PadelPrivacy policy
This is a courtesy translation. Only the German version is legally binding.
1. Controller
Theo Diether
Hohenzollernstr. 14
72810 Gomaringen
E-Mail: kontakt@padelstand.de
2. Hosting / server log files
This website is hosted by Railway Corporation (San Francisco, USA). When the website is accessed, the host automatically processes information in server log files (IP address, date and time of access, page requested, amount of data transferred, browser type and operating system). This data is used to ensure trouble-free operation and the security of our infrastructure (Art. 6(1)(f) GDPR) and is deleted after 30 days at the latest.
As Railway is based in the USA, personal data may be transferred to the USA. The data is processed in the server region we have chosen in the EU (Europe West, Amsterdam/Netherlands). Any transfer to a third country is based on the EU Commission's standard contractual clauses (Art. 46 GDPR).
If you open our address without "www" (padelstand.de), the redirect.pizza service of Enflow B.V. (Alphen aan den Rijn, Netherlands) forwards you to www.padelstand.de. For this purpose the service processes the connection data that is technically necessary (IP address, time, address requested, browser type). We have switched off statistical analysis. Processing takes place mainly in the Netherlands; however, the provider also uses a hosting service provider in the USA for its operations, so a transfer there cannot be ruled out. The legal basis is our legitimate interest in making our website reachable at the short address as well (Art. 6(1)(f) GDPR). Anyone who opens www.padelstand.de directly does not come into contact with this service.
Our former address padel-kompass.de redirects every page to the same page at www.padelstand.de. For the address without "www", redirect.pizza does this as described above; for the address with "www", our own server at Railway does. Only the connection data that is technically necessary is generated in the process; the legal basis is our legitimate interest in keeping old links working (Art. 6(1)(f) GDPR).
3. Cookies and tracking
To analyse how the site is used, we use Umami (provider: Umami Software, Inc., USA). We serve the analytics script ourselves. It sets no cookies and does not read or store anything on your device; no cross-site tracking takes place.
When a page is loaded, your browser sends Umami the page requested, the referring page, screen size, language and technical page load times. For technical reasons, your IP address and browser identifier also reach Umami. From these, Umami derives country and device type and creates an anonymous session identifier; according to its own statements, Umami does not store the IP address itself. In addition, we record interactions such as a click on a shop link, copying a discount code or the answers chosen in the Racket Finder.
Some requests work without JavaScript (for example data exports, the contact form and the Racket Finder as a widget on clubs' websites). Our server reports these to Umami itself – with the page, referring page, browser identifier and language, but without your IP address.
The legal basis is our legitimate interest in designing our offering to meet demand (Art. 6(1)(f) GDPR). We do not ask for consent because the script does not access your device and does not build profiles. You can object to the analysis, for example by using a tracking blocker or by disabling JavaScript for this site.
Umami processes the data with service providers in the USA and the EU (including Amazon Web Services, Cloudflare, ClickHouse and Hetzner). The basis is the provider's terms of use and data processing agreement (Art. 28 GDPR); for transfers to the USA, Umami relies on the transfer instruments recognised by the EU (Art. 44 et seq. GDPR). The analytics data remains stored for as long as we use the service; it cannot be attributed to individual persons.
When you move to www.padelstand.de, your data saved in the browser (wishlist, comparison, tournament management) comes along once: if you had the cookie pk_daten (content just "1") under our former address padel-kompass.de, our server sends you there once via a hand-over page. Your data travels in the browser in the address anchor to the new address – our server does not get to see it – and the cookie is deleted. The legal basis is Section 25(2) no. 2 TDDDG.
4. Fonts
All fonts (web fonts) are loaded locally from our server. No connection to third-party servers (e.g. Google Fonts) is made in the process.
5. Map display (OpenStreetMap)
On the "Play padel" page we embed an interactive map. The map software (Leaflet) is loaded locally from our server; the map tiles (map images), however, are loaded from servers of the OpenStreetMap Foundation (St John's Innovation Centre, Cambridge, United Kingdom). For technical reasons, your IP address is transmitted to these servers in the process. The embedding is based on our legitimate interest in a clear presentation of padel venues (Art. 6(1)(f) GDPR). An adequacy decision of the EU Commission exists for the United Kingdom. You can find further information in the OSM Foundation's privacy policy.
The venue search on the same page calculates the distance to your town or postcode. The table of places and postcodes needed for this is stored on our own server (source: GeoNames, licence CC BY 4.0) – so your input is not passed on to any third party.
We do not request your location. Until September 2026 there was a button "Venues near me" for this; it was removed because browsers without GPS often only know the location to within 30 to 100 km. The page therefore no longer requests location permission at all – our Permissions-Policy header expressly disables the geolocation interface for this page. Searches are made exclusively by the town or postcode that you enter yourself.
6. Product images
We do not store product photos on our server but embed them directly from the image servers of the shops and manufacturers. Most of them come from the content delivery network of Shopify (Shopify Inc., Canada, or Shopify International Ltd., Ireland); the rest come from the servers of individual shops and manufacturers (padelnuestro.com, tradeinn.com, padelxpert.de, spacefoot.com, courtside.se, blazimg.com and files.plytix.com for images of Babolat). This also applies to the home page, the video cards and our Racket Finder when a club embeds it on its website. When an image is loaded, your browser transmits your IP address to the respective server for technical reasons; individual providers may also process data outside the EU (an adequacy decision of the EU Commission exists for Canada). The embedding is based on our legitimate interest in a meaningful presentation of products (Art. 6(1)(f) GDPR).
7. Video tests (YouTube)
On individual racket pages we refer to a test video that third parties have published on YouTube. Nothing is loaded from YouTube when the page is opened – at first you only see a notice designed by us with the video's title, channel, length and preview image. We deliver the preview image from our own server; your browser does not connect to Google for it. Only when you click on the video is the player from youtube-nocookie.com (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) loaded. In the process your IP address is transmitted to Google, and Google may use cookies or comparable technologies; if you are logged in to Google, the access may be attributed to your account. The legal basis for this loading is your consent given by clicking (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future by not playing the video. Details in Google's privacy policy.
8. Affiliate links
We take part in affiliate programmes (including through the advertising networks Awin and Adtraction). If you click on an affiliate link to a shop, the respective partner shop or the network sets cookies when you visit the target page in order to attribute the referral. Data processing there takes place under the provider's own responsibility; you can find details in its privacy policy.
9. Tournament Planner
If you create a tournament under /turnierplaner, we store the player names you enter, the tournament settings (courts, rounds, points per match) and the results entered. No account is required for this, and we ask for neither an e-mail address nor any other contact details.
First names or nicknames are enough for the names – please do not enter more than is needed for the tournament table. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working tournament tool); anyone who enters names is responsible for their permissibility towards the other players.
Storage period: Tournaments are deleted automatically and completely 7 days after they end – including all names and results. If you would like a tournament deleted earlier, simply write to us at the address given above.
Tournament pages cannot be found publicly: they carry noindex, are blocked for search engines in the robots.txt and can only be reached via the tournament link. Anyone who has this link can enter results – so share it only with the other players.
10. Price alert and tournament alert
You can have us notify you when the price of a racket on your wishlist drops or when a tournament is newly announced near a city of your choice. For this we store your e-mail address, the products or cities you have chosen, an optional target price and the time of your sign-up. We ask for nothing more – there is no account and no password.
Confirmation (double opt-in): After you sign up, we first send you an e-mail with a confirmation link. Only when you click it do we send notifications. If you do not confirm, we delete the address automatically after seven days. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
Scope: We send at most one e-mail per day, and only when there is something to report. We do not send advertising for third parties, and we do not pass your address on. The e-mails contain no tracking pixel; we do not find out whether you open them.
Storage period and unsubscribing: Your data remains stored until you unsubscribe. Every e-mail contains a link for this – one click deletes your address together with all alerts completely and immediately. Via the same link you can view and change your alerts at any time.
Delivery: We send the e-mails via the delivery service Resend (Plus Five Five, Inc., USA). The transfer to the USA is based on the EU-US Data Privacy Framework, under which Resend is certified, and on standard contractual clauses. Your address and your alerts are stored on our server within the EU.
11. Contact form
If you write to us via one of our contact forms, we process the information you provide there: your e-mail address, optionally your name, your message and the topic chosen, plus the page on which you submitted the form and the time. We use it exclusively to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry concerns a contract or cooperation, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
The message reaches us as an e-mail. For sending we likewise use Resend (Plus Five Five, Inc., USA; basis as above: EU-US Data Privacy Framework and standard contractual clauses). After that it is stored in our mailbox at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). We do not send you a copy.
Incoming e-mails – including those from the contact form – are read by an automatic retrieval in our mailbox. We file the sender and subject as an internal task at GitHub (GitHub, Inc., USA), but not the content of the message. To draft replies, the content of an e-mail may be transmitted to the AI service Claude of Anthropic PBC (USA); we check and send the reply ourselves. The legal basis is our legitimate interest in prompt handling (Art. 6(1)(f) GDPR).
To protect against spam, we briefly count how often messages are sent from the same IP address. This count is held only in working memory and expires after 15 minutes. We delete your enquiry as soon as it has been dealt with and no statutory retention obligations prevent this.
12. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a data protection supervisory authority.
Right to object: Insofar as we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). A short message to the address given above is enough.