Legal

Privacy Policy

Last updated: September 6, 2026

1. Data controller

The data controller is the private individual behind the tenniscubelles.com project.

For any matter relating to the processing of personal data, you may contact [email protected].

Given the nature and volume of the processing carried out, tenniscubelles.com is not required to appoint a data protection officer.

2. Personal data processed

Profile data: name, email address, language preference, and an optional profile picture.

Authentication data: encrypted password and, where social login is used, the identifier associated with Google or Facebook.

Activity data: matches in which you participate, invitations, chat messages, and status changes linked to those matches.

No special categories of data within the meaning of Article 9 GDPR are processed.

3. Purposes and legal bases

To manage your account and provide the requested service, on the basis of performance of a contract or pre-contractual measures (Article 6.1(b) GDPR).

To send communications necessary for the operation of the service, such as notices that a player has joined, left, or cancelled participation in a match, on the same contractual basis (Article 6.1(b) GDPR).

To send configurable notifications, such as invitations, reminders, or new-message alerts, where the user has given consent, which may be withdrawn at any time from the settings area (Article 6.1(a) GDPR).

To protect account security through login attempt limiting and similar measures, on the basis of the legitimate interest in preserving the integrity of the service (Article 6.1(f) GDPR).

No automated decisions are made, no profiling is carried out, no advertising is served, and no personal data is sold.

4. Retention periods

Account data will be retained for as long as there is an active relationship with the user.

Matches marked as played or cancelled, including their associated chat messages, will be automatically deleted after 24 months.

Expired or revoked invitations, which may contain email addresses, will be automatically deleted after 90 days.

When an account is closed, personal data will be deleted immediately and past matches may only be retained in anonymised or otherwise non-identifiable form.

5. Recipients and processors

A user's name and, when configured, profile picture may be visible in public match listings and public links used to share matches.

A single administrator account exists for moderation and support purposes.

Processors include the providers necessary for application hosting, database hosting, and email delivery. Where social login is used, Google or Facebook process authentication data in accordance with their own policies.

Personal data is not shared with third parties except where required by law or where strictly necessary for the technical provision of the service as described above.

6. Third-party data provided by users

Users may invite third parties by email or add guest players identified by name.

Email addresses provided for invitations are used solely for that purpose, and invitations expire when the relevant match begins.

Affected individuals may request deletion of their data by writing to [email protected].

7. Cookies and connection data

tenniscubelles.com uses only technical cookies and connection data, such as session cookies and those required for CSRF protection. It does not use analytics or advertising cookies.

As only technical cookies are used, prior consent is not required under Article 22.2 of the LSSI.

8. Data subject rights

You may exercise your rights of access, rectification, erasure, restriction of processing, portability, and objection by writing to [email protected].

Rights of access, rectification, and erasure may also be exercised directly from the account settings or profile area, where the functionality is available.

Requests will be answered within a maximum period of one month, extendable in the cases provided for by Article 12.3 GDPR.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) without first contacting the controller.

9. Minors

The application is intended only for individuals aged 18 or over and does not knowingly collect data from minors.

If an account belonging to a minor is detected, it will be closed and the related data will be deleted.

10. Security measures

Appropriate technical measures are applied to protect data, including encrypted communications, hashed passwords, and login attempt limiting.

However, no security measure is absolute and, in the event of a personal data breach, tenniscubelles.com will act in accordance with Articles 33 and 34 GDPR.

11. Changes to the privacy policy

This policy may be modified at any time. The current version will be the one published in the application together with its last updated date.

Where the changes are substantial, users will be informed by email.