Legal
Privacy Policy
This privacy policy informs you about the type, scope, and purpose of the processing of personal data by RivieraPool Fertigschwimmbad GmbH (hereinafter "we"
First draft — for legal review. Status: June 2026
Section 1 Responsible Party
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:
RivieraPool Fertigschwimmbad GmbH
Klöcknerstraße 2
49744 Geeste, Germany
Email: info@rivierapool.com
Telephone: +49 5937 660
§ 2 Data Protection Officer
The controller has appointed an external data protection officer:
DSB911 Datenschutz GmbH
Stefan Andreas Scheipers
Kaiserstr. 10b
49809 Lingen (Ems), Germany
Email: info@dsb911.de
Phone: +49 591 9137611
You can contact the data protection officer directly at any time – especially for questions regarding data protection, to exercise your data subject rights, or in case of complaints.
Section 3 Collection and Storage of Personal Data
This website is operated using the Framer platform (Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands; registered with the Dutch Chamber of Commerce under number 59920637). The data submitted via our contact forms is initially processed technically via Framer's infrastructure before it reaches us. Framer acts as a processor within the meaning of Art. 28 GDPR; RivieraPool remains the controller for this data. Further information on data protection at Framer can be found in Framer's privacy policy at https://www.framer.com/legal/privacy-statement/.
Framer may transfer personal data to third-party providers outside the EU/EEA, including the USA, to provide its hosting infrastructure. This transfer takes place on the basis of an adequacy decision by the European Commission or, where no such decision exists, on the basis of the EU standard contractual clauses.
3.1 MLine consultation form
Using the MLine consultation form, you have the opportunity to request a customized pool consultation. The following data will be collected:
First name, Last name
Email address
Phone number
Postal code and city
Information about the desired pool according to the form fields
Free text message (optional)
Uploaded photos and files (photos of the construction site, construction plans, inspirations) (optional)
The processing is carried out based on your explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, which you grant by submitting the form. Insofar as the data processing serves the preparation of a contractual relationship, processing may additionally be based on Art. 6 Para. 1 lit. b GDPR.
3.2 Catalog Download Form
To download our product catalog, the following data is collected:
First name, last name
Email address
Processing is carried out on the basis of your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you grant by submitting the form.
Section 4 Purpose of Data Processing
The data you submit will be processed exclusively for the following purposes:
Processing and answering your inquiry via the MLine advice form, including the preparation and delivery of an individual offer
Provision and delivery of the product catalog according to your request via the catalog download form
Contacting you by our consulting team in connection with your inquiry
Your data will not be passed on to third parties unless this is required to fulfill the contract or you have given your explicit consent. Your data will not be used for advertising or marketing purposes beyond the stated purpose without separate consent.
§ 5 Storage period
Personal data is only stored for as long as is necessary for the respective processing purposes or as long as statutory retention periods exist.
Specific retention periods for form data from the MLine consultation form and the catalog download form:
Pending
The concrete retention periods for the data collected via the contact forms are yet to be defined and confirmed. Please specify: How long should inquiry data from the consultation form and the catalog form be kept before they are deleted or anonymized?
For tax and commercial law reasons, statutory retention periods of up to 10 years may apply (§ 147 AO, § 257 HGB). In these cases, storage is carried out solely to fulfill the statutory obligation; no further processing of the content takes place.
Section 6 Rights of the data subject
Under the GDPR, you have the following rights against the data controller:
Right of access (Art. 15 GDPR)
You have the right to request information about your stored personal data at any time and free of charge, as well as a copy of this data.
Right to rectification (Art. 16 GDPR)
You have the right to request without delay the rectification of incorrect or the completion of incomplete personal data.
Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of personal data concerning you, provided that the requirements of Art. 17 GDPR are met – in particular, if the data is no longer necessary for the purpose of processing or if you withdraw your consent.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data if the accuracy is contested, the processing is unlawful, or you oppose the erasure but request the restriction instead.
Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR.
Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format.
Right to withdraw consent
Insofar as the processing of your data is based on consent, you have the right to withdraw this at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected by this.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. The competent supervisory authority for the controller is the State Commissioner for Data Protection of Lower Saxony.
§ 7 Cookies and Tracking
Our website may use cookies. Cookies are small text files that are stored on your device when you visit. They enable your browser to be recognized when you visit the website again.
Pending — Placeholder
This section is a placeholder and will be updated as soon as the cookie banner categories are finalized. The following are to be described: categories of cookies (necessary, functional, analytics, marketing), services used per category if applicable, opt-in/opt-out options, and the legal basis for each category.
§ [X] CRM systems
Currently, incoming form inquiries are forwarded exclusively by email to our internal sales team. There is currently no processing in a CRM system (customer relationship management system).
Pending — to be added upon introduction of a CRM system
As soon as incoming inquiry data is additionally processed in a CRM system, the following details will be added here: name and registered office of the provider, the exact purpose of processing (e.g., sales management, contact history), the server location (within or outside the EU/EEA), the legal basis for processing, and — if required — a reference to an existing Data Processing Agreement (DPA) with the provider. In the event of data transfer to third countries outside the EU, the basis for transfer (adequacy decision or EU Standard Contractual Clauses) will also be specified.
§ [X] Analysis Tools and Tracking Measures
Currently, incoming form inquiries are forwarded exclusively by email to our internal sales team. There is currently no processing in a CRM system (customer relationship management system).
Pending — to be added upon introduction of analysis tools
As soon as analysis or tracking measures are used, the following information will be added here for each service used: name and provider of the service, the specific categories of data collected, the purpose of processing, the storage period of the cookies used, the legal basis (usually consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG) and an option to object or opt-out. These services are only activated after prior consent has been given via this website's cookie banner (see § 7).
§ [X] Retargeting and Online Advertising
We currently do not use retargeting or personalized third-party online advertising on this website.
Pending — to be added when implementing retargeting measures
If retargeting services (e.g., for displaying targeted advertising based on previous website visits) are used, the following information will be added here for each service used: name and provider of the service, the purpose of processing, the categories of data collected, the storage period, the legal basis, and an objection or opt-out option. These services are also only activated after prior consent.
§ [X] Social Media Plugins
Currently, no third-party social media plugins (e.g., from Facebook, Instagram, or comparable networks) that establish a direct connection to their servers when the page is loaded are integrated into this website. Links to our social media profiles (if any exist) only direct to the respective external pages as simple links, without any data being automatically transmitted to the providers.
Pending — to be added when social media plugins are integrated
As soon as active plugins (not just simple links) are integrated, the following will be added at this point for each network: name and provider, the type of plugin, the purpose of processing, the categories of data transmitted, whether logging into the respective network is required for data transmission, as well as a link to the privacy policy of the respective provider. Integration is carried out where possible via privacy-friendly solutions (e.g. two-click method or server-side integration without direct third-party contact upon mere page access).
Section 8 Contact for Data Protection Inquiries
For inquiries, information, corrections, objections, or other data protection concerns, you can reach us at:
RivieraPool Fertigschwimmbad GmbH
Klöcknerstraße 2, 49744 Geeste
Email: info@rivierapool.com
Phone: +49 5937 660
Alternatively, you can contact our data protection officer directly:
DSB911 Datenschutz GmbH — Stefan Andreas Scheipers
Email: info@dsb911.de
Phone: +49 591 9137611
Section 9 Validity and Amendment of this Privacy Policy
This privacy policy is currently valid and is up to date as of [insert Month/Year]. Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed at any time on this page.
First draft for legal review. This privacy policy has not yet been finalized and should be reviewed and approved prior to publication. Status: June 2026.
Non-binding. Personal. Project-oriented.