we collect and process competition participants’ personal data only to the extent necessary to participate in the competition.
This information is used exclusively to notify the winner and send out the prize.
You are free to decide whether to provide us with this data. However, without this information, we cannot take your participation in the competition into account.
As a general rule, your personal data is not disclosed to third parties.
Your personal data is only disclosed or otherwise transmitted to third parties if:
- we are legally obliged to do so pursuant to an official or court order; or
- we are entitled to do so, for example because this is necessary to prosecute criminal offences or to exercise and enforce our rights.
Where the user has registered for the competition, the legal basis for processing the data is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
This means that processing is necessary to take steps prior to entering into a contract or to perform a contract and to safeguard our company’s legitimate interests.
Once a competition has ended, the winners have been selected and notified, and any non-winning participants have also been informed, the personal data processed via the competition form will be deleted.
This does not affect the applicable statutory retention periods under the German Commercial Code or the German Fiscal Code.
During the statutory retention period, your personal data will be blocked and will not be used for any other data processing.
4.9 Applicant management
If you are interested in one of the vacancies advertised on our website, you can submit your application via our website.
You may also send your application at any time to the email address specified in the job advertisement or by post to the following address:
GONSO | Maier Sports GmbH
Nürtinger Str. 27
73257 Köngen
Germany
In this context, we process your first name, surname, email address, telephone number, individual message and all information provided by you in the attachments.
You can upload and send us your CV or other references and certificates as file attachments.
You are free to decide whether to provide us with this data.
We assure you that we process the personal data you provide solely for the purpose of carrying out the application process.
The legal basis for processing the personal data described above is Article 6(1), first sentence, point (b) GDPR in conjunction with Section 26(1), first sentence, of the revised German Federal Data Protection Act (Bundesdatenschutzgesetz — “BDSG-new”).
After the application process has been completed, the data is stored for six months in order to defend against any potential claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz — AGG).
If your application cannot be considered at the present time, you also have the option of consenting to our storing the documents submitted as part of your application, as well as any other data you provide, in our applicant database pursuant to Article 6(1)(a) GDPR.
This enables us to contact you in the future if a position matching your applicant profile becomes available.
You must expressly consent to the corresponding use of your application data when submitting your application for the relevant position.
You may withdraw your consent to the storage of your application data for a maximum period of twelve months at any time with effect for the future.
To do so, an email to the following address is sufficient:
4.10 Participation in GONSO events
On our website, we offer you the opportunity to register online to participate in various GONSO events, such as product tests.
In this case, we require the following data:
- First name and surname
- Email address
- Telephone number, provided voluntarily
- Any additional information, such as address, photograph(s), clothing size or gender
Please refer to the respective conditions of participation for more detailed information.
You are free to decide whether to provide us with this data. However, without this information, we may not be able to take your registration or participation into account.
Where the user has registered for a GONSO event, the legal basis for processing the data is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
This means that processing is necessary to take steps prior to entering into a contract or to perform a contract and to safeguard our company’s legitimate interests.
As soon as the relevant event has taken place, the personal data processed via the contact form will be deleted.
The data may be stored for a longer period in individual cases if this is required by law.
4.11 Dealer search
a) OUTTRA component
For the dealer search function, we use the OUTTRA component provided by 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart, Germany.
To display this function, the component needs to query the visitor’s IP address.
The component initially uses the IP address solely to send the relevant information to the browser or visitor. The IP address is therefore necessary to display this function.
For the dealer search function, the visitor’s IP address is anonymised on the OUTTRA server.
A database query is then carried out using the anonymised IP address. This allows the visitor to be located approximately based on the non-anonymised part of the IP address.
The local dealers are then displayed to the visitor on the website.
The legal basis for the processing of personal data described above is Article 6(1)(f) GDPR.
Our legitimate interest consists in the sale and promotion of our products and services and the associated functionality of the website.
If retrieving product availability serves to initiate a contract, the legal basis is Article 6(1)(b) GDPR.
In principle, you may object at any time to future processing of data relating to you that is carried out on the basis of Article 6(1)(f) GDPR, subject to the requirements of Article 21 GDPR.
The objection may be directed in particular against processing for the purposes of direct marketing.
Once the visitor’s browsing session has ended, no personal data is stored by the component, by 81 MEDIA GmbH or by GONSO.
b) Google Maps
To display the locations of physical dealers, we use the “Google Maps” component provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”.
When dealer locations are displayed using the “Google Maps” component, Google sets cookies in order to process user settings and data when the map and its associated functions are displayed.
For further information about this data processing, please refer to our Cookie Policy.
4.12 Product reviews
On our website, we offer you the opportunity to submit product ratings and publish reviews of GONSO products.
In this case, we require the following data:
- Email address
- Name or nickname
- Star rating
- Individual opinion
Your email address and name or nickname will not be published together with the rating or review.
You are free to decide whether to provide us with this data. Without providing the above-mentioned data, you cannot submit a product rating or review.
The data processing described above for the purpose of submitting a product review is based on your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time without stating a reason, with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
To withdraw your consent, send an email to datenschutz@schwan-stabilo.com or provide written notification to:
ORTOVOX Sportartikel GmbH
Rotwandweg 5
82024 Taufkirchen
Germany
The data is stored for as long as the purpose of the review continues to apply and you have not withdrawn your consent.
4.13 Postal direct marketing
For the purpose of sending direct marketing by post, we process your name, first name and address.
The legal basis for processing the data is our legitimate interest pursuant to Article 6(1)(f) GDPR in communicating commercial information.
In this case, you have the right to object to direct marketing at any time pursuant to Article 21(2) GDPR.
We store your personal data only for as long as necessary for the purpose of direct marketing.
5. Transfer of personal data to third parties
As a general rule, your personal data is not transferred to third parties.
Your personal data is only disclosed or otherwise transmitted to third parties if:
- we are legally obliged to do so pursuant to an official or court order;
- we are entitled to do so, for example because this is necessary to prosecute criminal offences or to exercise and enforce our rights; or
- you have given your prior consent.
6. Cookies and external services
Cookies are small files that make it possible to store specific information relating to the device on users’ access devices, such as a PC, smartphone or similar device.
Cookies serve to make websites more user-friendly and therefore easier for users to use. Some functions of our website cannot be offered without the use of technically necessary cookies.
Cookies may also be used to collect statistical data about website usage and analyse this data in order to improve the website.
Users can influence the use of cookies.
For more information about the use of cookies on our website and for individual cookie settings, please click here.
6.1 Meta Pixel
This website uses the Meta Pixel of the social network “Meta”, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The purpose is to present visitors to our website with interest-based advertisements when they visit the Meta social network.
When you visit our website, the Meta Pixel establishes a direct connection to Meta’s servers.
Meta is informed that you have visited our website and associates this information with your personal Meta user account.
Please note that, as the website provider, we have no knowledge of the content of the data transmitted or of how Meta uses it.
Further information about the collection and use of data by Meta, as well as your rights and options for protecting your privacy in this regard, can be found in Meta’s privacy information at:
We do not ourselves transmit any customer data to Meta.
Further information about your data protection rights and the available settings for protecting your privacy can be found at:
6.2 Social plug-ins — Meta, Instagram, YouTube, TikTok, Google+, Xing, LinkedIn and X, formerly Twitter
Our websites contain social plug-ins for the following social networks:
- “Meta”, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;
- “Google+”, operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland;
- “X”, formerly “Twitter”, operated by Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA;
- “LinkedIn”, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
- “TikTok”, operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; and
- “YouTube”, operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
These services are offered by the respective companies, hereinafter referred to as the “providers”.
On our website, the social plug-ins are identified by the respective buttons belonging to the relevant service.
Based on the data transmitted to the respective service via the social plug-ins, the service provider may be able to associate you with your account with that provider.
To enhance the protection of your data on our website, the social plug-ins are integrated using the so-called “two-click solution”.
This ensures that, when a page of our website containing such social plug-ins is accessed, no automatic connection is initially established with the servers of the respective providers.
The respective social plug-in is activated in two steps.
To activate a social plug-in, you must first click on the relevant link on our website. This initially activates the social plug-in and your browser establishes a connection to the servers of the respective provider.
You can then interact with the social plug-in by clicking a second time, for example to submit your recommendation.
If you are already logged in to one of the providers’ social networks, the providers may directly associate your visit to this website with your profile.
When you interact with the social plug-ins by clicking on them, the corresponding information is also transmitted directly to a server operated by the provider and stored there.
The information may also be published on the relevant social network and displayed to your contacts.
If you wish to prevent the data collected via our website from being directly associated with your profile, you must log out of your account with the respective provider before visiting our websites.
For information about the scope and purpose of data collection by the respective service, as well as the further processing and use of your data there, please refer to the privacy information provided directly on the service provider’s website.
These websites also provide further information about your data protection rights and the available settings for protecting your privacy.
a) Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
b) Google Ireland Limited
Google Building Gordon House
4 Barrow St
Dublin
D04 E5W5
Ireland
c) Twitter Inc.
1355 Market St, Suite 900
San Francisco, California 94103
USA
twitter.com/privacy
d) YouTube LLC
901 Cherry Ave.
San Bruno, CA 94066
USA
e) LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
f) TikTok Technology Limited
10 Earlsfort Terrace
Dublin
D02 T380
Ireland
7. Fan pages on Facebook, Instagram, YouTube and Kununu
We operate fan pages on the social networks Facebook, Instagram, YouTube and Kununu.
As the operator of these fan pages, we are joint controllers, within the meaning of Article 4(7) GDPR, together with the operators of these social networks.
When you visit one of our fan pages, the controllers process personal data.
As the controller of the fan pages, we have concluded agreements with the social networks that govern, among other things, the conditions for using these pages.
We have integrated this Privacy Policy into the relevant fan pages. You can find further information there. The information is also available at www.gonso.de:
- Facebook Data Policy
- Instagram Data Policy
- YouTube Data Policy
- Kununu Data Policy
8. Security measures to protect the data stored by us
We undertake to protect your privacy and treat your personal data confidentially.
To prevent the loss or misuse of the data stored by us, we implement extensive technical and organisational security measures. These measures are regularly reviewed and adapted to technological developments.
However, we would like to point out that, due to the structure of the internet, the data protection rules and the security measures described above may not be observed by other persons or institutions that are outside our area of responsibility.
In particular, data disclosed without encryption, including data sent by email, may be read by third parties.
We have no technical influence over this.
It is the user’s responsibility to protect the data they provide against misuse by means of encryption or other appropriate measures.
9. Hyperlinks
Our website contains hyperlinks to websites operated by other providers.
When you activate these hyperlinks, you are redirected directly from our website to the website of the other provider.
These may also be the corporate websites of GONSO’s partners. You can recognise this, among other things, by the change in the URL.
We cannot accept any responsibility for the confidential handling of your data on other websites.
For information about how your personal data is handled on other websites, please refer directly to the relevant websites.
10. Eye-Able
Eye-Able® is software provided by Web Inclusion GmbH that is intended to ensure reduced-barrier access to information on the internet for everyone.
The files required for this purpose, such as JavaScript, style sheets and images, are loaded from an external server.
When functions are activated, Eye-Able® uses the browser’s local storage to save the settings.
All settings are stored locally only and are not transmitted elsewhere.
To protect against attacks and provide our service in near real time, Eye-Able® uses the Content Delivery Network (“CDN”) of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia.
The service is used to perform our contractual obligations towards our customers pursuant to Article 6(1)(b) GDPR and in the interest of providing our online services securely, quickly and efficiently through a professional provider pursuant to Article 6(1)(f) GDPR.
All data transmitted and all servers remain within the EU at all times in order to enable data processing in compliance with the GDPR.
Web Inclusion GmbH does not collect or analyse personal user behaviour or any other personal data at any time.
To ensure data processing in compliance with the GDPR, Web Inclusion GmbH has concluded data processing agreements with our hosting provider, BunnyWay.
Further information can be found in the privacy policies:
11. External service providers
We use service providers to provide services and to process your data in connection with our services.
The service providers process the data exclusively in accordance with our instructions and have been obliged to comply with the applicable data protection regulations.
All data processors have been carefully selected and are granted access to your data only to the extent and for the period required to provide the services or to the extent to which you have consented to the processing and use of your data.
In this context, personal data may be transferred to countries outside the EU or the European Economic Area (“EEA”), in particular to the USA.
In order to ensure an adequate level of protection for your personal data when it is transferred to such so-called third countries, we have concluded the so-called EU standard contractual clauses with our service providers.
The USA is considered by the European Court of Justice to be a country with a level of data protection that is insufficient according to EU standards.
Due to the absence of an adequacy decision and suitable safeguards, there is, in particular, a risk that your data may be processed by US authorities for control and surveillance purposes, possibly without any effective legal remedies being available.
In addition, where possible, we remain in contact with the provider in order to ensure the protection of your personal data through any additional measures that may be required.
12. Storage period
Your personal data is deleted as soon as the respective purpose for processing has been achieved or subsequently ceases to apply.
In order to fulfil contractual obligations, data collected from you may be stored for as long as the contract remains in force and, depending on the scope of the contract, for a further six or ten years in order to comply with statutory retention obligations and to clarify any enquiries or claims that may arise after the contract has ended.
If, in our assessment, data is necessary to examine or defend against claims brought against us, or to initiate criminal prosecution or assert claims against you, us or third parties, we may store the data for as long as the relevant proceedings could be initiated.
For customer support purposes, the data collected from you may be stored for between three and ten years after collection, unless you request the deletion of this data and there are no contractual or statutory retention obligations preventing such deletion.
Relevant obligations to retain records and documents arise, among other things, from the German Commercial Code and the German Fiscal Code.
In this case, the legal basis for processing is the respective statutory provision in conjunction with Article 6(1)(c) GDPR.
If no contract is concluded, we will delete your data after three years, at the end of the statutory limitation period.
13. Rights of data subjects
13.1 Right of access — Article 15 GDPR
You have the right to request information from us at any time about the data stored by us concerning you, its origin, the recipients or categories of recipients to whom the data is disclosed, and the purpose for which it is stored.
13.2 Right to withdraw consent — Article 7(3) GDPR
If you have consented to the use of your data, you may withdraw this consent at any time without stating a reason, with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
To withdraw your consent, send an email to datenschutz@schwan-stabilo.com or provide written notification to:
GONSO | Maier Sports GmbH
Nürtinger Str. 27
73257 Köngen
Germany
13.3 Right to rectification — Article 16 GDPR
You may request the rectification of inaccurate data or the completion of incomplete data stored by us.
13.4 Right to erasure and restriction of processing — Articles 17 and 18 GDPR
You have the right to request the restriction of processing and the deletion of the data stored by us relating to you.
If statutory retention obligations or other legally established grounds conflict with deletion, your data may only be restricted rather than deleted.
13.5 Right to data portability — Article 20 GDPR
If you request the personal data you have provided to us, we will, at your request, provide or transmit this data to you or another controller in a structured, commonly used and machine-readable format.
This applies only where technically feasible.
13.6 Right to object — Article 21 GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data relating to you, subject to the requirements of Article 21 GDPR, where the data is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
13.7 Contact for exercising data subject rights
To exercise your data subject rights, you can contact us by email at datenschutz@schwan-stabilo.com or by post at:
GONSO | Maier Sports GmbH
Nürtinger Str. 27
73257 Köngen
Germany
When you contact us, we store the data you provide, in particular your email address and, where applicable, your name and telephone number, in order to answer your questions or deal with your request.
We delete the data collected in this context once storage is no longer necessary, or restrict its processing if statutory retention obligations apply.
14. Right to lodge a complaint with a supervisory authority — Article 77 GDPR
You have the right to lodge a complaint with the competent supervisory authority concerning the processing of your personal data if you believe that your rights under the GDPR have been infringed.
15. Transfer of data to affiliated companies
For operational reasons and to ensure the operation and security of our IT systems, data may be transferred to affiliated companies of the Schwan-STABILO Group.
16. Automated decision-making and profiling
We do not use automated decision-making or profiling, meaning automated analysis of your personal circumstances.
As of September 2026