CBS Padel

Privacy Policy

This policy explains how CBS Padel processes personal data about members and people who sign up in the CBS Padel member portal.

Version 2026-10-privacy-v4 · Last updated October 30, 2026

1. Who is responsible

CBS Padel (CVR 43009036), Solbjerg Plads 3, 2000 Frederiksberg, Denmark, is the data controller. Contact us at hello@cbspadel.dk.

2. Your choices

You can change the optional choices at any time under Settings.

  • Membership (required): we store the data needed for your membership and may send you transactional emails.
  • Newsletter and marketing (optional): we send you our newsletter and offers from CBS Padel, our sponsors and our partners.
  • Padel Yard and Match Padel (optional, one choice for each): we send your data to them so they can give you the CBS discount.

3. What we process and why

  • Membership: your name, email, student type, study programme and semester, language, membership dates and which version of the terms you accepted. Legal basis: the membership you asked for (GDPR art. 6(1)(b)). Without this data you cannot be a member.
  • Playing with other members: phone number, level, preferred side, and optionally a profile photo and social links. Your phone number is only shown to another member after you have both accepted a connection. Legal basis: art. 6(1)(b).
  • Posts and likes in the news feed, chat, connections, event sign-ups and results. Other members can see your posts, and who liked a post. Tournament results can be shown to other members. Legal basis: art. 6(1)(b).
  • Transactional emails: login codes, messages about your membership and account, and notifications you have turned on. Legal basis: art. 6(1)(b).
  • Newsletter and marketing: only if you have said yes. Legal basis: your consent (art. 6(1)(a)) and section 10 of the Danish Marketing Practices Act. Sponsors and partners do not receive your data for this; we send the emails.
  • Padel Yard and Match Padel: only if you have said yes. Legal basis: your consent (art. 6(1)(a)). See section 5.
  • Event proposals: what you write, your name, email and phone number, so admins can call or email you to plan the event. Legal basis: the request you made (art. 6(1)(b)). The phone number is no longer shown on the proposal 30 days after it is closed.
  • Security and moderation: technical logs, reports and moderation decisions. Legal basis: our legitimate interest in a safe platform (art. 6(1)(f)).
  • Reports to sponsors: only aggregated numbers, and groups smaller than 10 members are hidden. Legal basis: art. 6(1)(f).
  • Unfinished signups: if you start signing up but don't finish your profile, we keep your account so you can continue later, and send you at most two reminders (1 and 4 days after you signed up). Legal basis: our legitimate interest in helping you finish the signup you started (art. 6(1)(f)).
  • Membership history: when an account is deleted, we keep a short record with the email, role, the dates it was created, completed, closed or paused, and why it was deleted. We also count signups per day, without names or emails. Legal basis: our legitimate interest in knowing the club's membership history (art. 6(1)(f)).

4. Who receives your data

  • Other members see what you show on your profile. Your phone number is only shared after a mutual accept.
  • Our processors, who may only use your data on our instructions: Supabase (database, login and file storage, EU data centre in Frankfurt), DigitalOcean (hosting, EU data centre in Frankfurt), Resend (email delivery) and Simply.com (email for login codes, Denmark). Supabase, DigitalOcean and Resend are US companies. Where data may be transferred to the US, the transfer is based on the EU Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework.
  • Padel Yard and Match Padel, only if you have said yes.
  • We never sell your data.

5. Padel Yard and Match Padel

If you say yes, we send each partner a member reference, your name, your email, your language and the date your membership ends. The partner adds the CBS discount to your existing account, or creates an account and sends you its own welcome email.

Padel Yard and Match Padel are each independent data controllers for your account with them, and their own privacy policies apply. You find them on their websites.

You can withdraw for each partner under Settings. We then ask the partner to remove the discount. If you have never used the account, we also ask the partner to delete the data we sent. An account you have used is your customer relationship with the partner, and you can ask the partner directly to delete it. When your membership ends, we ask the partner to remove the discount.

We are setting up this connection with the partners. Until it is live, nothing is sent, and Settings shows the status.

6. How long we keep your data

  • Your profile, phone number and photos: while you are a member. A closed account is deleted 14 days after you close it.
  • Signups that are never completed: paused 30 days after you signed up. You can continue any time by logging in. A paused signup is deleted 5 years after it was paused.
  • The short record of a deleted account (section 3): 5 years after the account was deleted. The number of signups per day has no personal data and is kept.
  • Chat messages: deleted 12 months after the conversation was last active.
  • Closed play posts: reduced to what is necessary after 12 months.
  • Technical logs: 30 days. Email delivery logs: 90 days.
  • Moderation and audit records: 24 months.
  • Tournament results: kept, and shown as "Former member" after your account is deleted.
  • If you unsubscribe, we keep a record of it so we never email you marketing again by mistake.
  • Backups expire after the provider's backup period.

7. Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability, and to object to processing based on our legitimate interest. You can withdraw a consent at any time; this does not affect processing before the withdrawal.

You can do most of this yourself under Settings. Otherwise write to hello@cbspadel.dk. You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

8. Automated decisions

We do not make decisions about you based solely on automated processing.

9. Changes

We tell you in the portal before material changes take effect. If a translation differs from the English version, the English version applies.