Privacy Policy

1. Controller and Contact

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Society Outsiders GbR (brand „PADELCORD+")

Gartenstraße 1

91242 Ottensoos

Germany

Authorised partners: Noah Richter, Julius Gubitz

Phone: +49 176 60980118

Email: info@society-outsiders.com

Website: https://www.padelcord.de

VAT ID: DE332070407 (small business pursuant to § 19 of the German VAT Act)

If you have any questions about data protection or wish to exercise your rights, you can contact us at any time using the contact details above.

2. Data Protection Officer

We have not appointed a data protection officer, as we are not legally required to do so (§ 38 BDSG, Art. 37 GDPR). For all data protection matters, you can reach us using the contact details set out in Section 1.

3. General Information and Legal Bases for Processing

We process personal data only to the extent permitted by law or where you have given your consent. This website is designed purely as an information and contact site; no data is collected beyond what is technically necessary. Depending on the processing operation, we rely on the following legal bases under Art. 6 (1) GDPR:

A transfer of your data to countries outside the EU or EEA (third countries) takes place only to the extent described in Section 11 and under the conditions set out there.

• Art. 6 (1) (a) GDPR (consent): Where you have given us consent to process your data, for example in the case of a purely non-binding contact request.
• Art. 6 (1) (b) GDPR (contract / pre-contractual measures): Where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, for example to handle your project enquiry.
• Art. 6 (1) (c) GDPR (legal obligation): Where we are subject to a legal obligation, such as commercial and tax-law retention obligations.
• Art. 6 (1) (f) GDPR (legitimate interest): Where processing is necessary to safeguard our legitimate interests or those of a third party, and your interests do not override them, for example to ensure the secure and functional operation of the website.

4. Provision of the Website and Server Log Files

When our website is accessed, our hosting provider automatically processes certain technical access data in so-called server log files – as is technically unavoidable with any internet service. This includes your IP address, the date and time of access, the page accessed, the referrer URL, the volume of data transferred and the browser type used (user agent).

This data serves exclusively to enable the technical delivery of the website, operational security and stability, and the prevention of misuse. No analysis of your usage behaviour, no tracking and no combination into a user profile takes place.

5. Domain

The domain padelcord.de is registered through:

IONOS SE

Elgendorfer Str. 57

56410 Montabaur

Germany

This information is provided for informational purposes only with regard to the domain and DNS administration. The registrar is based in Germany.

6. Contact via the Enquiry Form (mailto Procedure)

7. Communication and Enquiries by Email

If you contact us by email, we process the content you transmit as well as your contact details in order to handle and respond to your request.

8. Cookies and Local Storage in the Browser

We do not use any cookies for tracking or marketing purposes and no cookies requiring consent. For this reason, no cookie consent banner is required on our website.

We use exclusively technically necessary local storage in your browser (web storage / sessionStorage, key „pc_access") for a temporary access function. This entry contains no personal data and is automatically deleted as soon as you close the browser tab.

This storage is strictly necessary pursuant to § 25 (2) No. 2 TDDDG in order to provide the function you have expressly requested and is therefore exempt from the requirement of consent.

9. Fonts

The fonts used on this website („Inter" and „Sora"), which are also offered as Google Fonts, are delivered exclusively locally from our own server via the hosting (self-hosting via next/font). There is no connection to servers operated by Google or other third parties, and no data – in particular not your IP address – is transmitted to Google or any other third party in this process.

10. Images and Graphics

Preview and cover images (for example in the blog) are generated by us on the server side and delivered via our hosting. No images are loaded from external third-party image services. Accordingly, there is no data flow to third parties in this respect.

11. Transfer to Third Countries

The processing carried out in connection with the hosting (Section 4) takes place in a data centre in Frankfurt am Main and therefore within the EU. A routine transfer of personal data to a third country outside the EU or EEA is therefore not envisaged.

However, as our hosting provider, Vercel Inc., is based in the USA, access from the USA cannot be entirely ruled out. Such access is safeguarded by Vercel Inc.'s certification under the EU-US Data Privacy Framework (DPF) on the basis of the European Commission's adequacy decision (Art. 45 GDPR) and, in addition, by EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR). The requirements of Art. 44 et seq. GDPR are thereby met.

In all other respects, no transfer to third countries takes place. In particular, the email operation by noris network AG described in Section 7 is carried out exclusively on servers located in Germany.

12. Categories of Recipients / Processors

We only pass on your data to the extent necessary to provide our services or where we are legally obliged or entitled to do so. The following service providers may come into contact with your data on our behalf:

No further disclosure of your data to third parties takes place.

• Vercel Inc., USA – hosting of the website, processing in the Frankfurt am Main data centre (processor pursuant to Art. 28 GDPR; third-country dimension, see Sections 4 and 11);
• noris network AG, Germany – operation of the email mailbox and email domain (processor pursuant to Art. 28 GDPR; no transfer to a third country);
• IONOS SE, Germany – registration and administration of the domain padelcord.de (see Section 5).

13. Storage Period

Unless a more specific storage period is stated for the individual processing operations in this Privacy Policy, we process personal data only for as long as is necessary for the respective purpose.

After the respective period has expired or the purpose no longer applies, the data is deleted, provided that no further statutory retention obligations exist and continued storage is not required for other legally permissible reasons.

• Server log files (Section 4): stored only for a short time, then deleted.
• Enquiries via the form and by email (Sections 6 and 7): stored until your request has been fully processed.
• Contract-related data: retained in accordance with the statutory retention periods (in particular § 257 HGB, § 147 AO) for up to 6 or 10 years.

14. Your Rights as a Data Subject

You have the following rights with regard to the personal data concerning you:

To exercise your rights, an informal message to the contact details listed in Section 1 is sufficient.

• Right of access (Art. 15 GDPR): You can request information about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data and the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided that the legal requirements are met.
• Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you can request the restriction of processing.
• Right to data portability (Art. 20 GDPR): You can request to receive the data you have provided to us in a structured, commonly used and machine-readable format or to have it transmitted to another controller.
• Right to object (Art. 21 GDPR): You can object to the processing of your data (see separately in Section 15).
• Right to withdraw consent (Art. 7 (3) GDPR): Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

15. Right to Object (Art. 21 GDPR)

Where we process personal data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing.

If you object, we will no longer process the personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You can submit your objection informally using the contact details listed in Section 1.

16. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 27

91522 Ansbach

Germany

You may also contact the supervisory authority of your usual place of residence or place of work.

17. No Automated Decision-Making / No Profiling

Automated decision-making in individual cases, including profiling within the meaning of Art. 22 GDPR, does not take place.

18. Obligation to Provide Data

The provision of your personal data is neither legally nor contractually required. However, when you submit an enquiry via the form or by email, we require certain mandatory information (in the form: name and email address) in order to process your request and respond to you. If you do not provide this mandatory information, we may not be able to process your enquiry, or may not be able to process it in full. Providing the fields marked as optional is voluntary and has no adverse consequences.

19. Encryption

For security reasons and to protect the transmission of personal data, this website is delivered using TLS/SSL encryption (HTTPS). You can usually recognise an encrypted connection by the padlock symbol in your browser's address bar and by the „https://" prefix at the beginning of the address.

20. Validity and Changes to this Privacy Policy

This Privacy Policy is currently valid. As our website develops further or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version can be accessed at any time on this website.

Status: June 2026