Privacy Policy

We are pleased that you use our mobile BLACKROLL App, which can be downloaded from the Apple and Google app stores (hereinafter the “App”), and thank you for your interest in our company and our services. Protecting your privacy when you use our App is important to us.

Information about the Controller
We,

BLACKROLL AG
Hauptstraße 17
CH-8598 Bottighofen
Switzerland
(Legal Notice)
(hereinafter also “we”, “us” or “BLACKROLL”)

as the controller under data protection law, would like to provide you, as a user of our services and/or offerings, with the following information about the data protection aspects relevant to the use of the services and offerings described below.
For general data protection enquiries, you can contact us at [email protected]

Contact Details of Our Representative in the European Union
Our representative in the European Union pursuant to Article 27 GDPR is:

V-Formation GmbH
Stephanienstr. 18
76133 Karlsruhe
www.v-formation.de
Tel.: +49 (0)721 17029034
Email: [email protected]

Contact Details of BLACKROLL’s Data Protection Officer
We have appointed an external data protection officer.
You can contact the data protection officer directly and confidentially using the following contact details:

David Heieck,
c/o V-Formation GmbH,
Stephanienstr. 18,
76133 Karlsruhe,
www.v-formation.de
Tel.: +49 721 181292-15
Email: [email protected]

For ease of readability, the generic masculine form is used below. Female and other gender identities are expressly included where required by the context.

We process your personal data exclusively in accordance with the applicable provisions of data protection law, in particular the Swiss Federal Act on Data Protection (“FADP”), the EU General Data Protection Regulation (hereinafter the “GDPR”), and other statutory data protection provisions (together hereinafter the “Data Protection Laws”).

If you would like to consult the GDPR yourself, it is available online at: https://eur-lex.europa.eu/legal-cotent/DE/TXT/HTML/?uri=CELEX:32016R0 679. The FADP is also available online at the following link: https://www.fedlex.admin.ch/eli/cc/2022/491/de.

This Privacy Notice applies only to our App. It does not apply to our online shop (available at blackroll.com/de/shop) or to our other websites. Nor does it apply to third-party websites linked from the App, in particular the webshops of distributors of BLACKROLL products. Where applicable, please also review the privacy notices provided on those websites. We may also provide you with additional privacy notices in other situations involving contact or data processing, which you should also review where applicable.

As our App and other services are hosted in Switzerland, your personal data is generally processed in Switzerland unless this Privacy Notice states otherwise. Where we process data in Switzerland, an adequate level of data protection is ensured for users from the European Union (EU) or the European Economic Area (EEA) in accordance with the EU adequacy decision for Switzerland pursuant to Article 45(1) GDPR.

Data protection law protects personal data (also referred to as personal information) within the meaning of the FADP and the GDPR. Personal data means any information relating to an identified or identifiable natural person (known as “data subject”). Your personal data therefore includes all data that makes it possible to identify you, such as your name, address, telephone number or email address. Personal data also includes information necessarily generated through the use of our App, such as the start, end and extent of use or your IP address.

Personal data is also collected to the extent that you provide us with information and content in the course of customer communications.

We regularly process the following categories of data relating to you:

• Master data, in particular surname, first name and gender.
• Contact details, in particular telephone number and email address.
• Interest data, in particular data you provide to us within the scope of our contractual user relationship, for example regarding sports, areas of discomfort, etc.
• Usage data, in particular the pages/screens of our App that you visit, access times and your IP address.
• Training data, in particular information on the type, date/time and duration of exercises completed by you in the App.

Within the scope of our contractual relationship, you must provide the personal data required to fulfil the contractual obligations under the Terms of Use and to comply with legal obligations. We will inform you appropriately which specific data is required in your individual case (for example, by marking mandatory fields in forms).

Your personal data is obtained from you, in particular from the information you provide and from your use of the App.

We process your data only for specified purposes and to the extent permitted by applicable law. We process your data for the following purposes and rely on the following legal bases:

• Consent: We process certain data only on the basis of your voluntary consent given in advance. You have the right to withdraw your consent at any time with effect for the future (see also Section 16).
• Performance of a contract or steps prior to entering into a contract: In particular, to perform and manage our contractual relationship with you on the basis of the Terms of Use.
• Compliance with a legal obligation: We also process your personal data to comply with legal obligations, such as retention obligations under commercial and tax law.
• Protection of legitimate interests: We process certain data to protect our legitimate interests, for example to provide and operate this App.

Section 16 explains how you can object to such processing and the circumstances in which we must stop or restrict our processing.

Please note that this is not a complete or exhaustive list of the possible legal bases; these are merely examples intended to make the legal bases under data protection law more transparent. Further details of the legal bases for the individual processing activities in our App are provided in the sections below.

When you download our App, the necessary information is transmitted to the relevant app store. This includes, in particular, the username, email address, time of download and unique device identifier. We have no influence over this data collection, as it is carried out by the relevant app store operator. This data is not otherwise stored by us.

In this context, please also refer to the respective privacy notices of the app store operators:

• for the iOS App Store: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill Cork, Ireland, available at www.apple.com/de/privacy/privacy-policy/; and
• for the Google Play Store: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, available at policies.google.com/privacy?hl=de.

When you access our App, the following information concerning access and your use may be stored:

• IP address of the requesting device,
• screens/videos accessed,
• the HTTP response code, where applicable,
• the previous screen or the linked screen/page you accessed (referrer/destination URL),
• date, time, duration and time zone of the server request or interaction (for example, first/last opening/closing of the App, last login, screens/videos viewed, starting/ending a training session, clicking a call-to-action button),
• browser type and version,
• operating system used by the requesting device,
• uninstallations/updates of the App,
• your device model, the unique number of the device used (IMEI – International Mobile Equipment Identity), the name of the device and the ID assigned to the device.

We process this usage data on the basis of our legitimate interests in providing the App, ensuring its technical operation, recording consent given by you and safeguarding the security of our information technology systems. Our interest is to enable and continuously maintain the use of our App and its technical functionality. This data is processed automatically when you access our App. You cannot use our App without providing this data. As a rule, we do not use this data for the purpose of drawing conclusions about your identity.

When you access our App, corresponding information may be stored on your device and/or information already stored on your device may be accessed. Storing or accessing this information is strictly necessary to ensure the operation of our App and IT security and to provide our services to you as requested.

You cannot object to the processing of your usage data, as this data is essential for the smooth operation of the App. The App cannot be used without this data being processed.

We use cookie-like technologies to optimise the design of the App. Among other things, this enables us to provide certain functions, facilitate navigation and offer a high level of user-friendliness.

Cookie-like technologies are based on identifiers that enable our web server to recognise your device, for example to determine whether your device has previously communicated with us. They therefore serve to enable the use of our App, make it more convenient for you and optimise our range of services. In this process, corresponding technical information may be stored on your device and/or information already stored on your device may be accessed. Detailed information on the nature, function, purposes and, where applicable, third-party providers used in connection with cookie-like technologies is provided in the provisions below. The storage and use of cookie-like technologies and the associated data processing are carried out either on the basis of our legitimate interests or on the basis of your consent, where you have expressly consented to the use of cookie-like technologies. Personal data may be stored where this is strictly necessary to provide the requested service or where you have given your consent. Reliance on other statutory legal bases is expressly reserved.

You can withdraw your consent in this regard at any time.

Our App uses Google Firebase, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Firebase uses cookie-like technologies, i.e. identifiers that enable Google servers to recognise your device, for example to determine whether your device has previously communicated with us. The information generated about your use of our App (including your IP address and the other usage data listed in Section 4, your training progress and, where applicable, other data generated when using the App in accordance with the sections below) is generally transmitted to and stored on a Google server in the USA.

As part of usage analysis, Google also estimates the country from which you access the App, your age and your gender.

Google’s parent company, Google LLC, is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (see https://www.dataprivacyframework.gov/list). Any transfers of personal data concerning persons resident in the EU to the USA are covered by the European Commission’s adequacy decision based on the EU-U.S. Data Privacy Framework. Any transfers of personal data concerning persons resident in Switzerland to the USA are subject to the Standard Contractual Clauses concluded with Google, which are available here: https://business.safety.google/adsprocessorterms/?sjid=2513094034223128120-EU.

For each of the functions and purposes listed below, Google acts on our behalf, is bound by our instructions and processes data on the basis of a data processing agreement:

• to provide our App and enable key functions (for example, completing and storing exercises),
• to enable use of the user account (see details in Section 7 below),
• to ensure the stability of our App and troubleshoot crashes,
• to provide push notifications and in-app messages (see details in Section 11 below),
• to evaluate and analyse the use of our App and compile reports on App activities.

The legal basis is your prior consent to the use of cookie-like technologies. In addition, data is processed in particular for the performance of the contract, to the extent that processing the transmitted data is necessary to fulfil our contractual obligations under the Terms of Use applicable between you and us. Data is also processed on the basis of our legitimate interests in the commercially efficient and smooth operation and optimisation of our App (in particular its user-friendliness) and in enabling optional functions and services.

You can withdraw any consent you may have given at any time with effect for the future. Where your data is processed on the basis of legitimate interests, you may object to the storage of your personal data at any time. In that case, we will no longer process your data unless we can demonstrate a legitimate interest in doing so or are otherwise legally required to retain it.

You can withdraw your consent to the use of cookie-like technologies at any time.

To exercise your right to object to the processing, please contact us by email.

Further information about Google’s use of data and data protection in connection with Google Firebase is available at the following links:

• policies.google.com/technologies/partner-sites?hl=de (“How Google uses information from sites or apps that use our services”),
• policies.google.com/privacy?hl=de (“Google Privacy Policy”),
• firebase.google.com (Google Firebase website).

An existing user account is required to use the App and to log in to it. Registration takes place when you open our App for the first time. Alternatively, you can log in using an existing customer account. We process the data you provide when registering and creating the user account. This includes, in particular:

• your first and last name, date of birth and gender,
• your email address,
• your username,
• your password (encrypted),
• your objectives in connection with using our App (for example, improving mobility, relieving tension, improving recovery and sleep, enhancing regeneration, and increasing energy and well-being),
• sports you participate in (for example, running, swimming, cycling, strength training, etc.) and the frequency and duration of each sport (for example, one hour per week),
• the body regions you prioritise (for example, neck, shoulders, chest, legs, etc.),
• the BLACKROLL products you use.

(together also referred to as the “Recovery Profile”)

The data is processed for the proper performance of the user agreement concluded with you, to the extent that the processing is necessary for this purpose. Where processing is not necessary for the performance of the user agreement with you, it may be carried out to protect our legitimate interests in properly providing the requested services and functions and in ensuring the security of our IT systems.

The data collected when you register and create a user account is combined with data collected when you use the App (see the explanations in the sections below), data we collect from other sources (for example, in connection with online orders) and any existing customer profile, and is stored centrally in your customer profile in our customer relationship management system (“CRM System”). This is done to optimise customer management. Further information about data processing within our CRM System is provided in the privacy policy for our website at https://blackroll.com/de/service/datenschutz.

Where your data is processed on the basis of legitimate interests, you may object to the storage of your personal data at any time. In that case, we will no longer process your data unless we can demonstrate a legitimate interest in doing so or are otherwise legally required to retain it. To exercise your right to object to the processing, please contact us by email.

We delete your data as soon as the purpose of the processing no longer applies in full—usually when you delete your user account—subject to compliance with any continuing statutory retention obligations. You can delete your user account and the associated data at any time using the “Delete Account” function under “My Profile” in the “Settings” menu.

Through our App, we provide digital educational content focusing on recovery, mobility and performance. The digital educational content includes guided recovery exercises, mobility exercises, informative articles and personalised training plans. In our App, you can mark certain exercises as “Favourites” and compile individual “Routines” from different exercises. As part of these functions, we process the following data about you:

• user ID,
• favourite exercises and routines,
• routines created,
• participation in exercise programmes,
• exercise progress (exercises and routines completed, date, time and duration of the exercises and routines completed),
• BLACKROLL equipment used

(together, “Training Progress”).

Your Training Progress is stored in your user profile (see Section 7).

To the extent that data processing is necessary for the proper performance of the user agreement with you, the user agreement concluded with you constitutes the legal basis for the processing. Otherwise, the data is processed on the basis of our legitimate interests in properly providing the requested functions and optimising your user experience.

Where your data is processed on the basis of legitimate interests, you may object to the storage of your personal data at any time. In that case, we will no longer process your data unless we can demonstrate a legitimate interest in doing so or are otherwise legally required to retain it. To exercise your right to object to the processing, please contact us by email.

We delete your data as soon as the purpose of the processing no longer applies in full—usually when you delete your user account—subject to compliance with any continuing statutory retention obligations.

You can delete your user account and the associated data at any time using the “Delete Account” function under “My Profile” in the “Settings” menu.

We also offer you the option of contacting us through the WhatsApp messaging service provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “WhatsApp”). For this purpose, we use the “Business version” of WhatsApp and a mobile device whose address book contains only the WhatsApp contact details of users who have contacted us via WhatsApp.

If you contact us via WhatsApp, we may process the data you provide voluntarily, for example contact details such as your name and telephone number and, where applicable, your individual message.

Your data may be automatically transferred to and stored on servers of WhatsApp and/or companies affiliated with WhatsApp in the USA. WhatsApp’s U.S. parent company, Meta Platforms, Inc., and its U.S. sister company, WhatsApp LLC, are each certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (see https://www.dataprivacyframework.gov/list). Any transfers of personal data concerning persons resident in the EU to the USA are covered by the European Commission’s adequacy decision based on the EU-U.S. Data Privacy Framework. Any transfers of personal data concerning persons resident in Switzerland to the USA are subject to the Standard Contractual Clauses concluded with WhatsApp, which are available here: https://www.whatsapp.com/legal/business-data-transfer-addendum

Please note that WhatsApp may also process your data for its own purposes. We generally have no influence over this. For information about the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy.

The data you provide via WhatsApp is transmitted to us over a secure connection. We transfer this data to our CRM System. Further information about data processing within our CRM System is provided in the privacy policy for our website at https://blackroll.com/de/service/datenschutz.

Your data is collected, processed and used solely for the purpose of receiving and, where applicable, responding to your enquiry. Your data is processed either to take steps prior to entering into or to perform a contractual relationship with you, or to protect our legitimate interests. In the latter case, we have a legitimate interest in handling contact enquiries voluntarily addressed to us.

We delete the data you provide as soon as the purpose for which it was collected no longer applies in full, subject to compliance with any continuing statutory retention obligations.

Where your data is processed on the basis of legitimate interests, you may object to the storage of your personal data at any time. In that case, we will no longer process your data unless we can demonstrate a legitimate interest in doing so or are otherwise legally required to retain it. To exercise your right to object to the processing, please contact us by email.

The App supports the display of messages (known as push notifications) on the home screen of your device and within the App (known as in-app messages) using the Firebase Cloud Messaging function of the Google Firebase service (see Section 6 above). The App may therefore ask you to grant the corresponding device permission. Granting permission is voluntary. However, if you wish to receive push notifications, you must grant this permission; otherwise, you will not be able to use the function. We need the permission in order to provide the requested services to you in accordance with our Terms of Use.

We use Google Firebase technology (see Section 6) to send you push notifications or in-app messages. Your device is assigned a pseudonymised push reference, which also provides information about when and for how long a particular push notification or in-app message was read. It serves as the destination for push notifications and in-app messages and is used by us to display push notifications or in-app messages on your device.

Even where push notifications or in-app messages contain third-party content from distributors of BLACKROLL products, your personal data is not transmitted to those distributors.

The permission remains active until you deactivate it in your device settings. Push notifications can be deactivated and reactivated at any time. On a device running the Android operating system, this can be done, for example, under “System Settings > Apps > BLACKROLL App > Permissions”; on a device running the iOS operating system, under “System Settings > BLACKROLL App > Notifications”.

We disclose your personal data to external recipients only where this is necessary to provide the App, where you have given us your consent to do so or where another legal permission applies.

External recipients may include, in particular:

• Processors: These are service providers we use to provide services, for example in the areas of technical infrastructure and maintenance of our App. We select such processors carefully and review them regularly to ensure that your privacy is protected. These service providers may use the data only for the purposes specified by us and in accordance with our instructions. Subject to the statutory requirements, we are entitled to engage such processors.
• Public bodies: These are authorities, government institutions and other public-law entities, for example supervisory authorities, courts, public prosecutors or tax authorities. Personal data is transmitted to such public bodies only where required by law.
• Private entities: Service providers and auxiliary persons to whom data is transmitted in connection with providing our App on the basis of a legal obligation or to protect legitimate interests, for example lawyers, tax advisers or auditors.

As a rule, we do not process your data outside Switzerland and the European Union (EU) or European Economic Area (EEA). If, in individual cases, we nevertheless transfer your data to other third countries outside Switzerland or the EU or EEA, we ensure before the transfer that either a statutory exception applies, the recipient provides an adequate level of data protection, or you consent to the data transfer. An adequate level of data protection is ensured, for example, by the recipient’s certification under the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework, the conclusion of EU Standard Contractual Clauses or the existence of Binding Corporate Rules (BCRs). Please contact us using the communication channels specified above to obtain a copy of the specific safeguards applicable to transfers of your data to third countries.

We implement technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our data processing and security measures are adapted to the current state of the art.

In particular, the personal data transmitted in connection with your user account is securely encrypted during transmission. This applies both to the registration process and to login.

For this purpose, we use the Transport Layer Security (TLS) encryption protocol, more widely known by the name of its predecessor, Secure Sockets Layer (SSL).

Please note, however, that we cannot guarantee complete data security, particularly when communicating through the contact function or by email. We therefore recommend using a secure transmission method, such as postal mail, when sending confidential information.

Our employees are required to maintain the confidentiality of personal data.

We retain your personal data only for as long as necessary to fulfil the relevant purposes or—in the case of consent—until you withdraw your consent. If you object, we will no longer process your personal data unless further processing is permitted or even required under the applicable statutory provisions (for example, in connection with retention obligations under commercial and tax law). We also delete your personal data where we are legally required to do so. Otherwise, please refer to the relevant explanations in the preceding sections for details of the retention period for your personal data.

BLACKROLL AG has appointed a representative in an EU Member State. You can contact the representative as follows:

V-Formation GmbH
Stephanienstr. 18
76133 Karlsruhe
www.v-formation.de
Tel.: +49 (0)721 17029034
Email: [email protected]

It may be necessary from time to time to amend the content of this Privacy Notice. We therefore reserve the right to change it at any time. We recommend that you check the current version of this Privacy Notice whenever you revisit our App. We will also publish the amended version of the Privacy Notice here.

Last updated: July 2026