Cookie Policy

Last amended: 6 December 2022

This cookie policy applies to the following fitness websites: www.gymondo.com, www.gymondo-praevention.de, get-strong.gymondo.fitness, get-in-shape.gymondo.fitness, www.sweat-and-dance.com, www.machdichkrass.de, www.crossandshape.de, www.make-the-change.de, www.yogabycathy.de, www.sophia-thiel.com, backinshape.gymondo.fitness, perfectshape.gymondo.fitness, bootybylisa.gymondo.fitness, www.machdichleicht.de, loveyourcurves.gymondo.fitness, labrantfit.gymondo.fitness.

The controller responsible for all the above-mentioned websites within the meaning of data protection law is Gymondo GmbH (hereinafter referred to as “Gymondo”), Ritterstraße 12, 10969 Berlin, service@gymondo.de.

We have prepared this cookie policy to explain how Gymondo uses cookies on its fitness websites, what cookies they are, and how you can manage your cookie preferences.

1. What are cookies?

A cookie is a small data file that is stored on your computer or smartphone when you visit a website. Cookies often contain personal information, so-called identifiers, such as unique cookie identifiers, language or shopping basket settings. This means that website users are distinguishable from each other. However, we cannot identify you by name from the information contained in the cookies.

There are also other technologies that can be used to recognise website users (e.g. pixel tags, localStorage, HTML5). The collective term ‘cookies’ also covers these comparable tracking technologies here.

We use cookies for different purposes. Some cookies are essential to ensure the security and operation of the website. Other cookies help us to understand how our visitors and customers use the website or to better market our websites on the internet (e.g. via social media).

There are also so-called first-party and third-party cookies. First-party cookies are those placed by Gymondo directly on the user’s device. Third-party cookies are cookies that originate from third parties, e.g. our service providers or advertising partners.

2. What cookies does Gymondo use?

We use cookies that are necessary for our websites to function. With your permission, we also use optional cookies for analysis purposes and to personalise content and ads on our websites.

Please note that any changes you make to the settings only affect the respective browser. If you use different browsers or change to a different device, you will have to change the settings again and Gymondo will ask for your permission to place certain cookies.

Below you will find an overview of the cookies used on our fitness websites:

2.1 Essential cookies

These cookies are essential for the operation of our fitness websites (e.g. displaying the correct font, adopting your browser’s language settings).

Cookie name Tool/Function Provider Data collected Storage period Processing outside the EEA* and safeguards? Legal basis
userRegion Assignment of the customer’s country Gymondo GmbH Country 30 months n/a Art. 6(1) (b), (f) GDPR
userLocale Assignment of the customer’s language Gymondo GmbH Language 30 months n/a Art. 6(1) (b), (f) GDPR
oauth2AccessToken Authorization Gymondo GmbH - 30 months n/a Art. 6(1) (b), (f) GDPR
oauth2RefreshToken Authorization Gymondo GmbH - 30 months n/a Art. 6(1) (b), (f) GDPR
oauth2Realm Authorization Gymondo GmbH - 30 months n/a Art. 6(1) (b), (f) GDPR
oauth2IdToken Authorization Gymondo GmbH - 30 months n/a Art. 6(1) (b), (f) GDPR
isExistingUser Authorization Gymondo GmbH - 30 months n/a Art. 6(1) (b), (f) GDPR
@@scroll/[] Reorganization of customer interaction Gymondo GmbH - Session Storage n/a Art. 6(1) (b), (f) GDPR
signup.isTrial Customer Decision Storage Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
product.selected Customer Decision Storage Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
GYM_CONSENT_ANALYTICS_OPTIN Optin Configuration Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
GYM_CONSENT_MANDATORY_OPTIN Optin Configuration Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
GYM_CONSENT_MARKETING_OPTIN Optin Configuration Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
GYM_CONSENT_SOCIAL_LOGIN_OPTIN Optin Configuration Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
GYM_CONSENT_FIRST_PARTY_DATA_OPTIN Optin Configuration Gymondo GmbH - Local Storage n/a Art. 6(1) (b), (f) GDPR
_bc_c_set Used in connection with GDPR legal Cookie Gymondo GmbH - 15 months n/a Art. 6(1) (b), (f) GDPR
gym_user_id Caching user id Gymondo GmbH - 15 months n/a Art. 6(1) (b), (f) GDPR

* EEA: European Economic Area

2.2 Analysis cookies

Analysis cookies help us to understand how people use our fitness websites. This allows us to improve the quality and content of our fitness websites.

We use service providers from third countries (e.g. US), which do not have a level of data protection comparable to that of the EU. Due to the law there, there is a risk that cookie IDs, IP addresses and similar data may be collected and analysed by the authorities of the third country and that the rights of data subjects under EU law may not be fully enforced.

Your consent also extends to the transfer of data to third countries. You can withdraw your consent at any time by adjusting your cookie settings.

Cookie name Tool/Function Provider Data collected Storage period Processing outside the EEA* and safeguards? Legal basis
_ga Google Analytics Google, Inc. Google, Ireland Limited Anonymised IP address 24 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_gat Google Analytics Google, Inc. Google, Ireland Limited Anonymised IP address 1 day Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_gid Google Analytics Google, Inc. Google, Ireland Limited Anonymised IP address 1 day Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_ga_FTZ8E1H1N8 Google Analytics Google, Inc. Google, Ireland Limited Anonymised IP address 90 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_gtm_auth Google Tag Manager Google, Inc. Google, Ireland Limited - Session n/a Art. 6(1) (b), (f) GDPR
wt3_eid Webtrekk Webtrekk GmbH Anonymised IP address 180 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
wt3_sid Webtrekk Webtrekk GmbH Session ID Session Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
JSESSIONID NewRelic New Relic, Inc. Mapp Digital US, LLC countryCode, regionCode, city, asn (Autonomous System Number), asnOrganization (ISP/Business/Institution), asnLatitude, asnLongitude Session Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
TSNGUID NewRelic New Relic, Inc. Mapp Digital US, LLC 365 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_gaexp Google Optimize Google, Inc. Google, Ireland Limited Anonymised IP address 90 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_awcid Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_awmid Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_awgid Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_awkid Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_utmc Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_awcid Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_opt_awmid Google Optimize Google, Inc. Google, Ireland Limited Demographic data 24 hours Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__cf_bm Zendesk Zendesk Inc. Demographic data 180 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__cfruid Zendesk Zendesk Inc. Demographic data 180 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__zlcmid Zendesk Zendesk Inc. Demographic data 180 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__zlcstore Zendesk Zendesk Inc. Demographic data Local Storage Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ZD-suid Zendesk Zendesk Inc. Demographic data Local Storage Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ZD-buid Zendesk Zendesk Inc. Demographic data Local Storage Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ZD-store Zendesk Zendesk Inc. Demographic data Local Storage Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR

* EEA: European Economic Area

2.3 Social login cookies

If you want to use social logins on our fitness websites, you will need to allow cookies from the respective providers to enable the login. If you make use of this single sign-on option, we receive the data required for registration or login directly from the provider whose account you use to register or log in on our fitness website (e.g. email address, name).

We have no way of influencing the extent of the data collected by the provider when you log in via social media. If you do not want the respective provider to collect information about you in connection with your use of one of our fitness websites and use it for its own purposes, then you should not use the social login.

Cookie name Tool/Function Provider Data collected Storage period Processing outside the EEA* and safeguards? Legal basis
_fbp Facebook Connect Facebook, Inc. Demographic data 90 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SAPISID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__Secure-3PSIDCC Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SIDCC Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
APISID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__Secure-3PAPISID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__Secure-1PAPISID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
HSID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__Secure-1PSID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__Secure-3PSID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
APISID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SSID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
HSID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
__Secure-1PSIDCC Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
NID Google Login Google, Inc. Google, Ireland Limited Demographic data 14 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR

* EEA: European Economic Area

2.3 Marketing cookies

We use marketing cookies to display advertising content that is relevant and interesting to you and to measure the effectiveness of our campaigns on our websites and third-party websites. If you opt out of the use of marketing cookies, you will continue to see the same amount of advertising, but it may be less relevant to you.

We use service providers and advertising partners from third countries (e.g. US), which do not have a level of data protection comparable to that of the EU. Due to the law there, there is a risk that cookie IDs, IP addresses and similar data may be collected and analysed by the authorities of the third country and that the rights of data subjects under EU law may not be fully enforced.

Your consent also extends to the transfer of data to third countries. You can withdraw your consent at any time by adjusting your cookie settings.

Cookie name Tool/Function Provider Data collected Storage period Processing outside the EEA* and safeguards? Legal basis
_gcl_au Google AdWords Conversion Google, Inc. Google, Ireland Limited Demographic data 90 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_gcl_aw Google AdWords Conversion Google, Inc. Google, Ireland Limited Demographic data 90 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
IDE Double Click Google, Inc. Google, Ireland Limited Demographic data 12 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
IDE Google Dynamic Remarketing Google, Inc. Google, Ireland Limited Demographic data 12 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
test_cookie Google Dynamic Remarketing Google, Inc. Google, Ireland Limited Demographic data 1 day Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
IDE GA Audiences Google, Inc. Google, Ireland Limited Demographic data 12 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ad-privacy Amazon Mobile Ads Amazon, Inc. Demographic data 1905 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ad-id Amazon Mobile Ads Amazon, Inc. Demographic data 261 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_tq_id.TV-45454518-1.63ac TVSquared TV Squared Limited Demographic data 1 second n/a Art. 6(1) (b), (f) GDPR
_tv_uid TVSquared TV Squared Limited Demographic data 2 years n/a Art. 6(1) (b), (f) GDPR
- Criteo Criteo S.A. Demographic data - n/a Art. 6(1) (b), (f) GDPR
- Adition ADITION technologies AG Demographic data - n/a Art. 6(1) (b), (f) GDPR
_fbp Facebook Custom Audience Facebook, Inc Demographic data 90 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_pin_unauth Pinterest Conversion Tracker Pinterest, Inc. Demographic data 12 months Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
signup.zanox Zanox/Awin localstorage Gymondo GmbH Transaction ID Session - Art. 6(1) (b), (f) GDPR
signup.sovendus Sovendus localstorage Gymondo GmbH Transaction ID Session - Art. 6(1) (b), (f) GDPR
_uetsid Bing Ads Microsoft Corporation Demographic data 1 day Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_uetvid Bing Ads Microsoft Corporation Demographic data 17 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ABDEF Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
MSCC Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SRCHD Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
MUID Bing Ads Microsoft Corporation Demographic data 344 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SRCHUSR Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SRCHUID Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
SRCHHPGUSR Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_HPVN Bing Ads Microsoft Corporation Demographic data 174 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
MUIDB Bing Ads Microsoft Corporation Demographic data 219 days Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_ttp Used by the social networking service, TikTok, for tracking the use of embedded services. ByteDance Ltd. Demographic data 15 months n/a Art. 6(1) (b), (f) GDPR
_tt_enable_cookie Used by the social networking service, TikTok, for tracking the use of embedded services. ByteDance Ltd. Demographic data 15 months n/a Art. 6(1) (b), (f) GDPR
ga_session_document_location Google Analytics Google, Inc. Google, Ireland Limited Demographic data 1y Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
ga_session_referrer Google Analytics Google, Inc. Google, Ireland Limited Demographic data 1y Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_gat_UA-37425161-1 Google Analytics Google, Inc. Google, Ireland Limited Demographic data 1y Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_tracking_consent Tracking Consent Shopify Shopify Demographic data 1y Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
eng_mt Tracking Conversion Taboola Demographic data Local Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_uetsid_exp Bing Ads Microsoft Corporation Demographic data Local Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
_uetvid_exp Bing Ads Microsoft Corporation Demographic data Local Yes, US Safeguards: none, consent pursuant to Art. 49(1) (a) GDPR. Art. 6(1) (b), (f) GDPR
tt_sessionId Used by the social networking service, TikTok, for tracking the use of embedded services. ByteDance Ltd. Demographic data Session n/a Art. 6(1) (b), (f) GDPR
tt_pixel_session_index Used by the social networking service, TikTok, for tracking the use of embedded services. ByteDance Ltd. Demographic data Session n/a Art. 6(1) (b), (f) GDPR
tt_appInfo Used by the social networking service, TikTok, for tracking the use of embedded services. ByteDance Ltd. Demographic data Session n/a Art. 6(1) (b), (f) GDPR

* EEA: European Economic Area

3. Google Consent Mode v2

We use the advanced version of “Google Consent Mode” (v2), a web service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Consent Mode v2 allows us and Google to respect your decisions regarding cookies and similar technologies, made via our cookie banner or cookie settings. Only if you provide consent to the respective categories of cookies will we set cookies for the Google tools described in those categories (e.g., Google Analytics and Google Ads).

Google Consent Mode v2 expands on the original version by introducing two additional consent parameters: aduserdata and ad_personalization. These control whether your personal data can be used for personalized ads and whether that data may be sent to Google for advertising purposes.

If you do not provide consent, we will notify Google accordingly, so that no cookies or third-party cookies from or for Google services are set. This notification is sent in the form of consent status "pings" to Google servers, indicating that consent has not been granted. These pings may contain: a timestamp, the user agent (web only), referrer URL, information on whether the current or previously visited page included "ad-click" parameters, consent status, and a random number generated each time the page loads.

This mechanism is required to ensure that all Google products we use honor your choices and refrain from setting cookies or collecting data from cookies in your browser.

As standard, your IP address is collected, but it is discarded at the nearest Google server point. This generally takes place within the EU, if you are visiting our website from the EU (and are not using a VPN or proxy).

For more details on how we use Google Analytics (performance cookies) and Google Ads (marketing cookies), please refer to the respective categories in this policy. You may also visit the Google Business Safety page here: https://business.safety.google/privacy/.

You have the right to withdraw your consent to the placement of cookies at any time. You can do this yourself by simply adjusting your cookie settings. For further information, especially on your rights, please refer to the website privacy notice.