PRIVACY POLICY

**1. Scope of Coverage**

This Privacy Policy applies to the use of the website www.goodwood.hockey / www.goodwood-hockey.com (hereinafter referred to as the "Website") and the services offered therein. The protection of your personal data is important to us. This document provides information about the processing of personal data collected when visiting our website. Personal data includes all data that can be related to you personally, such as name, address, email addresses, and user behavior.

**2. Controller**

The operator of this website and the responsible entity for the processing of personal data through this website is:

Good Wood Sports GmbH
Bienenweg 22, CH-8302 Kloten, Switzerland
Email: hello@goodwood.hockey

**3. Automated Data Collection and Processing**

As with any website, our server automatically and temporarily stores data collected by the browser in server log files, unless you have deactivated this feature. The following data is technically necessary for us to display our website to you and to ensure the stability and security of the website:

- IP address of the device accessing the website
- Client's file request
- HTTP status response code
- Referrer URL: The address of the website from which you clicked a link that directed you to our site
- Server query time
- Browser and version
- Operating system of the accessing device

No personally identifiable evaluation of the data in these server log files takes place. To the extent that the aforementioned information contains personal data (especially IP addresses), this data is processed based on Art. 6 (1) f of the General Data Protection Regulation (GDPR). Our legitimate interest is to ensure the proper operation of our website. If you would like more information about our data use for balancing interests under Art. 6 (1) lit. f GDPR, please use the contact details provided in Section 2 to reach us. The collection of the aforementioned data is necessary to ensure the full functionality of our website.

This website uses the following technologies and tools, which are described below. If you do not want some of these tools to be used, you can find descriptions of how to disable each of these tools in the information below.

**4. Google Analytics**

This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). The version used is "Universal Analytics." This allows us to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and analyze a user's activities across multiple devices. Google Analytics uses so-called cookies, text files stored on your computer that enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Since the IP anonymization feature is enabled for our website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator.

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to use all functions of this website to their full extent. In addition, you can prevent the collection and processing of data generated by the cookie regarding your use of the website (including your IP address) by Google by downloading and installing the browser add-on available at the following link: (https://tools.google.com/dlpage/gaoptout?hl=en). Opt-out cookies prevent the future collection of your data when visiting this website. To prevent the collection by Universal Analytics across different devices, you must install the opt-out add-in on all systems used.

The use of Google Analytics is based on our legitimate interest in providing a needs-based website, analyzing access to our website statistically, and efficiently promoting our website. The legal basis is Art. 6 (1) f GDPR.

**5. Cookies**

Cookies are small text files that are locally stored in the cache of your web browser. The cookies listed below are used by us only to provide and fulfill the services you use, in accordance with Art. 6 (1) f GDPR. Our legitimate interest in data processing is to optimize website settings for the device you use and to adapt the user interface. If you would like more information about our data use for balancing interests under Art. 6 (1) lit. f GDPR, please use the contact details provided above to reach us. Our website uses the following types of cookies. Their scope and functionality are described below:

*Transient Cookies:*

Transient cookies are automatically deleted when you close your browser. These include session cookies. These store a session ID, with which various requests from your browser can be assigned to the common session. This allows your device to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

*Persistent Cookies:*

Persistent cookies are automatically deleted after a specified duration, which may vary from cookie to cookie. You can delete these cookies at any time in your browser's security settings.

You can configure your browser settings according to your preferences, for example, to reject third-party cookies. Please note that in this case, you may not be able to use all functions of this website.

**6. Collection and Processing of Voluntarily Provided Data**

You have the option to voluntarily provide personal data on our website. We use this data, which includes only personal data, for the following purposes:

- To process your contractual relationship and handle your inquiries regarding orders, we need your personal data (e.g., name, first name, email address, and address). We store this data to be able to offer you our respective services and to enter into a contractual relationship with you. The legal basis is Art. 6 (1) b GDPR. To the extent that we process your data as described above to provide our services to you and fulfill contractual obligations, you are contractually obligated to provide us with this data. Without this data, we cannot provide you with our services and fulfill our contractual obligations to you properly.

- In addition to the use of your data described in this privacy policy, we also use it for advertising purposes, especially in the form of sent or electronic newsletters or customer surveys, or to contact you, for example, by SMS or phone. The legal basis with regard to our legitimate interests in conducting advertising measures relevant to you is Art. 6 (1) f GDPR. If you would like more information about our data use for balancing interests under Art. 6 (1) lit. f GDPR, please use the contact details provided above to reach us. You can object to the use of your data for advertising purposes at any time. Details about your right to object can be found in Section 9 of this privacy policy.

- If we are obligated to obtain your prior consent in accordance with local laws in individual countries, we will do so, of course. The legal basis for the processing of your data is your consent (Art. 6 (1)

lit. a GDPR). You can revoke your consent at any time. To do so, please contact the contact details provided above or follow the instructions in our advertising messages. Revoking your consent does not affect the legality of the processing carried out based on the consent until the revocation. You are not obligated to provide us with your data for advertising purposes. However, without this information, we cannot send you advertising materials.

**7. Disclosure of Personal Data to Third Parties**

The disclosure of your personal data without your prior express consent generally only occurs in the following cases:

*For Legal Proceedings:*

If necessary to clarify the unlawful use of our services or for purposes of legal prosecution, personal data will be passed on to law enforcement agencies and, if applicable, to injured third parties. However, this only occurs if there are specific indications of unlawful or negligent behavior. This data may also be disclosed if it is necessary to enforce the terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. These include law enforcement agencies, authorities that prosecute administrative offenses, and financial authorities.

The disclosure of this information is based on our legitimate interests in combating misuse, prosecuting criminal offenses, and ensuring, asserting, and enforcing warranty claims in accordance with Art. 6 (1) f GDPR. If you would like more information about our data use for balancing interests under Art. 6 (1) lit. f GDPR, please use the contact details provided above to reach us.

*Processors:*

For the provision of services, we rely on contractually bound third-party companies and external service providers (hereinafter referred to as "processors"). In such cases, personal data is transferred to these processors to enable further processing. We carefully select these processors and regularly monitor them. Processors are only allowed to use the data for the purposes specified by us and are also contractually obligated to process your data only in accordance with this privacy policy and applicable data protection laws. In particular, we use the following processors:

- Logistics service providers to send you the products, advertising materials, or other materials you have ordered from us
- Payment service providers to process payments from you to us or vice versa

In order to offer you the payment methods of Klarna, we may pass on your personal data in the form of contact and order data during the ordering process to Klarna so that Klarna can check whether you qualify for Klarna's payment methods and Klarna can adjust the payment methods to your needs. Your transmitted personal data will be processed in accordance with Klarna's privacy policy.

- Service providers for sending newsletters or conducting customer surveys
- IT service providers for the provision of software and hardware and for performing maintenance work

The disclosure of data to processors is based on Art. 28 (1) GDPR, alternately based on our legitimate interests, to benefit from the economic and technical advantages of using specialized processors, and that your rights and interests in the protection of your personal data are not overridden, in accordance with Art. 6 (1) f GDPR. If you would like more information about our data use for balancing interests under Art. 6 (1) lit. f GDPR, please use the contact details provided above to reach us.

**8. Your Rights**

Regarding your personal data processed by us, you have the rights described below. To exercise your rights, please send us a written request using the contact details provided above or by email to hello@goodwood.hockey.

*Right to Information:*

You have the right to request confirmation as to whether personal data concerning you is being processed, in accordance with Art. 15 GDPR.

*Right to Correction or Deletion of Information:*

Under the provisions of Art. 17 GDPR, you have the right to request the deletion of personal data concerning you. These provisions provide for the right to delete information, particularly when personal data is no longer used or necessary for the purposes for which it was collected or otherwise processed. The exercise of this right under Art. 17 (3) GDPR does not apply to the extent that processing is necessary to fulfill a legal obligation or to assert, exercise, or defend legal claims.

*Right to Restriction of Processing:*

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR. This right applies, in particular, if you dispute the accuracy of the personal data, for a duration that enables us to verify the accuracy of the personal data; you object to the deletion of the personal data and instead request the restriction of its use; furthermore, if we no longer need the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims; you have objected to the processing pending verification. To the extent that processing of your data has been restricted in accordance with this provision, it will only be processed in exceptional cases, for example, if you have given your consent or for the assertion of legal claims.

*Right to Object to Processing:*

You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation, pursuant to Art. 6 (1) e or f GDPR, in accordance with Art. 21 GDPR. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

*Right to Data Portability:*

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format in accordance with Art. 20 GDPR. The processing must be based, among other things, on your consent and must be carried out automatically.

*Right to Lodge a Complaint with a Supervisory Authority:*

You have the right to lodge a complaint with a supervisory authority, especially in the member state of your residence, your place of work, or the place of the alleged violation, if you believe that the processing of personal data concerning you violates applicable data protection law. Our competent supervisory authority is: Federal Data Protection and Information Commissioner, Feldeggweg 1, CH – 3003 Bern. To communicate electronically with the supervisory authority, use the following link: https://www.edoeb.admin.ch/edoeb/en/home/the-edoeb/contact/contactform.html.

**9. Deletion of Your Data**

In general, we delete or anonymize your personal data as soon as it is no longer required for the purposes for which we have used it in accordance with the above provisions. If data must be retained for legal purposes, it will be blocked. The data is then no longer available for further use. If you would like more information about our deletion and storage periods, please refer to Section 2 for the contact details of the controller.

**10. Changes to the Purposes of Processing**

A change in the processing purposes of your personal data will only occur if it is legally permissible or if you have consented to the processing of your data for another purpose. If we process your data for purposes other than those for which it was

originally collected, we will inform you before processing the data for other purposes and provide you with all relevant information.

**11. Automated Individual Decision-Making or Profiling Measures**

We do not use automated processing processes to make decisions, including profiling.

**12. Changes to this Privacy Policy**

The current version of this privacy policy can be found at www.goodwood.hockey / www.goodwood-hockey.com. We reserve the right to update or amend this privacy policy as needed, taking into account the applicable data protection regulations. In the event of significant changes to this privacy policy, we will inform you in a suitable manner, depending on the type and scope of the changes, and, if necessary, obtain your consent. Please check the privacy policy regularly to stay informed about the current status.