Home / Privacy

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Above Padel GbR
Zugspitzstraße 6
86807 Buchloe
Germany

Represented by the partners: Emanuel Moses Schwer, Tobias Noel Haber
Phone: +49 151 41290156
Email: info@abovepadel.de

2. General Information on Data Processing

We process personal data only to the extent necessary to provide our website, to process orders, or on the basis of your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest).

We store data only for as long as necessary for the respective purpose or as required by statutory retention periods. We retain commercial and tax records for up to ten years (Section 257 German Commercial Code, Section 147 German Fiscal Code).

3. Hosting and Shop System (Shopify)

Our online shop is operated on Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes on our behalf all data you enter in the shop or that arises during your visit, such as order data, account data and technical access data.

Data may be transferred to Shopify Inc. in Canada and to service providers in the USA. For Canada, an adequacy decision of the European Commission applies. Transfers to the USA are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses. The legal basis is Art. 6(1)(b) and (f) GDPR. We have concluded a data processing agreement with Shopify.

4. Server Log Files

When you visit our website, information transmitted by your browser is automatically collected: IP address, date and time of access, page visited, referrer URL, browser type and operating system. This data is required for the secure and stable operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.

5. Cookies and Consent Management

Our website uses cookies and similar technologies. We use technically necessary cookies, for example for the shopping cart and checkout, on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(f) GDPR. All other cookies and tracking technologies, i.e. for analytics and marketing, are used only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

We obtain your consent via Shopify's cookie banner. You can withdraw or change your consent at any time with effect for the future by reopening the cookie settings via the link in the footer.

6. Contacting Us

If you contact us by email, phone or contact form, we process your details in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if the request relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your request has been dealt with and no retention obligations apply.

7. Customer Account

You can create a customer account in our shop. We store your contact details, delivery addresses and order history so that you can complete future orders more quickly. The legal basis is Art. 6(1)(b) GDPR. You can have your account deleted at any time; an email to us is sufficient. Statutory retention obligations remain unaffected.

8. Membership

If you join our membership program, we process the data you provide when signing up in order to provide the membership and its associated benefits. The legal basis is Art. 6(1)(b) GDPR. After the membership ends, we delete this data unless retention obligations apply.

9. Order Processing

To process your order, we process your name, billing and delivery address, email address, phone number where applicable, the items ordered and payment information. The legal basis is Art. 6(1)(b) GDPR. Invoice data is retained on the basis of statutory obligations (Art. 6(1)(c) GDPR).

10. Payment Service Providers

Payments are processed via Shopify Payments. Within the EU, Shopify Payments is operated by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Depending on the payment method you choose, we also pass the data required for payment to the following providers:

  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
  • Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For purchases on invoice or in instalments, Klarna may carry out a credit check. Further information can be found in Klarna's privacy policy.
  • Apple Pay: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
  • Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The legal basis is Art. 6(1)(b) GDPR. Some of these providers process data under their own responsibility, in which case their privacy policies also apply.

11. Shipping

To deliver your order, we pass your name and delivery address to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany (Art. 6(1)(b) GDPR). We will notify you of the shipping status of your order ourselves by email.

12. Newsletter (Klaviyo)

If you sign up for our newsletter or early access, we use your email address to send you information about products, drops and offers. Sign-up uses a double opt-in procedure: you will receive an email asking you to confirm your subscription. The legal basis is your consent (Art. 6(1)(a) GDPR).

We use Klaviyo to send our newsletter. The provider is Klaviyo, Inc., 125 Summer Street, 6th Floor, Boston, MA 02110, USA. Klaviyo records whether newsletters are opened and which links are clicked so that we can improve our content. With your consent via the cookie banner, Klaviyo may also record your activity in our shop, such as products viewed, in order to send you relevant emails. Klaviyo is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Klaviyo.

You can unsubscribe at any time via the link in every email or by contacting us. After you unsubscribe, we remove your email address from the mailing list.

13. Analytics and Marketing Tools

We use the following tools only if you have given your consent via the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). With all providers, data may be transferred to the USA. The providers are certified under the EU-U.S. Data Privacy Framework.

Meta Pixel and Conversions API: The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We use the Meta Pixel and the Conversions API to measure the effectiveness of our ads on Facebook and Instagram and to show relevant ads to visitors of our website. Events such as page views, cart actions and purchases are transmitted to Meta, in the case of the Conversions API also directly from our server. We are jointly responsible with Meta for the collection and transmission of this data (Art. 26 GDPR). Any further processing is carried out under Meta's sole responsibility.

TikTok Pixel: The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. We use the TikTok Pixel to measure the effectiveness of our ads on TikTok and to show relevant ads to visitors of our website. Data may also be transferred to TikTok entities outside the EU.

Google Analytics and Google Ads: The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Analytics to analyse how visitors use our website; IP addresses are truncated in the process. We use Google Ads conversion tracking and remarketing to measure the success of our Google ads and to show relevant ads to visitors.

14. Shopify Apps

To extend the functionality of our shop, we may use applications from the Shopify App Store. Where such an app processes personal data, we will inform you in this privacy policy about the provider, the purpose and the legal basis of the processing.

15. Accounting

We transfer order and invoice data to our accounting software Lexware Office in order to fulfil our tax and commercial law obligations. The provider is Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany. The legal basis is Art. 6(1)(c) GDPR. We have concluded a data processing agreement with the provider.

16. Social Media Profiles

Our website links to our profiles on Instagram and TikTok. These are simple links; no data is transmitted to these platforms when you visit our website. Only when you click a link do the privacy policies of the respective platform apply.

17. SSL/TLS Encryption

This website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser's address bar.

18. Your Rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, simply email us at info@abovepadel.de.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

19. Changes

We will update this privacy policy if our website, the tools we use or the legal situation change. The version published here applies.

Last updated: September 2026