1. Data Controller

The entity responsible for processing your personal data is:

Padel House S.L.
CIF: B98141320
Address: Av. de Monforte de Lemos, 36, La Vaguada Shopping Center, 2nd Floor, 28029 Madrid, Spain
Email: sales@padel.org.es
Phone: +34 911 75 38 80

2. What Data We Collect

We collect and process the following categories of personal data when you interact with our website and services:

• Identity data: Full name, email address, telephone number, postal address.
• Order data: Products purchased, order history, payment method (we do not store card numbers), shipping details.
• Account data: Username, password (encrypted), preferences and wishlist items.
• Technical data: IP address, browser type and version, device information, pages visited, time and date of visits.
• Communication data: Records of your correspondence with us via email, phone or contact forms.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD):

• Contract performance: Processing necessary to fulfil your purchase orders (Art. 6.1.b GDPR).
• Legal obligations: Tax and accounting obligations under Spanish law (Art. 6.1.c GDPR).
• Legitimate interest: Fraud prevention, site security and service improvement (Art. 6.1.f GDPR).
• Consent: Marketing communications and non-essential cookies (Art. 6.1.a GDPR).

4. How We Use Your Data

• Process and deliver your orders.
• Send order confirmations, shipping updates and invoices.
• Respond to enquiries and provide customer support.
• Manage returns, exchanges and warranty claims.
• Detect and prevent fraud.
• Improve our website, products and services through analytics.
• Send marketing communications (only with your explicit consent).

5. Data Sharing

We may share your personal data with the following third parties, solely for the purposes described above:

• Delivery carriers: To ship your orders (e.g. SEUR, Correos Express, GLS).
• Payment processors: PCI DSS-compliant gateways to process card payments securely.
• Hosting providers: Our website hosting infrastructure within the EU/EEA.
• Tax authorities: As required by Spanish fiscal law.

We do not sell, rent or trade your personal data to any third party for marketing purposes.

6. International Transfers

Your data is stored and processed within the European Economic Area (EEA). Should any transfer outside the EEA be necessary, we will ensure adequate safeguards are in place (Standard Contractual Clauses or adequacy decisions by the European Commission).

7. Data Retention

We retain your personal data for the following periods:

• Order and transaction data: 5 years from the date of purchase (Spanish fiscal obligations).
• Account data: For as long as your account is active, plus 1 year after deletion.
• Marketing consent data: Until you withdraw your consent.
• Technical/analytics data: 26 months maximum.

8. Your Rights

Under the GDPR and Spanish data protection law, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure («Right to be forgotten»): Request deletion of your data.
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest or for direct marketing.
• Withdraw consent: At any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at sales@padel.org.es with the subject line «Data Protection Request». We will respond within 30 days.

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include SSL/TLS encryption for all data in transit, PCI DSS-compliant payment processing, access controls and regular security reviews.

10. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page with the effective date. If significant changes are made, we will notify you by email or through a notice on our website.

Last updated: 1 January 2026