tennis-spieler.com
Privacy & cookies
This notice explains how personal data is processed when you visit our tennis portal, register or manage an advertising slot.
Last reviewed:
Who is responsible?
Marc Hembach
Neusser Str. 513
50737 Köln
Germany
Contact: Marc Hembach
marc.hembach@tennis-spieler.com
What data do we process, and why?
Visiting the website
Page requests process information including your IP address, time, requested URL, technical browser information and, where supplied, the referring page. This enables delivery, troubleshooting and protection of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure operation.
Provider accounts and contact
Registration processes your email address, credentials and technical sign-in information. Requests additionally include the contact details, messages and offer information you provide. We use these to manage your account, respond to your request and fulfil the advertising contract under Article 6(1)(b) GDPR. General enquiries are handled under our legitimate interest in communication pursuant to Article 6(1)(f) GDPR. The required account information is needed to provide provider access.
Advertisements and payment status
Activated advertisements publish the titles, descriptions, locations, images and destination links you provide. This information is public and may be indexed by search engines. Your account email, internal request, payment instructions and payment status are not part of the public advertisement. Price, term and payment confirmation are managed to fulfil the contract. Our portal does not process hotel, course or product bookings, or credit card payments.
Security and change records
Technical usage limits and records of administrative changes support abuse prevention and accountability. These may contain account identifiers, timestamps, action types and affected record identifiers. The legal basis is Article 6(1)(f) GDPR; our interest is protecting accounts and data and tracing approvals.
Historical player archive
The archive contains previously public information about tennis players and tournaments, including names, biographical details and results. Publication serves sports history information under Article 6(1)(f) GDPR. Historical records are labelled accordingly. Requests for correction or deletion can be sent to the contact above and will be assessed individually.
Which service providers receive data?
Technical providers support hosting, database, authentication, images and email. The specific contracting entities, regions and settings are documented below for the configured services.
Vercel Inc.
Vercel delivers the website through a worldwide distribution network and processes connection data, page requests and technical logs. Server-side functions in the current deployment run in the Dublin, Ireland region (dub1). The worldwide delivery network and supporting services may still process data outside the EU. Vercel supports delivery and protection of the portal.
Supabase Pte. Ltd.
Supabase provides the database, user authentication and image storage. The project is configured in the AWS eu-west-1 region (Ireland). Processing includes account and sign-in data, advertising content, images, contract details and administrative records. Regional project hosting does not exclude access outside the EEA for support, security operations or through subprocessors.
Resend (Plus Five Five, Inc.)
Supabase Auth sends confirmation and password emails through Resend (Plus Five Five, Inc., USA). The tennis-spieler.com sending domain is configured in the Ireland region (eu-west-1). Processing includes the recipient address, message content including the requested confirmation or password link, and sending and delivery events. These emails support account provision and security under Article 6(1)(b) and (f) GDPR. Delivery to receiving mail servers requires TLS encryption. When you contact us by email, we process your sender address and message content to handle your enquiry.
Processing outside the EEA
The services used may involve transfers in particular to the USA and Singapore, as well as access by subprocessors. Vercel, Supabase and Resend provide EU Standard Contractual Clauses in their data processing terms for the international transfers covered by those terms. These provide contractual safeguards for an appropriate level of protection. You may request information and a copy of the relevant safeguards from the controller. The Ireland sending region does not exclude processing by Resend and its subprocessors outside the EEA.
How long do we retain data?
Account data and contractual communication are required to provide the account and manage the contractual relationship. Records subject to statutory retention are kept for the applicable periods (Article 6(1)(c) GDPR). Data is deleted once its purpose ends unless retention obligations or an overriding lawful reason apply. Expiry of an advertising slot ends public display but does not automatically delete the provider account or contractual records.
Account retention depends on how long you wish to use the account; account deletion can be requested using the contact above. Enquiries are needed for their handling and any resulting contractual relationship. Statutory retention duties and the need to establish or defend legal claims additionally determine how long contractual and payment records are kept. Administrative records support accountability for the relevant accounts, approvals and changes; their continued necessity must be considered when the associated data is deleted. Historical sports information remains available while the information interest justifies publication. Expiry of an advertisement does not trigger automatic data deletion. Specific operational retention periods for technical logs and backup copies will be finalised before public operation.
What happens when you follow external links?
Following a provider link takes you away from our portal. The destination operator is responsible for processing on that site. Your connection transmits technical information such as your IP address to the destination. Its privacy notice applies.
What rights do you have?
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability (Articles 15–20 GDPR). Where processing is based on consent, you may withdraw it at any time with future effect. Please use the contact above for requests.
Right to object: You may object to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR). You may object to direct marketing at any time.
You may lodge a complaint with a data protection supervisory authority, particularly where you live or work or where an alleged infringement occurred (Article 77 GDPR).
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; email: poststelle@ldi.nrw.de; website: https://www.ldi.nrw.de. Your right to complain to another competent supervisory authority remains unaffected.
There is no solely automated decision producing legal or similarly significant effects within the meaning of Article 22 GDPR.