Privacy Policy

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is Joshua Warrilow (Rackets Specialist – Joshua Warrilow), Mitterhof 15, 83122 Samerberg, Germany, email: joshua@pickleball-pop-up.de.

This website is hosted by Vercel Inc. When you access the website, Vercel automatically processes technical access data (e.g. IP address, date and time of access, page requested) in server log files, as is technically necessary for virtually any website hosting. This logging is outside our direct control and serves operational security.

This website does not use any analytics, tracking or marketing tools (e.g. no Google Analytics, Meta Pixel, or similar services). No usage profiles are created.

When you book a training session through the booking form, we collect the data you enter: name, email address, optionally a phone number, and optional details about your skill level and training goals. This data is stored, together with your booking details (sport, venue, date, time, number of players), in our database and used to carry out, confirm and manage your booking. The legal basis is Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures).

For clients who require a formal invoice, we additionally collect name, email address, phone number and billing address (street, postal code, city, country). This information is used solely to create and send invoices. The legal basis is Art. 6(1)(b) and (c) GDPR (performance of a contract and statutory retention obligations under German commercial and tax law).

Payments are processed by the payment provider Stripe (Stripe Payments Europe, Ltd.) using Stripe Checkout. In the process, your email address, a description of the booked service (sport, venue, date, time), the amount payable and an internal booking reference are transmitted to Stripe. Your payment data (e.g. card details) is processed exclusively by Stripe and never reaches our own servers. The legal basis is Art. 6(1)(b) GDPR. For more information, see Stripe's privacy policy: https://stripe.com/privacy.

We use the email provider Resend to send booking confirmations, reminders and invoices. For this purpose, your email address and the booking or invoice data required for the relevant message are transmitted to Resend. The legal basis is Art. 6(1)(b) GDPR.

For internal scheduling, the operator's (Josh Warrilow's) own Google Calendar is connected to the booking system via OAuth. Booked sessions (including name, date, time, venue) are created as calendar events in that calendar. This is not a client-facing tracking tool, but the operator's internal scheduling. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in functioning schedule management).

To protect against automated access and abuse (e.g. mass booking or login attempts), your IP address is briefly processed (for a few minutes) in a temporary store (Upstash Redis) for certain forms (booking form, admin login, client login) in order to limit the number of requests. Your IP address is not permanently stored in our database. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of our systems).

The fonts used on this website (Inter and Fraunces) are hosted locally on our server and delivered together with the page. No connection is made to external Google Fonts servers, so no data is transmitted to Google for this purpose.

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.