Cookie Policy GONSO I Maier Sports GmbH

Preamble

Gonso is pleased that you are visiting our website. Data protection and data security when using our website are very important to us. We would therefore like to take this opportunity to inform you about the cookies and similar technologies we use. As changes to the law or changes to our internal company processes may make it necessary to adapt this cookie policy, we ask you to read this cookie policy regularly. The cookie policy applies to the Gonso website, which can be accessed at the domain https://www.gonso.de.

1 Scope of application

This Cookie Policy applies to the Gonso website, which can be accessed under the domain https://www.gonso.de and the various subdomains (hereinafter referred to as "our website").

2 General information on cookies

Cookies are small files that contain certain information and are stored on your end device, such as your language settings or login information. Cookies are either set by the partners - in which case they are so-called first party cookies - or by certain third parties whose services are used; in this case they are referred to as third party cookies. We also use other technologies, such as browser storage and plug-ins (e.g. HTML5, IndexedDB and WebSQL).

We use cookies to provide and optimise our website, to support advertising and marketing measures and to recognise returning visitors and gain information about their usage behaviour and presumed interests.

We and our service providers use cookies and other technologies (such as web beacons) and resettable device identifiers for various reasons. Web beacons (also called transparent gifs or tracking pixels) often work in conjunction with cookies. Rejecting cookies will in many cases limit the effectiveness of web beacons in conjunction with these cookies. We want to make sure that you are aware of our use of these technologies. This section explains the technologies we use, what they do and your choices in relation to their use.

3 Categories of cookies and legal bases

Various types of cookies are used on our website. We use the following categories of cookies on our website:

3.1 Strictly necessary cookies

These cookies are required for technical reasons so that you can visit our website and use the functions we offer. They are necessary so that we can display our website at all. They are also necessary so that you can navigate our website in a user-friendly way and use its functions, e.g. to set your data protection preferences, to log in or to fill out forms. This category of cookies does not require consent under applicable law. The legal basis for the use of technically necessary cookies for the associated storage of information on your end device and its subsequent reading is § 25 para. 2 no. 2 TTDSG. The following processing of your personal data is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. If you block essential cookies, we may not be able to display our website in full. They also help us to enforce our terms of use, prevent fraud and maintain the security of our service.

3.2 Functionality cookies

These cookies enable us to analyse website usage and improve the performance and functionality of our website. For example, information is collected about how our website is used by visitors, which pages are accessed most frequently, or whether error messages are displayed on certain pages. Performance cookies are also used to enable requested functions, e.g. playing videos.

We require your consent for cookies that are not technically necessary or so-called third-party cookies. If you have given us your consent to the use of a non-technically necessary cookie on the basis of a notice ("cookie banner") provided by us on the website, the legality of the associated storage of information on your end device and its subsequent reading is governed by Section 25 (1) sentence 1 TTDSG. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager in the "COOKIE SETTINGS" (accessible via the Cookie Settings text link in the footer of the website). The subsequent processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can also revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager.

You can find more information on browser settings and managing your consent in section 4 below.

3.3 Advertising cookies, statistics and resettable device identifiers:

These cookies and resettable device identifiers use information about your use of this and other websites, your response to ads and emails and to deliver ads that are more relevant to you, as well as for analytics and optimisation purposes.

We also use cookies to deliver certain types of adverts and products and services available from us and for certain adverts that are relevant based on your interests.

Authorised third-party providers can also set cookies if you have activated this when visiting our website. These third-party providers include search engines, providers of measurement and analysis services, social media networks and advertising companies. Third-party providers use cookies when delivering advertising content, in particular adverts that are relevant to your interests, in order to measure the effectiveness of their adverts.

4. configuration of the browser settings

You can manage your cookie settings using the setting options listed below or by configuring your browser settings.

Most browsers are set to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are deactivated by your browser settings on our website. You can also use your browser settings to delete cookies already stored in your browser or to display the storage period. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.

If you would like a comprehensive overview of all third-party access to your Internet browser, we recommend that you install specially developed plug-ins.

Further information on the individual cookies used can be found in our Cookie Consent Manager. You can also manage your consent there, e.g. revoke consent once it has been given.

You can access the Cookie Consent Manager by clicking on "Cookie settings" in the footer of the website.

5.2 Own cookies

We use our own technically necessary cookies to ensure the functionality of this website. These collect data such as:

Host
IP address of the user
Date and time of access
Method of access (Get/Post)
request
Protocol (e.g. https)
Status (e.g. error messages)
Amount of data retrieved
Referrer
Browser and operating system of the user

The legal basis for the associated storage of information on your end device and its subsequent readout is § 25 para. 2 no. 2 TTDSG. The following processing of your personal data is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

The cookies are valid for a maximum of one year. As soon as the data is no longer required, it will be deleted. The collection of data for the provision of the website and the (temporary) storage is absolutely necessary for the operation of the website. Further storage may take place in individual cases if this is required by law.

5.3 Performance cookies - Cloudfare

We use the content delivery network (CDN) "Cloudfare" from the provider Cloudfare Inc (101 Townsend St, San Francisco, CA 94107 United States) on this website to make our website faster and more secure. A CDN is a network of [globally] distributed servers that is able to deliver optimised content to the website user. For this purpose, the following personal data may be processed in Cloudflare's server log files

the website accessed,
the type of browser used
the operating system,
the referrer URL,
the IP address and
the requesting provider

The legal basis for the use of this service for the associated storage of information on your end device and its subsequent reading is your expressly granted consent in accordance with Section 25 (1) sentence 1 TTDSG. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager. The subsequent processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager.

5. cookies used

5.1 Strictly necessary cookies - Cookie information

We use cookies on this website to comply with legal obligations and to store and manage your consent. For this purpose, we use cookies from the consent software Cookie Information from the provider Cookie Information A/S, Købmagergade 19, 1150 Copenhagen, Denmark. Without these cookies, the consent software would not work.

When you visit our website, the following data is processed:

Consent(s) or the withdrawal of your consent(s),
technical information about your browser and the devices you use, e.g. language
devices you use, e.g. language setting, screen resolution,
anonymised IP address,
Date and time of the visit,
Request URL of the website,
Page path of the website and
Geographical location.

The legal basis for the associated storage of information on your end device and its subsequent readout is § 25 para. 2 no. 2 TTDSG. The subsequent processing of your personal data is based on our legal obligation to display a cookie banner in accordance with Art. 6 para. 1 lit. c GDPR.

The storage period of the data is set to a few days, but no longer than 400 days. The cookies set have a maximum lifespan of 400 days.

You can find out more about how data protection is handled with cookie information at: https://cookieinformation.com/cookie-andprivacy-policy

5.2 Own cookies

We use our own technically necessary cookies to ensure the functionality of this website. These collect data such as:

Host
IP address of the user
Date and time of access
Method of access (Get/Post)
request
Protocol (e.g. https)
Status (e.g. error messages)
Amount of data retrieved
Referrer
Browser and operating system of the user

5.3 Performance cookies - Cloudfare

the website accessed,
the type of browser used
the operating system,
the referrer URL,
the IP address and
the requesting provider

When using the service, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the provider. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without suitable guarantees, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. Furthermore, where possible, we liaise with the providers to ensure the protection of your personal data with any additional measures that may be necessary.

The cookies set are valid for 30 days. The personal data collected with the help of the cookie will be deleted when the storage period is over and there is no other legal obligation to retain it.

Further information about Cloudfare and how Cloudfare handles data protection can be found at the following link https://www.cloudflare.com/de-de/gdpr/introduction/.

5.4 Google Analytics

On this website, we use the web analysis service Google Analytics from Google Inc, 1600 Amphitheatre Parkway, Mountainview, CA 94043 USA ("Google"). Google Analytics uses cookies to help analyse how you use the website.

If you authorise the use of cookies, the following data will be processed:

Date and time of access,
the pages you have accessed, your click path,
Achievement of website goals,
user behaviour, e.g. clicks, length of stay, bounce rates,
approximate geographical location (region),
anonymised IP address,
technical information about your browser and the end devices you use, e.g. language setting, screen resolution,
Internet provider and
referrer URL.

The information generated by these cookies is usually transferred to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

Google will use the information generated by cookies on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

It cannot be ruled out that the cookies set by Google Analytics may collect other personal data in addition to the IP address. To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a plugin for your browser at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This plugin prevents information about your visit to the website from being transmitted to Google Analytics. Other analyses are not prevented by this plugin.

We would like to point out that you cannot use the browser plugin described above when visiting our website via the browser of a mobile device (smartphone or tablet). By clicking on this link, a so-called opt-out cookie is set in your browser. This prevents information about your visit to the website from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and only for this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted. To continue to prevent Google Analytics from collecting data, you must click on the link again. You can also use the opt-out cookie as an alternative to the above plugin when using the browser on your computer.

In order to ensure the best possible protection of your personal data, Google Analytics has been extended on this website by the code "anonymiseIp". This code causes the last 8 bits of the IP addresses to be deleted and your IP address to be anonymised (so-called IP masking). Your IP address will be shortened by Google before transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymised. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

When using Google Analytics, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to be able to guarantee adequate protection of your personal data in the event that personal data is transferred to such third countries, we have concluded so-called EU-US standard contractual clauses with Google. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without suitable guarantees, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. Furthermore, we are in constant dialogue with Google to ensure the protection of your personal data with any additional measures that may be necessary.

The legal basis for the use of this service for the associated storage of information on your end device and its subsequent readout is your expressly granted consent in accordance with Section 25 (1) sentence 1 TTDSG. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager. The subsequent processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager. Please also refer to section 4.

The cookies set are valid for a maximum of 14 months. The personal data collected with the help of the cookie will be deleted after 14 months if there is no other legal obligation to retain it.

You can find more information on this at: http://tools.google.com/dlpage/gaoptout or at https://policies.google.com/ (general information on Google Analytics and data protection).

5.5 Embedding YouTube videos

We embed YouTube videos on our website (so-called framing). This is technically implemented using cookies. We use them to illustrate the content of individual subpages. As soon as you click on the video to play it, data is transmitted to the operator of YouTube. This is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ireland Ltd. can track the following things, among others, regardless of whether you are logged into your YouTube account or not:

How long you stayed on a website
IP address
Where you clicked
Which page you came from
Which page you visited next
Which websites and apps you have visited in the past

Please note that we do not have any clear information from the service provider regarding the above-mentioned scope of data processing. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The legal basis for any associated storage of information on your device and its subsequent readout is your express consent in accordance with Section 25 (1) sentence 1 of the German Data Protection Act (TTDSG). You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager. The subsequent processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without suitable guarantees, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded a corresponding user agreement with the service provider. Furthermore, where possible, we liaise with the service provider to ensure the protection of your personal data with any additional measures that may be required.

You can find more information in our Cookie Consent Manager.

YouTube cookies are valid for up to 13 months. The data collected by the cookie is stored for 13 months.

You can find more information on data protection at YouTube at: https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/?yt_product=ytgen&yt_goal=eng&yt_campaign_id=hyw&yt_creative_id=#privacy-guidelines.

5.6 Google Tag Manager

On this website, we use Google Tag Manager, a web service for managing website tags from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The tool triggers other tags, which in turn can collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without appropriate safeguards, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without the possibility of legal recourse. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded a corresponding utilisation agreement with the service provider. In addition, where possible, we liaise with the service provider to ensure the protection of your personal data with any additional measures that may be required.

The cookies are valid for 24 months. The data collected by the cookie is stored for 24 months.

You can find more information on terms of use and data protection at Google Tag Manager at: https://support.google.com/tagmanager/answer/9323295?hl=de or https://www.google.de/intl/de/policies/.

5.7 Meta Pixel

We also use the so-called "meta pixel" of the social network Facebook, a service of Meta Platforms Inc, 1601 Willow Road, Menlo Park, California 94025, USA ("Meta") on our website.

This allows users of our website to be shown interest-based advertisements ("Facebook ads") when they visit the Facebook social network or other websites that also use the process. Your browser automatically establishes a direct connection to the Meta server via the Meta pixel. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore inform you according to our state of knowledge: By integrating the Meta pixel, Meta receives the information that you have clicked on an advertisement from us or called up the corresponding website of our Internet presence. If you are registered with a Meta service, Meta can assign the visit to your account. You can view and change the privacy settings of your Facebook profile at any time. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and other identifying features.

By using the meta pixel, we pursue the purpose of only displaying Facebook ads placed by us to Facebook users who have also shown an interest in our website. With the help of the meta pixel, we therefore want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. We can also use the meta pixel to track the effectiveness of Facebook ads for statistical purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad.

The legal basis for the use of the meta pixel for the associated storage of information on your end device and its subsequent readout is your expressly granted consent in accordance with Section 25 (1) sentence 1 TTDSG. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager. The subsequent processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager.

The cookies set are valid for 30 days. The data collected by the cookie is stored for at least 90 days, unless there is another legal obligation to retain it.

When using the service, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the provider. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without suitable guarantees, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. In addition, where possible, we are in contact with the providers to ensure the protection of your personal data with any necessary additional measures.

Information from the third-party provider: http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084.

5.8 Google Recaptcha

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

When using the service, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the provider. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without suitable guarantees, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. Furthermore, where possible, we are in contact with the providers to ensure the protection of your personal data with any necessary additional measures.

The cookies set are valid for 30 days. The data collected by the cookie is stored for 24 months, unless there is another legal obligation to retain it.

Further information about Google reCAPTCHA and Google's privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

5.9 OUTTRA

We use the OUTTRA component from 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart, Germany, for the dealer search function.

In order to display this function, it is necessary to query the visitor's IP address using cookies. The IP address is initially only used to send corresponding information to the browser or the visitor. The IP address is therefore required to display this function. For the dealer search function, the visitor's IP address is anonymized on the OUTTRA server. The anonymized IP address is used to perform a database query that allows a rough localization of the visitor based on the non-anonymized part of the IP address. The visitor is then shown the local retailers on the website.

The legal basis for any associated storage of information on your end device and its subsequent reading is Section 25 (1) sentence 1 TTDSG. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager. The subsequent processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager.

You can find more information about OUTTRA's data protection here: https://www.outtra.com/de-de/datenschutzerklaerung

No personal data is stored by 81 MEDIA GmbH or Gonso after the visitor has ended the browser session.

Status: November 2023