Privacy Policy for Nordic Tennis Atelier

1. Introduction and company information

This Privacy Policy explains how Nordic Tennis Atelier collects, uses, stores, shares, and protects personal data when you visit our website, contact us, book services, purchase products, or otherwise interact with us in connection with our tennis-related business activities.

The data controller is:

Nordic Tennis Atelier
Østergade 12
8200 Aarhus N
Denmark
Email: [email protected]
Phone: +45 70 24 86 31

Nordic Tennis Atelier processes personal data in accordance with applicable privacy and data protection laws.

2. Data collection and processing

Nordic Tennis Atelier may collect and process the following categories of personal data, depending on your interaction with us:

Identification data: name, address, email address, phone number, and similar contact details.
Booking and service data: information related to lessons, training sessions, court reservations, events, memberships, and customer requests.
Payment data: payment status, invoice details, and transaction references. Payment card details are typically processed by our payment service providers and are not stored by us unless necessary and lawful.
Communication data: messages, inquiries, feedback, and correspondence with Nordic Tennis Atelier.
Website and technical data: IP address, device information, browser type, log data, cookies, and usage data collected through our website and digital services.
Marketing preferences: consent choices and communication preferences.
Special categories of data: in limited cases, information about health, injuries, or other relevant conditions may be processed where necessary for safe participation in tennis activities, training, or events, and only where permitted by law.

We generally collect personal data directly from you. In some cases, we may receive data from third parties such as payment providers, booking systems, IT service providers, or publicly available sources where lawful.

3. Purpose of data processing

Nordic Tennis Atelier processes personal data for the following purposes:

to provide tennis-related services, including coaching, training, bookings, events, and customer support;
to manage customer relationships, inquiries, and communications;
to process payments, invoices, refunds, and accounting records;
to administer memberships, registrations, and participation in activities;
to ensure safety, including assessing suitability for participation where relevant;
to operate, maintain, and improve our website, systems, and services;
to send service-related notices and, where permitted, marketing communications;
to comply with legal obligations, including tax, accounting, and record-keeping requirements;
to establish, exercise, or defend legal claims.

4. Legal basis for processing

Nordic Tennis Atelier processes personal data only where we have a lawful basis to do so. Depending on the context, the legal basis may include:

Performance of a contract: when processing is necessary to provide requested services, manage bookings, or fulfill agreements with you.
Legal obligation: when processing is required to comply with applicable laws, such as accounting or tax obligations.
Legitimate interests: when processing is necessary for our legitimate business interests, such as improving services, preventing fraud, maintaining security, or managing customer relationships, provided your interests and rights do not override those interests.
Consent: when we rely on your consent, for example for certain marketing activities or optional cookies, where required by law.
Vital interests or public interest: where applicable and permitted by law, for example in emergency or safety-related situations.

Where special categories of personal data are processed, Nordic Tennis Atelier will do so only where a lawful exception applies, such as explicit consent, necessity for preventive or occupational safety purposes, or another applicable legal ground.

5. Data sharing and third parties

Nordic Tennis Atelier may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

IT and hosting providers;
booking, scheduling, and customer management system providers;
payment processors and financial service providers;
accountants, auditors, legal advisers, and other professional advisers;
marketing and communication service providers;
delivery and logistics providers, where relevant;
public authorities, courts, or other parties where required by law or necessary to protect legal rights.

We require third parties to handle personal data securely and only for the purposes for which it is disclosed, subject to appropriate contractual and legal safeguards.

6. Data transfer to third countries

In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA). This may occur if we use service providers with operations in third countries.

Where such transfers take place, Nordic Tennis Atelier will ensure that appropriate safeguards are in place, such as:

an adequacy decision by the relevant authorities;
standard contractual clauses or equivalent approved safeguards;
additional technical and organizational measures where necessary.

You may contact us for more information about international data transfers and the safeguards used.

7. Storage duration

Nordic Tennis Atelier retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Customer and service data: retained for the duration of the relationship and for a reasonable period thereafter.
Accounting and tax records: retained for the period required by applicable law.
Marketing data: retained until you withdraw consent or object, or until the data is no longer needed.
Security and log data: retained for a limited period unless needed for investigation, security, or legal purposes.

When personal data is no longer needed, it will be deleted, anonymized, or securely archived in accordance with applicable requirements.

8. User rights

Subject to applicable law, you have the following rights regarding your personal data:

Right of access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to rectification: you may request correction of inaccurate or incomplete personal data.
Right to erasure: you may request deletion of your personal data where legal conditions are met.
Right to restriction: you may request that we limit the processing of your personal data in certain circumstances.
Right to data portability: you may request to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
Right to object: you may object to processing based on legitimate interests and, in certain cases, to direct marketing.

To exercise your rights, please contact Nordic Tennis Atelier using the contact details below. We may need to verify your identity before responding. We will respond within the time limits required by law.

9. Withdrawal of consent

Where Nordic Tennis Atelier relies on your consent to process personal data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain optional services or communications, such as marketing emails or specific website features, where consent is required.

10. Right to complain

If you have concerns about how Nordic Tennis Atelier processes your personal data, we encourage you to contact us first so we can address your concerns.

You also have the right to lodge a complaint with the relevant supervisory authority. In Denmark, this is the Danish Data Protection Agency (Datatilsynet).

11. Data security

Nordic Tennis Atelier implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of security practices.

While we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact information

If you have questions about this Privacy Policy or our processing of personal data, please contact: