Mammut Group Data Privacy Policy

This privacy notice governs how Mammut Group and its affiliates (“Mammut”, “we”, “our” or “us”) collects, uses, maintains and discloses information collected from users (each, a "User" or “you”) of the mammut.com websites( (the “Sites”), of the Barryvox app and from customers in the retail and online stores we operate, and the further processing of personal data by companies of the Mammut Group affiliates (together Mammut). 

If you provide Mammut with personal data of other persons, for example data about the receiver of a voucher, please provide their personal data to Mammut only if you are allowed to do so pursuant to applicable data protection laws and only if the other person would agree to you providing its personal data to Mammut for the purposes the data are collected and the processing of its personal data according to our data privacy notice. 

Every website, every presence on social media, multimedia portals, chatbots and every application of Mammut (each a website) has a controller within Mammut with respect to collecting personal data according to the EU General Data Protection Regulation (GDPR) (or comparable provisions according to applicable data protection laws). Unless provided otherwise on the website (according to the imprint, the terms of use, etc.), Mammut Sports Group AG, Birren 5, 5703 Seon, Switzerland is the controller for the Online-Shops www.mammut.com   and the controller for the Mammut Group websites and the Barryvox application. 

The respective subsidiary or affiliate is the controller in the event Mammut communicates through other means of communication (such as email, letter, telephone, in person) and the communication does not fall within an activity for which Mammut has appointed a specific controller within this Data Protection Notice or otherwise. 

Should a Mammut company or affiliate disclose personal data to another Mammut company or affiliate for certain purposes of the receiving company or affiliate, such company or affiliate is the controller. A list of the relevant companies and affiliates of Mammut can be found in the Annex, which may be updated from time to time. 

Mammut has not appointed a data protection officer according to article 37 GDPR save for the Mammut affiliate in Germany. 

The contact details for our Data Protection Officer is as follows: Jost Spicher, MB Konzept GmbH, Hofstrasse 13, 52499 Baessweiler, Germany, [email protected] , 0049 2401 3992181. 

Mammut collects and processes personal data of: 

• Users, visitors of the registered Mammut websites 

• Users registered with a Mammut website (Mammut account creation) 

• Users using the Barryvox mobile application 

• Individuals purchasing and receiving/benefitting from products and services of Mammut  

• Individuals using customer service 

• Individuals providing product reviews  

• Recipient of Mammut newsletters 

• Participants in research campaigns and opinion surveys conducted by Mammut 

• Participants in courses, workshops and other live events organized by Mammut and its partners. 

• Participants in online raffles, sweepstakes, competitions and promotions 

• Users of social media platforms who allow the usage of their generated content related to Mammut brand 

• Followers of Mammut social media accounts 

• Potential or actual parties interested in products and services of Mammut; 

• Applicants and members of the Mammut Collective program 

(together Customers.) 

The personal data of Customers is generally collected directly by Mammut during the course of using the website, as well as in stores or at events of Mammut as well as through direct communication such as email, telephone or in any other way. Personal data can also be collected indirectly, such as through third party-processors, (e.g., Mammut’s partners (as defined further below, including wholesalers, dealers, retailers, suppliers and further business partners such as customer services vendors). Mammut also collects data when the Customer making the purchase does not correspond with the person benefitting from the purchase or if the purchase is shipped to a different person (e.g. as a gift), based on the recommendation of a third party (e.g. recommendation by family or friends of the Customer) or through further acquisition of supplementary information from third party data sources (e.g. social media). In the following section We describe which categories of personal data are processed by us, for which specific purposes and based on which legal grounds.

We process your personal data to fulfill your online orders and provide you with a range of secure payment options. This includes facilitating a seamless checkout experience, ensuring payment is completed, and complying with our contractual obligations under our Terms and Conditions—such as issuing invoices, arranging delivery, and handling returns and refunds. 

To be able to fulfill the above-mentioned purposes we process your personal information (first and last name) and contact details: postal address; billing address; shipping address; email address, telephone number and the details of your purchase. 

Legal basis for processing is performance of our contract and compliance with a legal obligation. 

To ensure the security of online transactions and to protect both our customers and our business from fraud, we process personal data for the purpose of detecting, preventing, and investigating fraudulent or suspicious activities. 

This may include monitoring and assessing: 

• Multiple failed payment attempts 

• Mismatched billing and shipping addresses 

• Unusual order volumes or patterns 

• Use of anonymizing tools or IP inconsistencies 

As part of this process, we use automated fraud detection systems integrated into our payment platform, provided by Adyen N.V.. Adyen applies industry-standard security and risk management procedures, including real-time fraud screening and scoring based on transaction characteristics and known risk indicators. Your payment-related data (such as IP address, payment method, device data, and transaction history) may be processed by Adyen solely for the purpose of evaluating transaction risk and ensuring secure payment processing. The legal bases for this processing are legitimate interest in preventing fraud and securing our services and our legal obligation to prevent and report fraud where required. Where fraud is suspected, we may also share relevant information with law enforcement authorities or competent supervisory bodies, in accordance with applicable laws. For more information about Adyen’s processing activities, please refer to their privacy policy: https://www.adyen.com/policies-and-disclaimer/privacy-policy 

On our website there is an option to create your own Mammut account which provides you various benefits and makes the experience of the Mammut website smoother (e.g. saving your favorite products, overview on your purchase history, saving and managing your delivery address, providing you personalized content).  

If you decide to create a Mammut account we are going to process your identity information, contact data, location information, Payment, Purchase and Transaction Information, Social Media Interaction and Activity, Browsing Information, Behavioral and Preference Information. 

You can still purchase on our website as a Guest, without creating an account. 

The legal basis of processing your personal data is your explicit consent. 

We send marketing messages to the email address you provide, tailored to your interests ("personalized"). To do this, we track your online activity (and offline activity, where applicable) and use analytics tools to better understand your preferences. This helps us identify which product lines may interest or benefit you. To create these personalized experiences, we collect various types of Personal Data. Our analytics tools also help us interpret your behavior—what you like or dislike—and measure the effectiveness of the messages we send. 

The categories of personal data we process during this activity are identity information, contact data, location information, Payment, Purchase and Transaction Information, Social Media Interaction and Activity, Browsing Information, Mobile Device Information, Behavioural and Preference Information 

The legal basis of processing your personal data is your explicit consent. You can withdraw your consent any time by clicking on the Unsubscribe link in the newsletters. 

From time to time we may send you print advertising and marketing mails to your delivery address you provided us during the purchase process or when you created an account or registered a product. 

You can opt out for sending you such materials either within your account or by contacting the Customer service team. 

The categories of personal data we process during this activity are identity information, contact data, Payment, Purchase and Transaction Information, Social Media Interaction and Activity, Browsing Information, Mobile Device Information, Behavioural and Preference Information 

The legal basis of processing your personal data is our legitimate interest. 

We build a profile based on the information you’ve shared with us—either directly or indirectly—to create a more personalised experience. This helps us tailor our interactions with you, using insights from previous engagements and inferred preferences. 

We use audience management technologies to deliver relevant messages and content to you at the right time and through the appropriate channels. This may include marketing communications about offers and products, or personalised advertising across digital media on our brand platforms.  

More detailed level of personalisation depends on the permissions you’ve granted us in the Privacy Settings section on our website. 

We use your data for various analytical purposes to gain a deeper understanding of for example:  

a) how you navigate and interact with our platforms; 
b) the products that capture your interest; 
c) the features of our products and platforms you prefer; 
d) the effectiveness of our services—including customer support, marketing, and advertising campaigns—and your response to them; 
e) the design of our products and websites; and 
f) your overall user experience. 

These insights help us enhance the relevance of our marketing communications and improve the quality of your personalised experience across all our channels and platforms. 

We build a single, unified profile by combining all identifiable personal data related to you. This includes information collected directly or indirectly—whether through digital media or offline channels—as well as your feedback, interactions, and communications with us across our platforms and touchpoints. 

We apply data science techniques to your profile and personal data to develop data models that enhance the logic behind our analytics. These models provide deeper insights into your feedback, interactions, preferences, and needs related to our products and services. We also compare your profile-based models with similar consumer profiles and segments to further predict and analyze your preferences. 

The categories of personal data we process during this activity are Identity information, Contact information (if available to Mammut), Location information, measurements (if available to Mammut), Payment, Purchase and Transaction Information (if available to Mammut), Social Media Interaction and Activity (if available to Mammut), browsing Information, mobile Device Information, behavioural and preference Information (if available to Mammut), Personal Opinion 

Legal basis for processing your personal data in case of basic personalization is our legitimate interest. 

Legal basis for processing your personal data for a more detailed profiling is your explicit consent. 

We use third-party advertising platforms—such as Facebook, Google, YouTube, Instagram and TikTok—to deliver targeted messages based on your behavior and browsing patterns. These messages are shown at specific times and locations within those platforms to improve the effectiveness of our advertising campaigns. 

To enable this, we may share your Personal Data with our Advertising Agency Partners and Social Media Platforms. We also use third-party tools like Google Analytics and Facebook Business Manager to better tailor our campaigns and messaging. 

Social Media Platforms may try to match your profile in their databases to determine the best time and place (e.g., the page you're viewing) to display an advertisement. Additionally, we analyze campaign performance data to understand how effective our ads are. 

If you choose not to allow tracking for this purpose, you may still see Mammut ads—but they will appear randomly rather than being personalized. We also recommend reviewing the privacy policies of the respective Social Media Platforms to understand how they handle your Personal Data. 

The categories of personal data we process during this activity are identity information, contact data, location information, Payment, Purchase and Transaction Information, Social Media Interaction and Activity, Browsing Information, Mobile Device Information, Behavioural and Preference Information 

The legal basis of processing your personal data is your explicit consent. 

We invite you to share your images or other content with us on social media by following specific instructions, such as using hashtags like “#yesmammut”. The images you submit may be used in our campaign communications. By submitting your images, you grant us the right to use them under the terms outlined in the specific terms & condition s. By participating and sharing your content through social media, you acknowledge and agree to the use of your images as described in our terms and conditions.  

The personal data categories we process are Identity information: your social media handler, Community information: images, videos, comments, sound recordings and other files provided through the social media platform promoting Mammut, Social Media Interaction and Activity. 

The legal basis of the activity is the performance of the contract. 

We use your information to confirm your eligibility for participation in sweepstakes competitions, and online raffles and to contact you via the details you’ve provided. If you are selected as a winner, your information will be used to deliver the prize and to fulfill any related administrative or legal obligations. For each event the specific Terms & Conditions apply we always publish on our website. 

The personal data categories we process are Identity Information, Contact Information, Behaviour and Preference Information, Payment, Purchase and Transaction Information 

The legal basis for the processing activity is performance of the contract. 

When you sign up for an event which we organise that have limited spots, we use the Personal Data you provide to reserve a spot for you. If the event is open for everyone, we use the Personal Data you provide to keep you informed of the current events you are interested in and about similar events and offers in the future. Your Personal Data will be used according to the Terms and Conditions associated with the event. Please read the specific privacy notice we may publish at the time of the registration if available. 

Categories of personal data we may collect are Identity information, Contact information, Location information 

Legal basis of processing is legitimate interest and consent. 

We carry out analysis to help us research and enhance our products and services. This may involve inviting you to participate in surveys, provide feedback, test products, or share reviews. We may also engage third-party service providers to conduct market and product research on our behalf or implement new technologies within our products that may collect Personal Data to maintain our competitive edge. 

We process this information based on our “legitimate interest.” By taking part in product reviews or surveys, you acknowledge and accept this basis. Where possible- especially if you object to this processing- we will remove any personally identifiable details, such as your name, contact information, or mobile device data. Once this information is anonymized and can no longer be linked back to you, it is no longer considered Personal Data. 

The categories of data we may process during this activity are  Identity information (only if required by the project), Contact information (only if required by the project), Location information (only if required by the project), Payment, Purchase and Transaction Information (only if required by the project), Social Media Interaction and Activity (only if required by the project), Fitness Activity Information (only if required by the project), Browsing Information (only if required by the project), Mobile Device Information (only if required by the project), Correspondence (only if required by the project), Behavioural and Preference Information (only if required by the project) 

The legal basis for the processing activity is legitimate interest. 

If you have previously purchased products from Us, we may use your email address to send you marketing communications about our products that are similar to those you have already purchased or shown interest in. This may include gear, clothing, and accessories related to the relevant product categories. We will use the data on your previous orders to select individual product recommendations. If you do not wish to receive any individual product recommendations from us by e-mail, you can object to it any time by clicking the unsubscribe link which you will find in every e-mail. 

We do not send marketing emails for unrelated products or services, nor do we share your data with third parties for their own marketing purposes without your explicit consent. 

The categories of data we may process during this activity are identity information, contact information, purchase and transaction Information. 

The legal basis for the processing activity is legitimate interest. 

We collect your Personal Data to answer your queries about your order and respond to any of your questions and concerns through various communications channels we make available to you. Your requests to our customer service will be analyzed so that we can provide you with valuable service in the future. We record our phone conversations with you for quality assurance purposes. 

The personal data we process to be able to provide you an excellent customer service is name information, contact details, details of your request. 

Legal basis for processing your data are performance of our contract, compliance with a legal obligation and your explicit consent. 

You have the option to write a review about Mammut products which we may post on our website with your first name, after a thorough review.  

The personal data we process is the photo, text, content you share with us, your name and e-mail address. 

Legal basis for processing your data is your consent. 

When you send us a product for repair we use your data for the purpose of managing repairs, ensuring service quality, and fulfilling warranty obligations if needed.  

Categories of personal data we collect are Identity information, Contact information, Location information, photo of the product sent for repair, details of the product to be repaired, correspondence with customer service or the repair company. 

Legal basis of processing is the performance of the contract. 

If you purchase a Barryvox device (previous models, before barryvox 2) you have the option to register your device on our website so you can receive important information you need about software updates and to benefit from a free three-year extension to your guarantee. 

Categories of personal data we collect are Identity information, Contact information, serial number of your device. 

Legal basis of processing is performance of the contract. 

We provide you a dedicated mobile application for our Barryvox devices. Once you download the application you have the option to add and register your Barryvox device. 

In order to register your device, you need to create a Mammut account if you do not have one already. 
The registration link brings you to the Mammut.com website where you can create your Mammut account and then register your device. 

We use your personal data only for the following purposes: to able to provide you the functionalities and services of the application, to communicate to you the software updates or any related information related to your registered device, to send notifications in case of revoking of a model, to able to identify whether your device is used or activated in countries where the voice feature cannot be used due to a court ruling With regards the device registration we use your personal data, to be able to provide you an additional 3 year extension of your warranty related to your device, to communicate to you the software updates or any related information related to your registered device via e-mail, to send you personalized marketing messages (if you subscribed), product surveys, asking for feedback via e-mail. 

The following data is asked from you for account creation and device registration: Email address, Password, Device number The following data is collected during the usage of the application or if the application is running in the background: your geolocation anytime you connect your device to enable voice feature activation, IP address, crash data if there are issues with the application, country of the store that is active on the device.

Mammut may also receive and/or disclose your personal data, for specific purposes, from/with third parties including the below: 

• Voice feature enablement for Barryvox devices: interaction and application design company 

• User and device registration process: identity and access management providers 

• Functionality enablement of Barryvox application: push notification and crash reporting tool providers 

• Location identification of Barryvox device usage: Analytics tool 

The legal basis of processing personal data is your freely given, explicit consent with regards the creation of your Mammut account and registration of your device on the Mammut website. 

The legal basis for processing personal data is contractual obligation with regards to the usage of the application which enables the full functionality of the device. 

The legal basis for processing personal data is Mammut’s legitimate interest with regards to the identification whether the device is used or activated in countries where the voice feature cannot be used due to a court ruling. 

We provide an opportunity to participate in our Mammut Collective program. When you apply we collect and use your Personal data according to the Terms and Conditions of the program. This includes the following 

• Reviewing and evaluating your application 

• Sending you newsletters specifically about the program (e.g its benefits, special events, product recommendations) and any other marketing communications. You can unsubscribe from the newsletter anytime. 

• Use the images, media content, identifying and contact information you provided to us in our marketing and commercial activities 

The categories of data we may collect for the above mentioned purposes are Identity information, Contact information, Location information, any description and document you provide during the application process, image, likeness, and size information , photographs, motion pictures, videotapes, recordings and other references or records which may depict, record or refer to you for any purpose that are either collected taken of you by Mammut through the Product Testing, or submitted by you to Mammut. 

The legal basis for processing personal data is contractual obligation. 

When legally obligated, we may disclose your Personal Data to authorities or relevant parties for purposes such as national and public security, crime prevention, investigations, legal proceedings, anti-money laundering measures, the protection of others’ rights and freedoms, and the enforcement of civil claims. We will only share such information once we have verified that the request is legally valid. In some cases, we may be prohibited by law from informing you about the disclosure. 

The categories of data we may process during this activity vary according to the request of the authority. 

The legal basis for this processing is legal obligation. 

As a general rule, Mammut retains personal data only for as long as necessary to fulfill the purposes for which it was collected. However, there are circumstances where personal data may be retained for longer periods, in line with the following conditions: Mammut will continue to process personal data if (i) it is required to do so by contract, legal obligation, or other applicable provisions, or (ii) it has a legitimate overriding interest—such as retaining data for evidentiary purposes in the event of legal claims, documenting compliance with legal or regulatory obligations, or conducting non-personalized data analysis. 

Different retention rules may apply where data has been anonymized or pseudonymized, subject to applicable laws. 

As a rule for contract related Customer data Mammut retains personal data as long as the contractual relation is ongoing and for ten years after the termination of the contractual relationship unless (i) a shorter or longer statutory storage obligation is applicable on a case-by-case basis, (ii) the retention is required for reasons of proof or another valid reason based on applicable law, or (iii) the deletion of the data is required earlier (because e.g. the data is no longer required or Mammut is required to delete the respective data). 

Your personal data is only accessible to individuals who require it to carry out the intended purpose of processing. We may share your data with our group companies, trusted partners, subcontractors, and other third parties when necessary to fulfill that purpose. You can find the list of Our Group companies in the Appendix. 

Service providers and other Third Parties: 

Mammut may also receive and/or disclose your personal data, for specific purposes, from/with third parties including the below: 

• For Package delivery: Logistical and transport services (Postal services, carriers and shipment service suppliers) 

• For Payment processing: Payment service providers 

• Order fulfilment: Order management system providers, Ecommerce platform providers, payment providers 

• Fraud and loss prevention: Fraud engine providers 

• Managing customer relationships: CRM providers 

• Product care: Product repair centers 

• Optimizing business processes, streamlining workflows, and improving overall operational efficiency: process and workflow optimization providers 

• Personalization, profiling: CDP providers 

• Marketing, promotion: event management platforms, social media platforms, online advertising platforms, privacy preference management platforms, newsletter providers 

• Enhanced conversions: Google Enhanced Conversion, Meta Conversion API, TikTok Events API 

• Conducting surveys, studies: survey tool providers 

Where third parties act as data processors, they are contractually obligated to process personal data solely in accordance with Mammut’s instructions and in compliance with applicable legal requirements. However, certain third parties—such as logistics providers and event management platforms—operate as independent data controllers. This means they determine the purposes and methods for processing your personal data independently of Mammut. 

Any transfer of personal data to Mammut employees, our affiliated group companies, or third parties located outside the European Economic Area (which includes all EU member states, as well as Iceland, Liechtenstein, and Norway) is carried out in accordance with the EU Standard Contractual Clauses to ensure an adequate level of data protection.

Users may encounter advertisements or other content on the Site that link to websites or services provided by Mammut's partners, suppliers, advertisers, sponsors, licensors, social media platforms, and other third parties. Mammut does not control the content or links on these external sites or social media platforms and is not responsible for the practices they employ, except in the case of official Mammut campaigns or verified social media posts. 

Please note that these third-party sites and services may change frequently and may have their own privacy and customer service policies. Your interactions and browsing activity on such external websites or social media platforms are governed by their respective terms and policies. 

You have the right to opt-out of the use of your personal data by Mammut for our mailing list or other direct marketing purposes at any time. You may do so by either clicking the unsubscribe option at the bottom of each email or by making a request via our Contact Form . 

You can opt-out of the processing of your personal data for the purpose of building a profile as described above by making a request to us  via our Contact Form . 

It is important to us that you can execute your rights under GDPR. 

As a data subject you have the following rights under GDPR. You can exercise these rights via our Contact Form , selecting the category from the drop down “Other”. 

Right of access: subject to certain conditions, You have the right to request access to the personal data we hold about you and to receive information about how we process it.  If possible, you should specify the type of information you would like to see to ensure that our disclosure meets your expectations. We must be able to verify your identity. Your request may not impact the rights and freedoms of other people, e.g., privacy and confidentiality rights of other staff 

Right to data portability: Where applicable, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. f you choose to exercise this right; we encourage you to specify the type of information you wish to receive and your preferred delivery method. This helps us ensure that our response meets your expectations. 
Please note that this right applies only when the processing is based on your consent or a contract with us, and only where the processing is carried out by automated means (i.e., it does not apply to paper records). It covers only the personal data you have provided directly to us. 

Rights to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. This right only applies to your own personal data. When exercising this right, please be as specific as possible. 

Right to object: You have the right to request that we restrict the processing of your personal data in certain situations, for example, if you contest the accuracy of the data or object to the processing. This right applies where our processing of your personal data is necessary for our legitimate interests. 

Right to be forgotten: You may request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent. We may not be in a position to erase your personal data, if, for example, we need it to (i) comply with a legal obligation, or (ii) exercise or defend legal claims. 

Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If you withdraw your consent, this will only take effect for future processing. 

We strive to respond to your inquiry, request, or complaint within thirty (30) calendar days of receiving it. If, in the unlikely event, you are not satisfied with how we have handled your matter, you have the right to lodge a complaint with the supervisory authority in your country of residence. 

You can submit a request through our Contact Form  or by sending an e-mail to [email protected] . Please note that if you request the deletion or restriction of some or all of your personal data, it may impact our ability to fulfill our contractual obligations or provide effective customer support. Additionally, there may be situations where we are unable to fulfill your request if doing so would prevent us from meeting certain legal obligations under applicable laws. 

Although we offer products suitable for individuals under 18 years old, we do not knowingly collect personal data from anyone under the age of 18 (“Children”). If you are a parent or guardian and believe your child has provided us with personal data, please contact us. If we discover that we have collected personal data from a child without verified parental consent, we will promptly take steps to delete that information. 

Mammut reserves the right to amend this Privacy Policy at any time.

Should you have any questions regarding our Privacy Policy or about the data processing practices of Mammut, you can contact us at Mammut Sports Group AG, Birren 5, 5703 Seon, Switzerland or at [email protected] 

List of Affiliates of the Mammut Group

• MAMMUT AJUNGILAK AS - Snøfonna 5, 1470 Lørenskog, Norway

• MAMMUT FRANCE SAS - Bâtiment MB2I, Parc d'activité des Longeray, 74370 EPAGNY - METZ TESSY, France 

• Mammut Outdoor Equipment (Shanghai) Co. Ltd. - Room 2051, Building 1, 669 Langong Road, Jinshan Industrial Zone, Shanghai, China 

• Mammut Sports Group GmbH - Mammut-Basecamp 1, 87769 Wolfertschwenden, Germany 

• MAMMUT SPORTS GROUP JAPAN Inc. - Daiwa Jingumae BLDG 4F, 2-4-11 Jingumae, Shibuya-ku, Tokyo, 150-0001, Japan  

• Mammut Sports Group, Inc. - 458 Hurricane Lane, Suite 111, Williston, VT 05495, USA 

• Mammut UK Limited - Floor 4 Amazon House, 3 Brazil Street, Manchester. M1 3PW, UK 

• Mammut Sports Group AG - Birren 5, CH-5703 Seon, Switzerland 

• Mammut Sports Group Vertriebs GmbH - Söllheimer Straße 16 – 10D, 5020 Salzburg, Austria