Privacy Policy

This is an English translation for your convenience. In case of doubt, the German version is binding.

1. Controller

The controller responsible for data processing on this website is:

Roberto Schiwon (Padelite)
Nieritzstraße 8
01097 Dresden, Germany
Phone: +49 1520 2336699
Email: robsn@padelite.de

We have not appointed a data protection officer, as we are not legally required to do so.

2. Overview

We only process personal data to the extent necessary for a functioning website, our content and services (in particular training requests, bookings and their payment), or where you have given your consent. The legal bases are in particular:

  • Art. 6(1)(a) GDPR – your consent (e.g. statistics, external content, “Looking for players” posts, court alerts),
  • Art. 6(1)(b) GDPR – contract or pre-contractual measures (e.g. training request, booking, payment, vouchers),
  • Art. 6(1)(c) GDPR – legal obligations (e.g. retention of invoices),
  • Art. 6(1)(f) GDPR – legitimate interests (e.g. secure and stable operation of the website),
  • Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) – consent to storing or accessing information on your device; Section 25(2) TDDDG where this is strictly necessary for technical reasons.

3. Hosting and server log files

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in the European Union. The server and website are technically maintained by Philipp Ramsch, Cottbus.

When you visit the website, the server automatically stores information transmitted by your browser in log files: IP address, date and time, page visited, referrer URL, browser and operating system. We need this data to deliver the website, find errors and fend off attacks (Art. 6(1)(f) GDPR). It is not combined with other data and is deleted automatically after a short time.

Our SEO plugin logs requests for pages that do not exist (error 404) in order to find broken links. The requested address, time, browser and IP address may be stored (Art. 6(1)(f) GDPR).

4. Security (Imunify360)

To protect against attacks and automated access, we use the security software Imunify360 (CloudLinux) on our server. It evaluates IP addresses, browser identifiers and access patterns. If behaviour looks suspicious, a short check page (“One moment, please …”) may appear, which can set a technically necessary cookie. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR, Section 25(2) TDDDG).

The connection to this website is encrypted via SSL/TLS (recognisable by “https://” and the padlock symbol in your browser).

5. Cookies and consent management (WPConsent)

We use cookies and similar technologies. We set technically necessary cookies without consent (Section 25(2) TDDDG), for example:

  • your cookie banner choice (WPConsent),
  • your selected language (Polylang),
  • the security check (Imunify360),
  • your selection in the booking calendar (chosen day and venue), stored only in your browser.

We only use all other cookies and external services (statistics, external content) if you agree in the cookie banner. You can change or withdraw your choice at any time via the “Cookie settings” link or the banner. Details on individual cookies can be found in our cookie policy.

We manage consent with the WordPress plugin WPConsent, which runs on our own server. Your choice is stored in a cookie in your browser (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

6. Statistics with Google Analytics 4

With your consent, we use Google Analytics 4 (integrated via the MonsterInsights plugin) to understand how our website is used. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without consent, Google Analytics remains set to “denied” in Consent Mode and does not set any analytics cookies.

Data processed includes pages visited, time on page, origin (e.g. search engine), device, browser, approximate location and clicks on links to booking systems on the “Free padel courts” page. IP addresses are not stored in Google Analytics 4. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Event data is deleted in Google Analytics after 2 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. More: policies.google.com/privacy.

7. Training requests, bookings and payment

Training requests

If you send us a training request via the form, we process the information you provide: name, email address, optional phone number, playing level, desired training, preferred coach and your message. We use it exclusively to answer your request and arrange training (Art. 6(1)(b) GDPR).

The form runs with the WPForms plugin on our server. The request is sent to us by email; you receive a copy at your email address. The entries are stored neither in our database nor at WPForms (the “Lite Connect” cloud backup is switched off). All emails from this website are sent directly from our own web server (WP Mail SMTP plugin); emails to us are received by the mail server of our technical support provider.

We delete your request once it has been dealt with and no statutory retention obligations apply.

Booking training sessions

You can request and book training sessions via the booking calendar on our website (“Request training”). We process your name, email address, phone number, number of participants, your optional message, the booked session and the time of booking. We use this data to carry out the training, to send you a booking confirmation with a link to manage your booking and a reminder the day before, and to inform you of any changes (Art. 6(1)(b) GDPR). To prevent misuse, a non-reversible hash of your IP address is stored for no more than one hour (Art. 6(1)(f) GDPR).

Bookings are stored exclusively in our website’s database; no external booking service is used. The coach also sees booked sessions in his calendar via a secret subscription address known only to him. Sessions and bookings are deleted automatically 24 months after the training date; information contained in invoices is kept in accordance with statutory retention periods (see below).

Payment

You can pay for your training by bank transfer, in cash, by card on site or online. For each booking we store the amount, payment method and payment date (Art. 6(1)(b) and (c) GDPR).

  • Bank transfer: To match your payment, we see your name, your IBAN and the payment reference in our bank statements.
  • Online payment with Stripe: If you choose “Pay online now”, you are forwarded to the payment page of Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). We transmit to Stripe the amount, the booked service with date, time and location, a booking number and your email address. You enter your payment details (e.g. card number, Apple Pay, Google Pay) directly with Stripe; we do not receive them. From Stripe we only receive confirmation of whether the payment was successful and a payment reference. In the event of a cancellation, we initiate the refund via Stripe. Stripe also processes the data to prevent fraud and as an independent controller for processing the payment; data may also be transferred to Stripe, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). More: stripe.com/privacy.
  • PayPal: If you pay to our PayPal account, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, processes your payment data as an independent controller. More: paypal.com/legalhub/privacy-full.

Invoices and accounting

Once payment has been received, we create an invoice containing your name, your address where applicable, the service, the amount and the payment date, and send it to you by email. We keep invoices, proof of payment and accounting records in accordance with German tax law (Section 147 AO, Section 14b UStG – usually 8 to 10 years) and pass them on to our tax adviser, who is bound by professional secrecy, for bookkeeping and tax returns (Art. 6(1)(c) GDPR).

5- and 10-session cards

If you buy a 5- or 10-session card, we store your name, email address, date of purchase, price, validity, the card code and which sessions you booked with the card. We need this data to send you the card by email, keep track of your balance and check the card when you book (Art. 6(1)(b) GDPR). Card data is deleted automatically 24 months after the card expires; statutory retention obligations for invoices remain unaffected.

Vouchers

If you buy a voucher, we store your name, email address, date of purchase, price or service, validity and the voucher code, as well as – if provided – the name of the recipient and a personal message. We send you the voucher as a PDF by email. When it is redeemed, we store which booking the voucher was used for and the remaining value (Art. 6(1)(b) GDPR). Vouchers are valid for three years until the end of the year; after that we only keep the data as required by law.

The same applies if you contact us directly by email or phone.

7a. Looking for players

On the “Free padel courts” page you can post a request if you are looking for players for a single game or a regular group.

  • What we process: your first name, your email address, the details of the game (venue, day and time or weekdays and time of day, playing level, number of players wanted, whether the court is booked) and your optional message.
  • What is publicly visible: your first name, the game details and your message. Your email address is not shown.
  • Confirmation: Your post only appears after you have activated it via the link in our confirmation email. We receive a notification of every new post so that we can remove inappropriate entries.
  • Contact: Anyone who wants to join writes to you via a form on our site (name, email address, message). We forward the message to you by email; you can reply to it directly. The other person only learns your email address if you reply.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you give when posting or sending a message. You can withdraw it at any time by ending your post via the “End request” link in our emails or by writing to us.
  • Storage period: Posts for a single game are deleted 2 days after the date, regular groups when they expire (30 days, can be extended). Unconfirmed posts are deleted after 24 hours. Forwarded messages are not stored on the website; they only exist in the mailboxes involved.
  • Protection against misuse: A non-reversible hash of your IP address or email address is stored for no more than 24 hours to limit the number of posts and messages (Art. 6(1)(f) GDPR).

7b. Free padel courts

The “Free padel courts” page shows when the courts at the venues are booked or free. Our server retrieves this information from the venues’ booking systems (Booktivio for Ostrabeach, Eversports for Sportwelt Radeberg). No data about you is transferred: your browser only loads the availability from our server. We only store which court is booked when – without names or other details about the people who booked. Only when you click on a free time slot do you switch to the website of the respective booking system; from then on, its privacy policy applies.

7c. Court alert

On the “Free padel courts” page you can set up a court alert. We will then send you an email as soon as a padel court becomes free at your preferred time.

  • What we process: your email address, the days, time, minimum duration, venues and language you chose, as well as when the alert was created and confirmed and when we last emailed you. We store which free times we have reported only so that you do not get the same time twice.
  • Confirmation: The alert only starts once you click the link in our confirmation email (double opt-in). Unconfirmed alerts are deleted after 24 hours.
  • Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the “Unsubscribe” link in every email or by writing to us.
  • Storage period: An alert runs for 30 days and can be extended. After it expires or after you unsubscribe, we delete it automatically. For our overview we only count how many alerts and emails there are – without any reference to you.
  • Sending: The emails are sent from our own web server (see section 7).
  • Protection against misuse: A non-reversible hash of your IP address or email address is stored for at most 24 hours to limit the number of sign-ups (Art. 6(1)(f) GDPR).

8. External content (only with consent)

On some pages we embed content from other providers. It is only loaded when you click “Load content” or allow “External content” in the cookie banner. Only then are your IP address and possibly other technical data transmitted to the respective provider, who may set its own cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw via the cookie settings.

Service Purpose Provider / privacy
Padelradar Tournament overview on the home page Timo Grützediek-Schlüter, Glehner Str. 7c, 41352 Korschenbroich, Germany – padelradar.io/datenschutz
Booktivio Court booking, courses and events at Ostrabeach DEFYNE GmbH, Westpark 2b, 54634 Bitburg, Germany – booktivio.com
Eversports Court booking at Sportwelt Radeberg Eversports GmbH, Vienna (Austria) – eversports.com
rankedin DPV ranking Rankedin – rankedin.com
FIP (International Padel Federation) World ranking padelfip.com
Google Maps Map in the article “Padel in Dresden” (loads only after clicking “Load map”) Google Ireland Limited, Dublin – policies.google.com/privacy

If you book a court or register via one of these services, the privacy policy of the respective provider applies.

9. Fonts

All fonts (Inter, Roboto, Syncopate) are loaded from our own server. There is no connection to Google Fonts.

10. Page cache

To deliver the website faster, we cache finished pages (WP Fastest Cache plugin). No personal data of visitors is stored in the process.

11. Links to other websites

Our pages contain links to other websites (e.g. booking portals, associations, Google Maps). When you click on them, you leave our website; from then on, the privacy policy of the respective provider applies.

12. Your rights

You have the right at any time to:

  • access the data we store about you (Art. 15 GDPR),
  • rectification of incorrect data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on legitimate interests (Art. 21 GDPR),
  • withdraw your consent with effect for the future (Art. 7(3) GDPR).

Simply write to us at robsn@padelite.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Sächsische Datenschutz- und Transparenzbeauftragte
Devrientstraße 5
01067 Dresden, Germany
www.datenschutz.sachsen.de

13. Changes

We update this privacy policy when our website or the legal situation changes. The version published here applies.

Last updated: 28 October 2026