Data protection declaration of WaterRower NOHRD (Schweiz) AG

 

1. what is this privacy policy about?

WaterRower NOHRD (Schweiz) AG (hereinafter also referred to as "we", "us") obtains and processes personal data concerning you or other persons (so-called "third parties"). We use the term "data" here synonymously with "personal data" or "personal information".

Personal data" refers to data that relates to specific or identifiable persons, i.e. it is possible to draw conclusions about their identity based on the data itself or with corresponding additional data. "Particularly sensitive personal data" is a category of personal data that is particularly protected by the applicable data protection law. For example, data revealing racial and ethnic origin, health data, information on religious or philosophical beliefs, biometric data for identification purposes and information on trade union membership are considered to be particularly sensitive personal data. In section 3 you will find information on the data that we process within the scope of this privacy policy. "Processing" means any handling of personal data, e.g. obtaining, storing, using, adapting, disclosing and deleting.

In this privacy policy, we describe what we do with your data when you use wooden-fitness.ch (hereinafter "website"), purchase our services or products, are otherwise in contact with us as part of a contract, communicate with us or otherwise deal with us. Where appropriate, we will provide you with timely written notice of additional processing activities not mentioned in this Privacy Policy. In addition, we may inform you separately about the processing of your data, e.g. in declarations of consent, contractual terms, additional data protection declarations, forms and notices.

If you transmit or disclose data about other persons, such as family members, work colleagues, etc., we assume that you are authorized to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this data protection declaration.

2 Who is responsible for processing your data?

WaterRower NOHRD (Switzerland) Ltd, CH-6210 Sursee (the "WaterRower NOHRD (Switzerland)"), is responsible for the data processing described in this privacy policy, unless otherwise communicated in individual cases.

For every data processing operation, there are one or more bodies that are responsible for ensuring that the processing complies with the requirements of data protection law. This body is called the controller. It is responsible, for example, for responding to requests for information (section 11) or ensuring that personal data is secured and not used in an unauthorized manner.

Other entities may also be jointly responsible for the data processing described in this privacy policy if they are involved in deciding on the purpose or design. NOHRD GmbH in Nordhorn, Germany may also be involved. If you would like information on the individual controllers for a specific data processing operation, you are welcome to request information from us within the scope of the right to information (Section 11). WaterRower NOHRD (Switzerland) remains your primary contact, even if there are other joint controllers.

You can contact us as follows for your data protection concerns and to exercise your rights in accordance with section 11:

WaterRower NOHRD (Switzerland) AG
Altstadtgasse 2
CH-6210 Sursee
nohrd

3. data do we process?

We process various categories of data about you. The main categories are as follows:

  • Technical data: When you use our website or other electronic offers, we collect the IP address of your end device and other technical data to ensure the functionality and security of these offers. This data also includes logs in which the use of our systems is recorded. To ensure the functionality of these offers, we can also assign you or your end device an individual code (e.g. in the form of a cookie, see section 12). The technical data itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, they can be linked to other data categories (and thus possibly to your person).

 

  • Registration data: Certain offers and services can only be used with a user account or registration, which can be done directly with us or via our external login service providers. In doing so, you must provide us with certain data and we collect data on the use of the offer or service.

 

  • Communication data: If you are in contact with us via the contact form, by e-mail, telephone or chat, by letter or by other means of communication, we collect the data exchanged between you and us, including your contact details and the marginal data of the communication. If we want or need to establish your identity, e.g. if you request information, we collect data to identify you (e.g. a copy of an identity document).

 

  • Master data: We define master data as the basic data that we require in addition to the contract data (see below) for the processing of our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information, e.g. about your role and function, your bank account(s), your date of birth, customer history, powers of attorney, signature authorizations and declarations of consent. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person of the business partner), or because we want to contact you for our own purposes or the purposes of a contractual partner (e.g. in the context of marketing and advertising). We receive master data from you yourself (e.g. when you make a purchase or register), from bodies for which you work or from third parties such as our contractual partners.

 

  • Contract data: This is data that arises in connection with the conclusion or processing of a contract, e.g. information about contracts and the services to be provided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing and information about reactions. We generally collect this data from you, from contractual partners and from third parties involved in the execution of the contract, but also from third-party sources (e.g. providers of credit rating data) and from publicly accessible sources. As a rule, we store this data for 10 years from the last contractual activity, but at least from the end of the contract. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons.

 

  • Behavioral and preference data: Depending on the relationship we have with you, we try to get to know you and better tailor our products, services and offers to you. To do this, we collect and use data about your behavior and preferences. We do this by evaluating information about your behavior in our area, and we may also supplement this information with information from third parties, including from publicly accessible sources. Based on this, we can, for example, calculate the probability that you will use certain services or behave in a certain way. Some of the data processed for this purpose is already known to us (e.g. when you use our services), or we obtain this data by recording your behavior (e.g. how you navigate our website). We anonymize or delete this data when it is no longer meaningful for the purposes pursued.

 

  • Other data: We also collect data from you in other situations. In connection with official or judicial proceedings, for example, data is collected (such as files, evidence, etc.) that may also relate to you.

You provide us with much of the data mentioned in this Section 3 yourself (e.g. via forms, in the context of communication with us, in connection with contracts, when using the website, etc.). You are not obliged to do so, subject to individual cases, e.g. in the context of binding protection concepts (legal obligations). If you wish to conclude contracts with us or make use of services, you must also provide us with data as part of your contractual obligation in accordance with the relevant contract, in particular master data, contract data and registration data. When using our website, the processing of technical data is unavoidable.

Insofar as this is not impermissible, we also obtain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, media or the internet, including social media) or receive data from other companies within our group, from authorities and from other third parties (such as credit agencies).

4 For what purposes do we process your data?

We process your data for the purposes explained below. Further information for the online area can be found in sections 12 and 13. These purposes and the underlying objectives represent legitimate interests of us and, where applicable, of third parties. You will find further information on the legal basis of our processing in Section 5.

We process your data for purposes related to communication with you, in particular to respond to inquiries and assert your rights (Section 11) and to contact you in the event of queries. In particular, we use communication data and master data for this purpose. We retain this data in order to document our communication with you, for training purposes, for quality assurance and for follow-up questions.

We process data for the establishment, administration and processing of contractual relationships.

We process data for marketing purposes and to maintain relationships, e.g. to send our customers and other contractual partners personalized advertising about our products and services. This may, for example, take the form of newsletters and other regular contacts (electronically, by post, by telephone), via other channels for which we have contact information from you, but also as part of individual marketing campaigns (e.g. events, competitions etc.) and may also include free services (e.g. invitations, vouchers etc.). You can refuse such contacts at any time (see the end of this section 4) or refuse or revoke your consent to being contacted for advertising purposes. With your consent, we can target our online advertising on the Internet more specifically to you (see section 12).

We process personal data to comply with laws, instructions and recommendations from authorities and internal regulations ("compliance").

We also process data for the purposes of our risk management and in the context of prudent corporate governance, including business organization and corporate development.

We may process your data for other purposes , e.g. as part of our internal processes and administration.

5 On what basis do we process your data?

If we ask for your consent for certain processing, we will inform you separately about the corresponding purposes of the processing. You can withdraw your consent at any time with effect for the future by sending us written notification (by post); you will find our contact details in Section 2. For the withdrawal of your consent in the case of online tracking, see Section 12. If you have a user account, you can also withdraw your consent or contact us via the relevant website or other service. Once we have received notification of the withdrawal of your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

Where we do not ask for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in it, in particular to pursue the purposes and associated objectives described above under Section 4 and to be able to carry out corresponding measures. Our legitimate interests also include compliance with statutory provisions, insofar as this is not already recognized as a legal basis by the applicable data protection law (e.g. in the case of the GDPR, the law in the EEA and Switzerland).

If we receive sensitive data (e.g. health data, information on political, religious or ideological views or biometric data for identification purposes), we may also process your data based on other legal grounds, e.g. in the event of disputes due to the necessity of processing for any legal proceedings or the enforcement of or defense against legal claims. In individual cases, other legal grounds may apply, which we will communicate to you separately if necessary.

6 What applies to profiling and automated individual decisions?

We may, in exceptional cases, automatically evaluate certain of your personal characteristics for the purposes specified in Section 4 using your data (Section 3) ("profiling") if we want to determine preference data, but also to determine abuse and security risks, to carry out statistical evaluations or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioral and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics.

In both cases, we pay attention to the proportionality and reliability of the results and take measures to prevent misuse of these profiles or profiling. If these can have legal consequences or significant disadvantages for you, we always provide for a manual review.

An example of an automated individual decision is the automatic acceptance of an order by an online store. Pure if-then decisions are not meant (e.g. when the computer lets you access your user account after checking your password), but discretionary decisions (e.g. the decision to conclude a contract).

7. to whom do we disclose your data?

In connection with our contracts, the website, our services and products, our legal obligations or otherwise to protect our legitimate interests and the other purposes listed in Section 4, we also transfer your personal data to third parties, in particular to the following categories of recipients:

  • Group company: NOHRD GmbH in Nordhorn, Germany. The group companies may use the data in accordance with this privacy policy for the same purposes as we do (see section 4).

 

  • Service providers: We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (e.g. IT providers, mail order companies, advertising service providers, login service providers, banks, insurance companies, debt collection companies or credit agencies). For the service providers used for the website, see section 12. Our central service providers in the IT area are SAP and, in the area of credit checks, CRIF.

 

  • Contractual partners including customers: This initially refers to our customers and other contractual partners because this data transfer arises from these contracts. If you work for such a contractual partner yourself, we may also transfer data about you to them in this context. The recipients also include contractual partners with whom we cooperate.

 

  • Public authorities: We may disclose personal data to offices, courts and other authorities in Switzerland and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. The authorities process data about you that they receive from us under their own responsibility.

 

  • Other persons: This refers to other cases where the inclusion of third parties arises from the purposes set out in section 4.

 

  • All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict the processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).

8. will your personal data also be sent abroad?

As explained in section 7, we also disclose data to other bodies. These are not only located in Switzerland. Your data may therefore be processed in Europe as well as in; in exceptional cases, however, in any country in the world.

Please also note that data exchanged via the Internet is often routed via third countries. Your data may therefore be sent abroad even if the sender and recipient are located in the same country.

9 How long do we process your data?

We process your data for as long as required by our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes or if storage is technically necessary. Further information on the respective storage and processing periods can be found in the individual data categories in section 3 and in the cookie categories in section 12. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the storage or processing period has expired as part of our normal processes.

10. how do we protect your data?

We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data, to protect it against unauthorized or unlawful processing and to counteract the risks of loss, unintentional alteration, unwanted disclosure or unauthorized access.

11 What rights do you have?

Under certain circumstances, the applicable data protection law grants you the right to object to the processing of your data, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing.

To make it easier for you to control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

  • The right to request information from us as to whether and which of your data we process;
  • the right to have us correct data if it is incorrect;
  • the right to request the deletion of data;
  • the right to obtain from us the personal data concerning you in a commonly used electronic format or to transmit those data to another controller;
  • the right to withdraw consent where our processing is based on your consent;
  • the right to receive, on request, further information necessary for the exercise of these rights;

If you wish to exercise the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by e-mail; our contact details can be found in Section 2. In order to rule out misuse, we must identify you (e.g. with a copy of your ID, unless otherwise possible).

You also have these rights vis-à-vis other bodies that work with us on their own responsibility - please contact them directly if you wish to exercise rights in connection with their processing. You will find information on our key cooperation partners and service providers in section 7, and further information in section 12.

Please note that these rights are subject to conditions, exceptions or restrictions under the applicable data protection law (e.g. to protect third parties or business secrets). We will inform you accordingly if necessary.

If you do not agree with our handling of your rights or data protection, please let us know. In particular, if you are located in the EEA, the UK or Switzerland, you also have the right to complain to the data protection supervisory authority in your country. A list of authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/board/members_de. You can contact the UK supervisory authority here: https://ico.org.uk/global/contact-us/. You can contact the Swiss supervisory authority here: https://www.edoeb.admin.ch/de.

12. do we use online tracking and online advertising techniques?

We use various technologies on our website with which we and third parties engaged by us can recognize you when you use our website and, under certain circumstances, track you over several visits. We will inform you about this in this section.

In essence, we want to be able to distinguish between access by you (via your system) and access by other users so that we can ensure the functionality of the website and carry out evaluations and personalization. We do not want to draw conclusions about your identity, even if we can, insofar as we or third parties engaged by us can identify you by combining this with registration data. Even without registration data, however, the technologies used are designed in such a way that you are recognized as an individual visitor each time you visit the site, for example by our server (or the servers of third parties) assigning you or your browser a specific identification number (so-called "cookie").

We use such techniques on our website and allow certain third parties to do the same. However, depending on the purpose of these techniques, we may ask for your consent before using them. You can program your browser to block or deceive certain cookies or alternative technologies or to delete existing cookies. You can also add software to your browser that blocks tracking by certain third parties. You can find more information about this on the help pages of your browser (usually under the heading "Data protection") or on the websites of the third parties listed below.

A distinction is made between the following cookies (technologies with comparable functions such as fingerprinting are also included here):

  • Necessary cookies: Some cookies are necessary for the functioning of the website as such or for certain functions. For example, they ensure that you can switch between pages without losing any information entered in a form. They also ensure that you remain logged in. These cookies are only temporary ("session cookies"). If you block them, the website may not work. Other cookies are necessary so that the server can save decisions or entries made by you beyond a session (i.e. a visit to the website) if you use this function (e.g. selected language, consent given, the function for automatic log-in, etc.).
  • Performance cookies: In order to optimize our website and corresponding offers and to better tailor them to the needs of users, we use cookies to record and analyze the use of our website, possibly even beyond the session. We do this by using third-party analysis services. We have listed these below.
  • Marketing cookies: We and our advertising contract partners have an interest in targeting advertising precisely, i.e. only displaying it to those we want to address. We have listed our advertising contract partners below. For this purpose, we and our advertising contract partners - if you consent - also use cookies with which the content accessed or contracts concluded can be recorded. This enables us and our advertising contract partners to display advertising that we can assume will be of interest to you on our website, but also on other websites that display advertising from us or our advertising contract partners.

We currently use offers from the following service providers and advertising contract partners (insofar as they use data from you or cookies set by you for advertising purposes):

  • Google Ireland Limited, based at Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC, based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, are responsible for processing data from Google services that we use (Analytics, Google Ads, Google reCAPTCHA, Google Authenticator and Google Tag Manager). Google services use performance cookies (see above) to track the behavior of visitors to our website (duration, frequency of pages accessed, geographical origin of access, etc.) and compile reports for us on the use of our website on this basis. We have configured the services so that the IP addresses of visitors are shortened by Google in Europe before being forwarded to the USA and therefore cannot be traced back. We have switched off the "Data sharing" and "Signals" settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles and link this data to the Google accounts of these persons. If you agree to the use of Google services, you explicitly consent to such processing, which also includes the transfer of personal data (in particular usage data for the website and app, device information and individual IDs) to the USA and other countries. Information on Google's data protection can be found here: https://policies.google.com/privacy?hl=de.

13 What data do we process on our pages in social networks?

We may operate pages and other online presences on social networks and other platforms operated by third parties and collect the data about you described in section 3 and below. We receive this data from you and the platforms when you come into contact with us via our online presence (e.g. when you communicate with us, comment on our content or visit our presence). At the same time, the platforms evaluate your use of our online presence and link this data with other data about you known to the platforms (e.g. about your behavior and preferences). They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes (e.g. to personalize advertising) and to control their platforms (e.g. what content they show you).

We process this data for the purposes described in section 4, in particular for communication, for marketing purposes (including advertising on these platforms, see section 12) and for market research. You will find information on the relevant legal bases in section 5. We may redistribute content published by you (e.g. comments on an announcement) ourselves (e.g. in our advertising on the platform or elsewhere). We or the operators of the platforms may also delete or restrict content from or about you in accordance with the usage guidelines (e.g. inappropriate comments).

For further information on the processing carried out by the platform operators, please refer to the platforms' data protection notices. There you can also find out in which countries they process your data, which rights of access, erasure and other rights of data subjects you have and how you can exercise these or obtain further information. We currently use the following platforms:

  • Facebook, Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The privacy policy for the Facebook and Instagram services we use can be found here: https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.
  • Pinterest: Pinterest Europe Ltd. is an Irish company based at Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland and is the data controller subject to GDPR obligations. Pinterest's privacy policy can be viewed here: https://policy.pinterest.com/de/privacy-policy.
  • X (formerly Twitter): X Internet Unlimited Company (an Irish company), and X Corp, a company based in Texas, USA, are the joint controllers for the processing of your data in connection with X. Information on X's data protection can be found here: https://x.com/de/privacy .

14. can this privacy policy be amended?

This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.

Last update: 30.6.2025