Legal Documentation
Last updated: July 9, 2026
This privacy policy explains how personal data is processed when using the SaaS platform myTennis.school. Processing is carried out in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR), in particular when users from Germany or Austria access the platform.
The controller responsible for data processing within the meaning of data protection law is the operator of myTennis.school:
Hidden for privacy reasons. Click to reveal.
When using myTennis.school, a distinction must be made between two data processing situations. For data arising from the operation of the mytennis.school website and the contractual relationship with the platform's customers, such as contact details of tennis schools, billing data, or usage data of account holders, the operator of myTennis.school is the data controller under data protection law.
For personal data that the platform's customers, i.e. the respective tennis school, academy, or training facility, enter into the platform about students and coaches, such as names, contact details, skill level, training times, or attendance data, myTennis.school acts as a data processor on behalf of the respective tennis school. In this case, the respective tennis school, as the contractual partner, remains responsible for this data. The details of this processing are governed by a separate data processing agreement, which is provided to business customers upon conclusion of the contract. Students and coaches who have questions about the processing of their data should primarily contact the respective tennis school that uses the platform.
Personal data is processed exclusively to operate and improve myTennis.school, in particular for the management of tennis schools and clubs, the organization of training sessions, seasons, and courses, the management of students, coaches, and groups, scheduling and attendance tracking, communication with users via the platform, and, if enabled, payment processing including invoicing and SEPA direct debits.
Depending on usage, the following personal data may be processed: first and last name, contact details such as email address and phone number, role information (manager, coach, student), group assignments and training data, scheduling and attendance data, administrative and contractual information, login and authentication data, as well as technical data such as IP address, timestamps, and log files. If payment via SEPA direct debit is used, bank account data (e.g. IBAN and account holder) is also processed on the platform. No external payment service providers are currently used.
Where the GDPR applies, processing is based on Art. 6(1)(b) GDPR for the performance of the contract with the tennis school or the user account, Art. 6(1)(f) GDPR based on the legitimate interest in a secure and functional operation of the platform, and, where applicable, Art. 6(1)(a) GDPR in the case of explicit consent, for example for optional cookies. For Swiss users, the corresponding provisions of the revFADP apply in addition, in particular regarding proportionality and purpose limitation of data processing.
To provide the platform, myTennis.school uses the following categories of service providers, which process personal data exclusively on behalf of myTennis.school and in accordance with applicable data protection regulations:
Hosting and infrastructure: Vercel Inc. (USA) for the delivery of the web application and Supabase (database and authentication, server location Frankfurt am Main, EU)
Email delivery and notifications: Resend
PDF generation: creation of invoice PDFs via a self-hosted Gotenberg instance, hosted on Railway Corp. (USA)
Payment processing: No external payment service providers are currently used. Payments are made by invoice or SEPA direct debit directly via the platform.
Technical operation, error analysis, and security: Sentry (error analysis) and Vercel (logs and technical operation)
Data processing agreements are in place with all providers that process personal data on behalf of myTennis.school, or, where required, EU Commission Standard Contractual Clauses for transfers to third countries.
Personal data is primarily stored on servers in the European Union (database server location: Frankfurt am Main, Germany). Where individual service providers mentioned above transfer data to countries outside Switzerland or the European Economic Area, in particular to the USA, this is done only on the basis of appropriate safeguards, such as the EU Standard Contractual Clauses or an adequacy decision, and will be explained in more detail upon request.
myTennis.school uses technically necessary cookies to ensure basic functions such as login sessions and security mechanisms. These cookies do not require consent, as they are strictly necessary for the operation of the platform.
If additional cookies or comparable technologies are used for statistics, analytics, or marketing, separate information will be provided via a consent banner before their use and, where legally required, in particular for users from Germany and Austria under the TDDDG or the Austrian Telecommunications Act, explicit prior consent will be obtained. These settings can be adjusted or withdrawn at any time via the “Cookie Settings” button in the website footer.
Personal data is stored only for as long as necessary for the purposes described or as required by statutory retention obligations. Account data is deleted after termination of the user account and expiry of any contractual grace periods. Invoicing and accounting records are retained for ten years for commercial law reasons. Backups are automatically removed after a limited period of 30 days.
Users have the right to access their stored data, rectification of inaccurate data, erasure, insofar as no statutory retention obligations apply, restriction of processing, objection to processing based on legitimate interest, and data portability, where applicable. Requests can be sent at any time to info@mytennis.school. Students and coaches whose data is managed by a tennis school via the platform should primarily direct access or deletion requests to the respective tennis school as the controller.
Data subjects have the right to lodge a complaint with the competent data protection supervisory authority. For Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); for Germany, the data protection supervisory authority of the complainant's federal state; and for Austria, the Austrian Data Protection Authority.
Appropriate technical and organizational measures are in place to protect personal data against unauthorized access, loss, or misuse, including encryption of data transmission, regular backups, and restricted access rights to production systems.
This privacy policy may be amended at any time to reflect changes in the legal situation or changes to the platform. The current version is always available on the website.