Privacy policy
Last updated: 10 October 2026
1. Who is responsible for your data?
The data controller is HMG Management & Projects B.V., trading as Padelcentrale, De Vierde Hoeve 13, 2676 CP Maasdijk, The Netherlands. Chamber of Commerce 92939805, VAT NL866223952B01.
Privacy questions: klantenservice@padelcentrale.nl
2. What data do we process?
Depending on how you use our website, we process, among other things:
- your name, billing and delivery address, email address and (if you provide it) phone number;
- account details, if you create an account;
- order, payment and return information and the products you buy;
- communication with our customer service;
- technical data such as IP address and browser details, for security and fraud prevention.
We do not receive your full payment card details ourselves; these are processed by our payment provider.
3. Why do we use your data?
| Purpose | Legal basis |
|---|---|
| Processing, paying for, shipping, returning and administering orders | Performance of a contract |
| Handling questions and complaints | Performance of a contract and legitimate interest (good customer service) |
| Verifying payments and preventing fraud | Performance of a contract, legal obligation and legitimate interest (security) |
| Accounting and tax | Legal obligation |
| Security and proper functioning of the webshop | Legitimate interest |
| Measuring how the webshop is used (Google Analytics), if you accept statistics cookies | Consent |
| Measuring ads and making them more relevant (Meta), if you accept marketing cookies | Consent |
| Emailing you once when a sold-out product is back in stock, if you sign up for it | Consent |
We do not use your data for marketing without your consent. Statistics and marketing cookies are only set if you choose them in the cookie notice; see our cookie policy.
4. Who do we share data with?
We only share data where necessary for your order, our business or a legal obligation. We work with:
| Party | Purpose | Location |
|---|---|---|
| Stripe (Stripe Payments Europe Ltd.) | Payments and fraud prevention | Ireland (EU), with transfers to the US |
| Klarna | Pay later, only if you choose that payment method | Sweden (EU) |
| Sendcloud | Shipping labels and tracking | Netherlands |
| Carriers (PostNL, DPD or DHL) | Delivering your parcel | Netherlands |
| Resend | Sending emails about your order | United States |
| Hetzner Online | Hosting the webshop | Germany |
| Google (Google Ireland Ltd.) | Website statistics (Google Analytics), only with your consent | Ireland (EU), with transfers to the US |
| Meta (Meta Platforms Ireland Ltd.) | Ad measurement (Meta Pixel), only with your consent | Ireland (EU), with transfers to the US |
Stripe and Klarna act as independent controllers for part of the processing, for example fraud prevention and compliance with financial regulations. More information is available in their own privacy policies.
Address auto-complete. To fill in your address we only send your postcode and house number to PDOK, the address service of the Dutch Land Registry (Kadaster, Dutch government). We do not send your name or any other details.
We do not sell your personal data.
5. Transfers outside the EEA
Some providers (Stripe, Resend, Google, Meta) may process data in the United States. We rely on a valid legal basis for this, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. How long do we keep data?
We keep data no longer than necessary. Data that forms part of our financial records, such as orders and invoices, is kept for 7 years as required by law; records under the EU One Stop Shop (OSS) scheme are kept for 10 years. Other data is deleted or anonymised when no longer needed, taking into account complaints, returns, warranty and legal limitation periods. A back-in-stock sign-up must first be confirmed through the link in our email; an unconfirmed sign-up is deleted after 7 days. A confirmed sign-up is deleted 30 days after we've sent the notification, and after 12 months at the latest. You can ask us to delete your account at klantenservice@padelcentrale.nl.
7. Your rights
Under the GDPR you have the right to access, rectify and erase your data, to restrict processing, to object, to data portability and to withdraw consent you gave earlier. Send your request to klantenservice@padelcentrale.nl. We may ask you to confirm your identity.
You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses an encrypted connection (HTTPS).
9. Changes
We update this policy when our webshop, providers or legal obligations change. The latest version is always on this page. See also our cookie policy.