1. General Information

This Privacy Policy explains how personal data is collected and processed on the websites of TennisGate GmbH.

We aim to keep this information clear, transparent, and limited to what is actually relevant for your use of our platform.

In general, you can visit our website without providing personal data.

Personal data is only processed if:

  • you actively provide it (e.g. contact form, newsletter, account registration), or
  • it is technically required for the operation of the website.

All processing is carried out in accordance with:

  • the General Data Protection Regulation (GDPR)
  • applicable national data protection laws

2. Controller

TennisGate GmbH
Eupener Straße 60
50933 Cologne, Germany

Managing Directors: Oliver Heuft, Lars Bischoff

Email: office@tennisgate.com
Phone: +49 (0) 761-15664488

3. Hosting & Technical Access Data

When visiting our website, the following technical data may be automatically collected:

  • browser type and version
  • operating system
  • referrer URL
  • accessed pages
  • date and time of access
  • IP address

This data is used exclusively to:

  • ensure technical functionality
  • maintain system security
  • prevent misuse

No direct personal identification takes place.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest)

4. Technical Support & Temporary Administrative Access

In individual cases, we may grant temporary and limited access to the administrative area of our website to:

  • hosting providers
  • IT service providers
  • external developers
  • technical support providers

This access is granted only where necessary, for example for:

  • maintenance and technical updates
  • troubleshooting and error analysis
  • security monitoring and incident resolution
  • further development of our platform

Safeguards

We ensure that:

  • access is restricted in scope and duration
  • access is granted only to authorized personnel
  • appropriate technical and organizational measures are in place
  • access is documented and controlled where required

Where such service providers may process personal data on our behalf, this is done:

  • on the basis of data processing agreements (Art. 28 GDPR)
  • in compliance with applicable data protection laws

Legal basis:

  • Art. 6 (1) lit. f GDPR (legitimate interest in secure and efficient operation of our services)

5. Cookies & Consent Management

We use cookies and similar technologies on our website.

Detailed information about cookies, tracking technologies, and third-party services is provided exclusively in our separate Cookie Policy.

Consent for cookies and tracking is managed via:

→ Devowl Real Cookie Banner

This tool allows you to:

  • give or withdraw consent
  • manage tracking preferences
  • control analytics and marketing tools

Legal basis:

  • Art. 6 (1) lit. a GDPR (consent)
  • Art. 6 (1) lit. f GDPR (consent management)

6. Analytics & Advertising (Google Services)

We may use services such as:

  • Google Analytics
  • Google Ads (AdWords)

Important:
These services are only activated after explicit user consent via the consent management tool.

Without your consent:

  • no tracking takes place
  • no data is transmitted to Google

All details regarding:

  • data processing
  • cookies
  • opt-out options

are described in the Cookie policy

7. Newsletter

If you subscribe to our newsletter, we process:

  • Email address (required)
  • Name (optional)

Purpose:

  • sending newsletters
  • providing updates and relevant content

We use a double opt-in procedure.

Legal basis:

  • Art. 6 (1) lit. a GDPR (consent)

You can unsubscribe at any time via:

Your data will be deleted after unsubscription unless legal retention obligations apply.

8. Contact Forms & Communication

If you contact us via:

  • contact form
  • email

we process the data you provide to:

  • respond to your request
  • manage communication

Legal basis:

  • Art. 6 (1) lit. b GDPR (pre-contractual measures)
  • Art. 6 (1) lit. f GDPR (legitimate interest)

9. Orders & Memberships

When purchasing memberships or services, we process:

  • name
  • email address
  • billing address
  • account data

Important Payment Information

Payments are processed exclusively via:

→ Paddle

This means:

  • we do not store or process payment data (e.g. credit card details)
  • Paddle acts as Merchant of Record and handles:
    • payments
    • invoicing
    • VAT compliance

Legal basis:

  • Art. 6 (1) lit. b GDPR (contract fulfillment)

10. Video Integration (Vimeo)

We embed videos via:

  • Vimeo (Vimeo Inc., USA)

Data processing may occur when:

  • videos are played
  • connections to Vimeo servers are established

Tracking via Vimeo or third parties is subject to user consent via the cookie banner.

More details are provided in the Cookie Policy.

11. Data Retention

We store personal data only as long as necessary:

  • for contract fulfillment
  • for legal obligations (e.g. tax law)
  • or based on your consent

Typical retention periods:

  • 6 years (commercial law)
  • 10 years (tax law)

After expiry, data is deleted or restricted.

12. Your Rights (GDPR)

You have the right to:

  • access your data (Art. 15 GDPR)
  • correct inaccurate data (Art. 16 GDPR)
  • request deletion (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)
  • withdraw consent at any time (Art. 7 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

13. Data Security

We implement technical and organizational measures to protect your data.

Our website uses:

  • SSL encryption (HTTPS)

However, data transmission over the internet may still involve security risks.

14. No Automated Decision-Making

We do not use:

  • automated decision-making
  • profiling within the meaning of Art. 22 GDPR

15. Updates to this Privacy Policy

We may update this Privacy Policy if required by:

  • legal changes
  • technical developments

Cologne, March, 31, 2026