Personal Data Protection

Data controller

SC PDL BASE SRL
VAT: RO50857480
Registration: J2024039758004
Address: Bucharest, Sector 6, Drumul Osiei, No. 18-28, Room 1
Email: contact@padelcampus.ro

Categories of data processed

Depending on how you interact with us (website, form, phone, bookings), we may process the following categories of personal data:

• Identification data: first name, last name, player alias (if applicable)
• Contact data: email address, phone number
• Booking data: court, time slot, booking history, booking status
• Website usage data: IP, technical browser/device data, website interactions
• Financial data: payment details handled by payment processors/Playtomic; we do not store full card data

Purposes and legal bases

We process personal data under Article 6 GDPR, as follows:

• Managing bookings and service delivery: performance of a contract (Art. 6(1)(b))
• Operational communications (confirmations, changes, support): contract performance / legitimate interests (Art. 6(1)(b)/(f))
• Invoicing, accounting and tax compliance: legal obligation (Art. 6(1)(c))
• IT security and abuse prevention: legitimate interests (Art. 6(1)(f))
• Newsletter/direct marketing: consent (Art. 6(1)(a)) where required by law

Data source and obligation to provide data

Data is mainly collected directly from you (forms, email, phone, booking platform interactions).

Some booking/payment data may come from contractual partners (e.g., Playtomic), acting as independent controllers or processors, as applicable.

For certain services, providing data is contractually or legally required. Refusal may make booking confirmation, service delivery or issuing fiscal documents impossible.

Recipients of data

Data may be disclosed, strictly on a need-to-know basis, to the following categories of recipients:

• IT providers: hosting, email, maintenance, traffic analytics
• Booking/payment platforms: booking and transaction processing
• Professional advisers: accountants, auditors, lawyers (where necessary)
• Public authorities: where there is a legal obligation or lawful request

International transfers

As a rule, data is processed within the European Economic Area (EEA).

If transfers outside the EEA occur, they are carried out only with appropriate safeguards under Chapter V GDPR (e.g., Standard Contractual Clauses).

Retention period

We retain personal data only for as long as necessary for the stated purposes and legal obligations.

• Booking and contractual data: for the duration of the relationship plus the period required to defend legal claims
• Accounting/tax data: according to statutory fiscal/accounting retention periods
• Marketing data: until consent withdrawal or objection to processing
• Technical logs: limited period, proportionate to security purposes

Your rights

Under GDPR, you have the following rights:

• Access: obtain confirmation and a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion under Art. 17 GDPR conditions
• Restriction: limit processing in legally defined cases
• Portability: receive data in a structured, commonly used format
• Objection: object to processing, including direct marketing
• Withdraw consent: at any time, for consent-based processing
• Complaint: to the competent data protection authority

Automated decision-making and profiling

We do not use automated decision-making producing legal or similarly significant effects within the meaning of Art. 22 GDPR.

Cookies and similar technologies

We use separate cookie categories: Necessary (mandatory), Preferences, Statistics, and Marketing.

Statistics cookies help us understand website interaction in aggregated form (e.g., visited pages, browser/device type, operating system, cookie identifiers, and approximate geolocation derived from IP address).

Preferences, Statistics, and Marketing categories are non-essential and are enabled only based on consent.

Preferences can be granted, withdrawn, or updated at any time from the "Cookie settings" link in the footer.

Necessary cookies cannot be disabled from the preferences panel, as they are required for proper and secure website operation.

Complete details about cookie categories, retention and controls are available in the Cookie Policy .

Data security

We implement appropriate technical and organisational measures (access control, encryption in transit, backups, monitoring) to protect confidentiality, integrity and availability of personal data.

Children's data

Our services are not intended to intentionally collect personal data from children without parental/legal representative involvement where required by law.

Policy updates

We may update this policy periodically to reflect operational, technical or legal changes. The current version is published on the website with the last updated date.

Contact

To exercise your GDPR rights or for any privacy-related question, contact us using the details below.

We usually respond within up to 30 days, with possible extension under Art. 12 GDPR when requests are complex.

Email: contact@padelcampus.ro
Phone: 0756 19 79 18