New version available. Updated June 2026
Waterair, whose registered office is situated at Zone Artisanale, 68580 Seppois-Le-Bas (hereinafter “the Company” or “we”), recognises the importance of protecting privacy and individual freedoms. We are therefore committed to ensuring their protection in accordance with applicable law, in particular EU Regulation No 2016/679 of 27 April 2016 (hereinafter “the Regulation”) and Act No. 78-17 of 6 January 1978, as amended, relating to data processing, files and civil liberties.
As part of our relationship, we may collect information that could be used to identify you. This information constitutes personal data, also known as ‘personal information’. This privacy policy (hereinafter the ‘Policy’) is intended to inform you, in particular, of the principles governing the way in which we process your personal data in our capacity as data controller within the meaning of the Regulation.
1. The personal data processed and the purposes of the processing
1.1. Regarding internet users
When you browse our websites, the Company processes the following categories of data:
- Personal details: surname, first name, title, full postal address, telephone number, email address
- Connection data: websites visited, date and time of browsing, IP address, device and browser used, social media usernames, comments, data from cookies, website login details, browsing statistics, statistics relating to the pool configurator, contents of the current shopping basket.
- Other: Data from the contact form (reason for the enquiry and description).
The personal data collected is used solely for the purposes described below, on the legal basis associated with each:
| Purposes of data processing | Legal basis |
| Handling enquiries received via our website: contact, information and catalogue | The Company’s legitimate interest in responding to enquiries and questions and in developing its business |
| Managing requests for quotations | Carrying out pre-contractual measures |
| Sending newsletters | Consent of the individual |
| Cookie management | For further information, please see our cookies policy |
| Social media management: Meta, Instagram, WhatsApp, Pinterest, YouTube, TikTok (posting content, replying to messages, moderation) | The Company’s legitimate interest in managing its communications, promoting its products and responding to enquiries |
| Online Reputation Management | The Company’s legitimate interest in managing its image and communications on the internet |
| Management of prize draws | Performance of a contract, namely the rules of competitions ; the internet user’s consent |
| Handling requests to exercise rights | Legal obligation |
Depending on the nature of your enquiry and our discussions, the information processed may be passed on to our subsidiaries or partners so that we can direct you to the most appropriate point of contact to deal with your enquiry, for example to provide a quote or arrange an appointment.
1.2. Regarding B2C customers or prospective customers
As a B2C customer or prospective customer, the Company may need to process the following categories of data, depending on the purposes for which they are used:
- Personal details: title, surname, first name, full postal address, site address, telephone numbers, email address, age group, date and place of birth, identity document;
- Data relating to personal circumstances: household composition, age group
- Information relating to your working life: social and occupational category, job title, most recent payslips;
- Economic and financial data: Bank details,
- Other: prospect number, date and time of telephone or face-to-face appointments, information relating to the swimming pool project, order form, customer number, date and time of swimming pool delivery, date the shop account was created, shop customer number, information relating to the products ordered, order date, order status, number of products and total per order, chosen delivery method (courier or collection from a collection point), total amount spent in the shop, correspondence relating to orders and service requests, information regarding accessories owned, data from the analyser connected to the swimming pool, photographs; data from the pool configurators, results of installation surveys, data from the contact form (reason for the enquiry and description), customer reviews (ratings, comments), amounts of commercial discounts, and gifts.
The personal data collected is used solely for the purposes described below, on the legal basis associated with each:
| Purposes of data processing | Legal basis |
Sales prospecting management:- Sending communications via text message, email, post, telephone and WhatsApp | Consent of the individual ; the Company’s legitimate interest in promoting its business and managing its communications |
| Organisation of competitions | Performance of a contract, namely the competition rules |
| Sponsorship schemes | Consent of the individual |
| Organisation of commercial events (open days) | Consent of the individual |
Social media advertising management (Google and Meta: Facebook and Instagram):- Setting up audience campaigns, including the creation of lookalike audiences – Setting up targeted advertising campaigns, particularly for swimming pool renovation projects | The Company’s legitimate interest in developing its commercial activities. To exercise your right to object to targeted advertising on social media, you may contact our DPO at rgpd@waterair.com |
| Conducting surveys and research on the product ranges on offer amongst prospective and existing customers | Consent of the individual ; the Company’s legitimate interest in understanding consumer expectations |
| Compilation of performance statistics (including marketing and sales) | The Company’s legitimate interest in expanding its commercial activities |
| Management of the referral programme | The Company’s legitimate interest in promoting its products ; the referred person’s consent |
| Quotation Management | Carrying out pre-contractual measures |
| Order Management | Performance of a contract |
| Invoicing management | Performance of a contract |
| Accounting management | Legal obligation |
| Management of after-sales service and commercial warranties | Performance of a contract |
| Management of the customer area and shop access | Performance of a contract |
Customer review management:– Responding to and publishing reviews | Consent of the individual |
| Claims Management | The Company’s legitimate interest in responding to customer complaints |
| Litigation and legal disputes management | The Company’s legitimate interest in relying on this in the event of a dispute |
| Handling requests for changes of pool ownership | The Company’s legitimate interest in ensuring the transfer and monitoring of the guarantees relating to the swimming pool in the event of a change of ownership |
| Reception and switchboard management | The Company’s legitimate interest in managing incoming calls, welcoming visitors and ensuring the security of its premises |
| Mail management | The Company’s legitimate interest in ensuring the receipt, processing and tracking of its post |
| Handling requests to exercise rights | Legal obligation |
1.3. Regarding customers applying for a finance scheme
In the case of customers applying for a finance scheme, the Company may need to process the following categories of data:
- Personal details: title, surname, first name, date and place of birth, a copy of proof of identity (identity card, passport or driving licence), details of the co-borrower (if applicable)
- Personal details: household composition, number of dependent children, proof of address;
- Data relating to working life: role
- Economic and financial data: Bank details (RIB), income and income bracket, benefits received, outgoings, quotations, loan application forms (with or without insurance), repayment simulations (monthly instalments and interest rates), decision to approve or reject the loan, financial supporting documents (latest payslip, tax assessment or balance sheet where applicable), customer credit statement, amount of the deposit.
- Other: Credit history
The personal data collected is used solely for the purposes described below, on the legal basis associated with each:
| Purposes of data processing | Legal basis |
| Management of funding applications | The Company’s legitimate interest in supporting funding applications and forwarding applications to partner financial institutions |
| Preparation and monitoring of funding applications | The Company’s legitimate interest in supporting funding applications and forwarding applications to partner financial institutions |
| Compilation of statistics on funding | The Company’s legitimate interest in supporting funding applications and forwarding applications to partner financial institutions |
1.4. Regarding partners
As partners of the Company, we may need to process the following categories of data, depending on the purposes for which they are used:
- Identification details: title, surname, first name, postal address, telephone number, email address, country;
- Information relating to your professional background: company name, CV, covering letter, salary expectations, possession of a Category B driving licence;
- Other: partnership application form.
| Purposes of data processing | Legal basis |
| Management of partner recruitment (including international partners) | The Company’s legitimate interest in developing and managing its business, including internationally |
| Planning partner visits to clients | Performance of a contract |
| Managing requests for quotations | Carrying out pre-contractual measures |
| B2B Order Management | The Company’s legitimate interest in managing its orders |
| Invoicing management | The Company’s legitimate interest in processing and monitoring the invoicing of its orders |
| Accounting management | Legal obligation |
| After-sales service management | The Company’s legitimate interest in following up on its customers’ after-sales enquiries |
| Handling requests to exercise rights | Legal obligation |
1.5. With regard to service providers and suppliers
As the point of contact for service providers and suppliers, the Company may need to process the following categories of data, depending on the purposes for which they are used:
- Personal details: surname, first name, telephone number, email address
- Information relating to professional life: company name, job title
- Other: Order details, order number
| Purposes of data processing | Legal basis |
| Supplier Selection Management | The Company’s legitimate interest in selecting its suppliers |
| Management of contracts with suppliers | Performance of a contract |
| Managing business relationships with suppliers | Performance of a contract |
| Procurement management (including quality-related issues) | The Company’s legitimate interest in ensuring the continuity of supplies and guaranteeing the quality of its products and services |
| Supplier payment management | Performance of a contract |
| Management of service providers’ visits to B2C customers | The Company’s legitimate interest in organising services, ensuring the delivery of products and handling customer complaints |
| Accounting management | Legal obligation |
| Handling requests to exercise rights | Legal obligation |
2. Retention periods
The personal data we collect is processed for a period not exceeding that necessary for the purposes for which it is collected, taking into account the applicable limitation periods and the principle of proportionality, in particular:
| Data subject | Shelf life |
| Prospects (for sales prospecting purposes) | 3 years from the date of data collection or the last contact from the prospect, or until consent is objected to or withdrawn |
| Customers (for marketing purposes) | 3 years from the end of the business relationship or the last contact initiated by the customer, or until consent is objected to or withdrawn |
| Customers | 5 years from the expiry of the applicable commercial warranties |
| Suppliers, partners, B2B customers | 5 years from the end of the business relationship |
For further information regarding the retention periods we apply, please contact us at the address below.
3. Recipients of the data
In strict accordance with the intended purposes, your personal data is disclosed only to authorised recipients, namely:
- To Waterair’s internal departments;
- To our subsidiaries, distributors, partners and subcontractors;
- To our marketing and communications service providers;
- To our IT service providers;
- To our banking and insurance organisations;
- To our partner organisations providing project funding;
- Regulated professions (such as legal advisers, solicitors, bailiffs, chartered accountants and statutory auditors);
- Social media and ad and advertising management platforms (Facebook, Instagram, WhatsApp, Google, Pinterest, LinkedIn, recruitment website platforms);
- To our Data Protection Officer;
- To administrative or judicial authorities upon request.
We only pass on to them the personal data necessary for them to carry out their services, and we require them not to use it for any other purpose.
Your data may be transferred to a country outside the European Union. In such cases, we systematically take all necessary measures to ensure that the recipients of the data provide an adequate level of protection equivalent to that required by national and European regulations, in particular by signing the European Commission’s standard contractual clauses.
4. Security measures
We are committed to safeguarding the confidentiality, integrity, availability and security of your personal data. In accordance with Article 32 of the Regulation, we endeavour to implement appropriate technical, organisational and administrative measures to ensure a level of security appropriate to the risks involved in the processing of your personal data. We also put in place measures to prevent, as far as possible, any loss, accidental destruction, alteration or unauthorised access to your personal data.
5. How to exercise your rights
In accordance with applicable law, you have the right to:
- To access and rectify your personal data (right of access and rectification);
- To object to the processing of your personal data on legitimate grounds (right to object);
- Within the limits set out in the relevant legislation, to request that the processing of your personal data be restricted or that your personal data be erased (the right to restriction of processing and the right to erasure);
- To request the portability of your personal data (right to data portability);
- To withdraw your consent;
To exercise your rights, you can contact us by email at rgpd@waterair.com or by post at the following address:
EDOS SAS
For the attention of Piscines Waterair
5 rue de Lisbonne
Le Belem
67300 Schiltigheim
France
You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) regarding the way in which we process your personal data.
6. Data Protection Officer
We have appointed EDOS, whose registered office is situated at 5 rue de Lisbonne, Schiltigheim 67 300, France, as our Data Protection Officer (DPO).
You can contact our DPO at the following address with any questions regarding this policy or with any enquiries regarding the processing of your data: rgpd@waterair.com
7. Updating the document
The Company may amend this Policy as and when necessary. We will ensure that you are informed of any such changes by means of a special notice on our website.
Updated in June 2026