Privacy Policy
We appreciate your visit to our website and thank you for your interest in our company, our products and our web pages. Protecting your privacy when using our web pages is important to us. Please take note of the following information.
1. Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
ID SPORTS GmbH, Parlerstraße 6, 70192 Stuttgart, Germany
Tel.: +49 (0) 711 27 37 51 69 | Fax: +49 (0) 711 27 37 51 70
E-Mail: support@gibbon.shop
1.3 The controller has designated a Data Protection Officer for this website:
IITR Datenschutz GmbH, Dr. Sebastian Kraska, Marienplatz 2, 80331 Munich, Germany
Tel.: +49 89 189 173 60 | E-Mail: email@iitr.de
1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser.
1.5 Health Data: GIBBON Balance App and/or GIBBON Slacklines, ID Sports GmbH does not collect, store, read, access, process, or use any health data of users from their smartphone and/or tablet. No health data is used for the provision of the app, analytics, marketing, or any other purpose.
2. Data Collection When You Visit Our Website
When using our website for information only — i.e. if you do not register or otherwise provide us with information — we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data technically necessary to display the website:
- URL of the visited website
- Date and time of access
- Amount of data sent in bytes
- Referring source or URL
- Browser and operating system used
- IP address (where applicable: in anonymised form)
Data processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. We reserve the right to review the server log files subsequently if there are concrete indications of illegal use.
3. Content Delivery Network
3.1 Cloudflare
On our website we use a content delivery network ("CDN") provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. A CDN delivers large media files via a network of regionally distributed servers. Use of Cloudflare's CDN helps us optimise loading speeds. Processing takes place in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the secure and efficient provision of our website. Cloudflare Inc. participates in the EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection. For more information, please visit:
https://www.cloudflare.com/privacypolicy/
4. Cookies
In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files stored on your device. Some cookies are deleted after the browser session ends (session cookies); others remain on your device and allow us or our partner companies to recognise your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a specified period.
Where personal data is processed by individual cookies set by us, processing is carried out in accordance with Art. 6 (1) lit. b GDPR for the performance of a contract, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website.
You can configure your browser to inform you about cookies and to accept or reject them individually or generally. Please refer to your browser's help menu for cookie settings:
- Internet Explorer: https://support.microsoft.com/en-us/help/17442
- Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies
- Chrome: https://support.google.com/accounts/answer/61416
- Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that some functions of our website may be limited if cookies are not accepted.
5. Contacting Us
When you contact us (e.g. via contact form or e-mail), personal data is collected. This data is stored and used exclusively for the purpose of responding to your request and for the associated technical administration. The legal basis for processing is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your enquiry, provided there are no legal retention obligations to the contrary.
6. Customer Account and Contract Processing
Pursuant to Art. 6 (1) lit. b GDPR, personal data will be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. It is possible to delete your customer account at any time by contacting us at the address above. After complete processing of the contract or deletion of your account, your data will be blocked in accordance with applicable tax and commercial retention periods and deleted after expiry of these periods.
7. Comment Function
Within the comment function on this website, in addition to your comment, the time of writing and the commentator name you have chosen are stored and published. Your IP address is also logged for security reasons — in case the person concerned violates third-party rights or posts illegal content. We require your e-mail address to contact you should a third party object to your published content. The legal basis for storage is Art. 6 (1) lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
8. Use of Your Data for Direct Advertising
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information required is your e-mail address. We use the double opt-in procedure: after registration you will receive a confirmation e-mail asking you to confirm your subscription by clicking a link. By activating the confirmation link, you give your consent pursuant to Art. 6 (1) lit. a GDPR. You can unsubscribe from the newsletter at any time via the unsubscribe link in any newsletter or by contacting us directly. After cancellation, your e-mail address will be immediately removed from our distribution list.
9. Data Processing for Order Handling
9.1 Personal data collected by us will be passed on to the transport company commissioned with delivery, insofar as this is necessary for delivery of the goods. We will pass on your payment data to the relevant credit institution within the framework of payment processing, as necessary. The legal basis is Art. 6 (1) lit. b GDPR.
9.2 PayPal
When paying via PayPal, we transmit your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, in accordance with Art. 6 (1) lit. b GDPR. PayPal may carry out credit checks for certain payment methods. For more information, please see PayPal's Privacy Policy at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
10. Use of Videos
This website uses the YouTube embedding function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The extended data protection mode is used, ensuring that user information is only stored once video playback is started. When playback begins, YouTube sets cookies to collect information about user behaviour. If you are logged in to Google, your information will be directly associated with your account.
Google LLC participates in the EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection for transfers to the USA. Further information: https://policies.google.com/privacy
Processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interest in personalised advertising and market research. To the extent required by law, we have obtained your consent pursuant to Art. 6 (1) lit. a GDPR.
11. Online Marketing
11.1 Google AdSense
This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google AdSense uses cookies and web beacons to analyse your use of the website and to display interest-based advertising. The IP address transmitted by your browser is not merged with other Google data.
Processing is carried out pursuant to Art. 6 (1) lit. f GDPR. Google LLC participates in the EU-U.S. Data Privacy Framework (DPF). You can permanently deactivate advertising cookies via your browser settings or via: https://support.google.com/ads/answer/7395996. To the extent required by law, we have obtained your consent pursuant to Art. 6 (1) lit. a GDPR, which you may withdraw at any time with effect for the future.
11.2 Google Ads Conversion Tracking
This website uses Google Ads and Google Ads conversion tracking, operated by Google Ireland Limited. A conversion tracking cookie is set when a user clicks on an ad delivered by Google. These cookies lose validity after 30 days and are not used for personal identification. Conversion data is provided to advertisers in aggregated, anonymised form only.
Processing is carried out on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f GDPR. You can opt out of conversion tracking by disabling the Google Conversion Tracking cookie in your browser settings.
12. Web Analysis — Google Analytics 4
This website uses Google Analytics 4 (GA4), a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. GA4 uses cookies to analyse how users interact with our website. IP addresses are anonymised by default in GA4 before any data is stored or processed, so no direct personal identification is possible.
On our behalf, Google uses this information to evaluate the use of our website, compile reports on website activity, and provide other services relating to website and internet use. Google LLC participates in the EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection for transfers to the USA.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR, serving our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. To the extent required by law, we have obtained your consent pursuant to Art. 6 (1) lit. a GDPR.
You may refuse the use of cookies by selecting the appropriate browser settings. You can also permanently prevent data collection by Google Analytics by installing the browser opt-out add-on:
https://tools.google.com/dlpage/gaoptout
13. AI Chatbot System — GIBBY & AZUMI
13.1 This website uses an in-house operated chatbot system under the names GIBBY and AZUMI for optional AI-assisted customer communication and support. The technical basis of the chatbot function relies on technology from OpenAI / ChatGPT.
Use of the chatbot is entirely voluntary and is not required for browsing the website or purchasing our products.
13.2 No Personal Customer Data in the Chatbot: By design, GIBBY and AZUMI do not collect, store, or use personal customer data, location data, or other directly identifying information, unless voluntarily entered by the user into the chat window. We expressly advise users not to enter sensitive personal data into the chat unless strictly necessary to handle their enquiry.
13.3 Local Storage of Anonymised Chat Content: Chat histories may be stored locally and evaluated for analysis, quality assurance, and optimisation purposes. This storage takes place exclusively in anonymised or pseudonymised form and without personal or location data. Chat content is not merged with any other personal data sets.
13.4 Legal Basis: Where processing is carried out to provide the chatbot function requested by the user and to answer specific enquiries, the legal basis is Art. 6 (1) lit. b GDPR. Otherwise, processing is based on Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in efficient, user-friendly customer support. Where consent is required, the legal basis is Art. 6 (1) lit. a GDPR.
13.5 Use of External AI Technology: Where AI technology from OpenAI is used to provide the chatbot function, this is done exclusively within the framework of applicable data protection regulations and only to the extent technically necessary. Personal data will not be transmitted unless initiated by the user.
13.6 The use of the chatbot is voluntary. Users may at any time refrain from using it and use other available contact options instead. Where processing is based on Art. 6 (1) lit. f GDPR, data subjects have the right to object at any time.
14. Tools and Miscellaneous
14.1 Google reCAPTCHA
This website uses the reCAPTCHA function of Google Ireland Limited. This function is mainly used to distinguish whether an entry is made by a natural person or by automated processing. The service involves the sending of the IP address and possibly other required data to Google, and is carried out in accordance with Art. 6 (1) lit. f GDPR. Further information: https://policies.google.com/privacy
14.2 Google Maps
Our website uses Google Maps API, provided by Google Ireland Limited. When you access sub-pages containing Google Maps, information about your use of our website (including your IP address) is transmitted to and stored by Google. If you are logged in to Google, your information will be associated with your account. Processing takes place pursuant to Art. 6 (1) lit. f GDPR. Further information: https://policies.google.com/privacy
15. Rights of the Data Subject
Under applicable data protection law, you have the following rights with regard to the processing of your personal data:
- Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and to receive a copy of that data.
- Right to rectification (Art. 16 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you.
- Right to erasure (Art. 17 GDPR): You have the right to obtain the erasure of personal data concerning you where the conditions of Art. 17 GDPR are fulfilled.
- Right to restriction of processing (Art. 18 GDPR): You have the right to obtain restriction of processing under certain circumstances.
- Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to withdraw consent (Art. 7 (3) GDPR): You may withdraw any consent given at any time with effect for the future.
- Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.
RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. WHERE PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU MAY OBJECT AT ANY TIME; WE WILL THEN CEASE TO PROCESS THAT DATA FOR SUCH PURPOSES.
16. Duration of Storage of Personal Data
The storage period for personal data is based on the relevant legal basis, the purpose of processing, and — where applicable — on statutory retention periods (e.g. commercial and tax retention periods). Data processed on the basis of consent (Art. 6 (1) lit. a GDPR) is stored until consent is withdrawn. Data processed for contractual purposes (Art. 6 (1) lit. b GDPR) is deleted after expiry of the applicable statutory retention period. Data processed on the basis of a legitimate interest (Art. 6 (1) lit. f GDPR) is stored until a valid objection is made. Data processed for direct marketing purposes is deleted upon valid objection.
