Privacy Policy
Last updated: April 29, 2026
ASOCIACIÓN DE ENTRENADORES, ESCUELAS Y ACADEMIAS DE TENIS Y PÁDEL ("Pelotista", "we", "us", or "our"), located at Av. Mare Nostrum, 15, 46120 Alboraya, Valencia, Spain, operates the website pelotista.com. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Spanish data protection legislation.
1. Data Controller
The data controller responsible for your personal data is:
ASOCIACIÓN DE ENTRENADORES, ESCUELAS Y ACADEMIAS DE TENIS Y PÁDEL
Av. Mare Nostrum, 15
46120 Alboraya, Valencia, Spain
Email: info@pelotista.com
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Account Information
- Name
- Email address
- Phone number (optional)
- Profile picture (when signing in via Google or Facebook)
2.2 Payment Information
- Transaction details (program purchased, amount, currency)
- Payment references (Stripe session ID, PayPal transaction ID)
We do not store your credit card numbers or bank account details. All payment processing is handled securely by our payment providers (Stripe and PayPal).
2.3 Contact Form Submissions
- Name
- Email address
- Phone number
- Message content
2.4 Technical Data
- IP address
- Browser type and version
- Device information
- Pages visited and interaction data (when analytics consent is given)
3. How We Collect Your Data
We collect personal data through:
- Direct interactions — when you create an account, make a purchase, submit a contact form, or update your profile.
- Third-party authentication — when you sign in using Google or Facebook OAuth. We receive your name, email address, and profile picture from these services.
- Automated technologies — cookies and analytics tools, subject to your consent.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance (Art. 6(1)(b) GDPR) — to create and manage your account, process purchases, and deliver the programs you have booked.
- Consent (Art. 6(1)(a) GDPR) — for analytics cookies and marketing communications. You may withdraw consent at any time.
- Legitimate interest (Art. 6(1)(f) GDPR) — for fraud prevention, security, and improving our services.
- Legal obligation (Art. 6(1)(c) GDPR) — to comply with tax and accounting requirements under Spanish law.
5. How We Use Your Data
We use your personal data to:
- Create and manage your user account
- Process bookings and payments for tennis and padel programs
- Send booking confirmations and payment receipts
- Respond to your contact form inquiries
- Send a welcome email upon account creation
- Improve our website and services
- Comply with legal and tax obligations
6. Third-Party Service Providers
We share personal data with the following third parties, solely for the purposes described:
| Provider | Purpose | Data Shared |
|---|---|---|
| Authentication (OAuth), Analytics | Email, name, profile picture; anonymized usage data | |
| Facebook (Meta) | Authentication (OAuth) | Email, name, profile picture |
| Stripe | Payment processing | Email, name, phone, payment details |
| PayPal | Payment processing | Email, name, payment details |
These providers act as data processors or independent controllers under their own privacy policies. We do not sell your personal data to any third party.
7. Cookies
Our website uses the following types of cookies:
- Essential cookies — required for the website to function (session management, authentication state, CSRF protection). These cannot be disabled.
- Analytics cookies — Google Analytics, used to understand how visitors interact with our website. These are only activated with your explicit consent.
You can manage your cookie preferences at any time by clicking "Cookies" in the website footer. You may also configure your browser to block or delete cookies.
8. Data Retention
- User accounts — retained until you request deletion.
- Purchase records — retained indefinitely to comply with Spanish tax and accounting obligations (minimum 4 years under Ley General Tributaria).
- Contact form submissions — retained for 12 months, then deleted.
- Analytics data — governed by Google Analytics retention settings.
9. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data, subject to legal retention requirements.
- Right to restrict processing — request that we limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at info@pelotista.com. We will respond within 30 days.
10. Data Deletion
If you wish to delete your account and associated personal data, you may:
- Email us at info@pelotista.com with the subject "Data Deletion Request"
Upon receiving your request, we will delete your account and personal data within 30 days. Purchase records may be retained as required by Spanish tax law.
If you signed in using Facebook and have removed Pelotista from your Facebook account, you can request data deletion using the method above.
11. International Data Transfers
Some of our service providers (Google, Meta, Stripe, PayPal) may process data outside the European Economic Area (EEA). In such cases, transfers are protected by:
- EU-U.S. Data Privacy Framework adequacy decisions
- Standard Contractual Clauses (SCCs) approved by the European Commission
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption for all data in transit
- Secure authentication via OAuth providers
- Access controls limiting data access to authorized personnel
- Regular security reviews
13. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
14. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency:
Agencia Española de Protección de Datos (AEPD)
www.aepd.es
15. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
16. Contact Us
For any questions about this Privacy Policy or your personal data, contact us at:
Email: info@pelotista.com
Phone: +34 628 504 123
Address: Av. Mare Nostrum, 15, 46120 Alboraya, Valencia, Spain