Legal
Privacy policy
This English version is a courtesy translation. Only the German version is legally binding.
Thank you for your interest in College Tennis Zick. Here you can find out which personal data we process when you visit this website, for what purposes and on what legal basis. In short: we do not use cookies, tracking or analytics tools, and we do not load any content from third-party providers.
1. Controller (Verantwortlicher)
College Tennis Zick
Owner: Charly Zick
Am Hackelanger 6b
81241 München
Phone: +49 155 61996480
Email: info@college-tennis.de
2. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access the pages, Vercel automatically processes technically necessary data transmitted by your browser: IP address, date and time of access, page accessed, referrer URL, and browser and operating system. This data is necessary to deliver the website and to ensure its secure operation, for example to fend off attacks. It is not combined with other data and is stored only for as long as is necessary for this purpose.
The legal basis is Art. 6(1)(f) of the General Data Protection Regulation, GDPR (DSGVO); our legitimate interest lies in providing the website securely and reliably. We have concluded a data processing agreement (Auftragsverarbeitungsvertrag, Art. 28 GDPR) with Vercel. Vercel is certified under the EU-U.S. Data Privacy Framework; the transfer to the USA is based on the European Commission’s adequacy decision (Art. 45 GDPR). Further information: vercel.com/legal/privacy-notice.
3. SSL/TLS encryption
This website uses SSL/TLS encryption. As a result, data you transmit to us, for example via the forms, cannot be read by third parties. You can recognize the encrypted connection by “https://” and the lock icon in the address bar.
4. Fonts and videos
All fonts and videos are hosted locally on our server. When you access the pages, no connection is established to servers of Google, YouTube or other third-party providers.
5. Cookies and storage in your browser
We do not use cookies. If you turn the sound on or off in the video slider, the website remembers this choice in your browser’s session storage (sessionStorage). The entry contains no personal data, is not transmitted to us and is deleted automatically when you close the tab. This storage is strictly necessary for the function you have requested (Section 25 (2) No. 2 TDDDG).
6. Inquiry and registration forms
For the Potential Check, requests for an intro call and event and webinar registrations, we use our own forms on this website. The data you enter (e.g. name, email address, phone number, age or year of birth, club, ranking, school details, preferred dates) is transmitted to us in encrypted form only when you submit the form. We use it exclusively to process your inquiry, to contact you about it and – in the case of registrations – to organize the event or webinar. For webinars, we send you the access link and a reminder by email.
The legal basis is Art. 6(1)(b) GDPR (taking pre-contractual steps at your request) and your consent pursuant to Art. 6(1)(a) GDPR, which you give in the form. You can withdraw your consent at any time with effect for the future, e.g. by email to info@college-tennis.de.
If you are under 16, please fill out the forms together with your parents or have them fill out the forms for you.
Storage: We store the form data in a database provided by Supabase, Inc. The database is located on servers in Frankfurt am Main (EU).
Sending of emails: We send emails relating to your inquiry or registration, such as confirmations of receipt, access links and reminders, via the Resend service of Plus Five Five, Inc., USA. Emails are sent via servers in Ireland (EU).
We have concluded a data processing agreement (Art. 28 GDPR) with each of the two providers; they process the data exclusively on our behalf and in accordance with our instructions. As both companies are based outside the EU, access from third countries cannot be ruled out. Resend is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); for Supabase, transfers are safeguarded by the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).
Your data will only be disclosed to third parties, such as coaches or colleges, with your express consent.
7. Contact by email, phone or WhatsApp
If you contact us by email or phone, we process your details (e.g. name, contact details, content of the message) in order to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or to steps prior to entering into a contract; otherwise, Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).
Our email mailboxes are operated by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. We have concluded a data processing agreement (Art. 28 GDPR) with Hostinger; the data is processed in the EU.
On the website, we also link to WhatsApp. Only when you click the link and message us does WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, process your data in accordance with its own privacy policy; this may also involve a transfer to the USA. Using WhatsApp is voluntary – you can always reach us by email or phone as well.
8. Links to social networks and partners
We refer to our profiles on Instagram and YouTube and to our partners’ websites by means of simple links only. No data is transmitted to these providers when you visit our website. Only when you click a link are you taken to their pages; the privacy policy of the respective provider applies there.
9. Storage period
We store personal data only for as long as is necessary for the respective purpose. If you withdraw your consent or the purpose no longer applies, we will delete your data unless statutory retention obligations (e.g. under commercial or tax law) prevent this.
10. Your rights
You have the following rights at any time:
- Access to the data we store about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
Right to object: If we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach.
For any questions about data protection or to exercise your rights, simply send an email to info@college-tennis.de.
Last updated: October 2026