Privacy policy
Last updated: 13 October 2026 · English translation for convenience.
1. Controller
Daniel Woller, Stöckachstr. 60, 97249 Eisingen, Germany, Phone: +49 176 52573679, E-Mail: studio@padelcademy.com. We have not appointed a data protection officer.
2. Overview
The Studio website sets no cookies, loads no fonts or scripts from third parties and uses no visitor statistics and no advertising services. We only process the data needed to deliver the website and for ordering, payment, delivery and contact.
3. Hosting and server log files
The website is delivered via Netlify (Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA). Netlify processes technically necessary access data (IP address, time, requested address, browser identifier, possibly referrer) to deliver the site and fend off attacks (Art. 6(1)(f) GDPR). We do not analyse this data. Netlify acts as processor; for transfers to the USA see section 10.
4. Orders
For video orders and the match card subscription we process your billing details (name, company if any, address, country, email, VAT ID if any), the customer type (consumer or business), the services ordered, your design details (name, logo, colours, end card, website, design note or page address, invitation text, button), the version of the order summary and your declarations (terms, age, early start, logo rights, ad notice, optional reference consent) with timestamp. Legal basis is Art. 6(1)(b) GDPR; for reference consent your consent (Art. 6(1)(a) GDPR, revocable at any time).
If a business from another EU member state orders, we check the VAT ID provided via the European Commission's VAT Information Exchange System (VIES) before the contract. Only the country code and number are transmitted; we store the result, the name and address reported by VIES and the request ID. Legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 18 of Implementing Regulation (EU) No 282/2011.
The data is stored in our database at Supabase (Supabase Pte. Ltd., Singapore; operations and support also by Supabase, Inc., USA) as processor; the project is hosted in a data centre in the EU (Ireland). Logos from video orders and all deliveries are kept in non-public storage and are only accessible via time-limited links. The logo of a match card subscription is shown on your match card page; it is therefore kept in publicly readable storage during the subscription and deleted after it ends.
5. Payment via Stripe
Payments are processed by Stripe Payments Europe, Limited (1 Grand Canal Street Lower, Dublin 2, Ireland). You enter payment details directly with Stripe; we receive no card or account numbers. Stripe receives your order number, the services ordered, amount, name, address and email from us, issues invoices on our behalf and also processes data for fraud prevention and its own legal obligations as an independent controller; data may be transferred to the USA. More: stripe.com/privacy.
6. Emails
We send order confirmations, queries, deliveries, activations and confirmations of withdrawal and cancellation via Resend (Plus Five Five, Inc., San Francisco, USA) as processor. Resend receives your email address and the email content and keeps email and log data for 30 days according to its own statement. Replies and emails to studio@padelcademy.com are processed by our email provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as processor (Art. 28 GDPR) and forwarded to our mailbox at Google (Gmail; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); data may be transferred to Google LLC in the USA (see section 10). We send no advertising and no newsletter.
7. Video production
For the voice-over we only send the script of the videos to ElevenLabs (Eleven Labs Inc., USA). It contains neither your name nor other details about you. We process logos and colours only on our own devices and at Supabase.
8. Match card pages
Players create match cards without an account. Photo or video, result, fitness values they enter and all other input stay on their device; they are not sent to us, not stored and discarded when the page is closed. The page only loads the club’s public settings (name, logo, colours, texts) from our database service Supabase (EU, Ireland); Supabase necessarily processes the device’s IP address and access data for this (Art. 6(1)(f) GDPR). The editor runs technically separate from the rest of the page. There are currently no ads on match card pages. Before Google ads start we will update this policy and obtain the necessary consent via a consent banner.
9. Contact, withdrawal and cancellation
What you enter in the contact form, the withdrawal function or the cancellation function (name, email, order number or contract, message or cancellation type and reason) is processed with the time of receipt to handle your request and confirm receipt (Art. 6(1)(b) and (c) GDPR).
10. Transfers to third countries
Some service providers or their groups are based outside the EU. The basis for each transfer is:
- Netlify (Netlify, Inc., USA), Resend (Plus Five Five, Inc., USA), ElevenLabs (Eleven Labs Inc., USA, or the ElevenLabs group), Google (Google LLC, USA, for the mailbox) and Stripe (Stripe, LLC, USA, for transfers by Stripe Payments Europe): the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework (Art. 45 GDPR), certified according to the providers; additionally EU standard contractual clauses (Art. 46(2)(c) GDPR).
- Supabase (Supabase Pte. Ltd., Singapore, and Supabase, Inc., USA): EU standard contractual clauses (Art. 46(2)(c) GDPR). Database, files and backups are stored in the EU (Ireland); access from Singapore or the USA is possible for operations and support.
You can obtain a copy of the standard contractual clauses by writing to studio@padelcademy.com.
11. Retention
- Invoices and accounting records: 8 years (§ 147 AO, § 14b UStG); business correspondence 6 years.
- Production files, deliveries and logos: 12 months after delivery; branding needed for an active match card subscription until the end of the subscription, then deleted within 30 days (the page address stays reserved).
- Order data and contractual declarations: as long as required for invoices and accounting (up to 8 years) or to defend claims.
- Requests without a contract: 12 months after completion. Log of sent emails (recipient, template, result, no content): 12 months. Shortened IP checksums for abuse limiting: 30 days.
- Reference consents: until revoked.
12. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests (Art. 21) and withdrawal of consent (Art. 7(3) GDPR). Write to studio@padelcademy.com. You may lodge a complaint with a supervisory authority; ours is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
13. Browser storage
The website sets no cookies. The match card editor stores nothing in the browser; the video order form keeps your input (including an uploaded logo) only in this browser tab's session storage (sessionStorage) so that it survives a language switch or a cancelled payment. The browser deletes it when you close the tab; after the order is completed, the confirmation page clears it. The match card order form stores nothing in the browser. Legal basis is § 25(2) no. 2 TDDDG.