Privacy Policy | Tennis Schweiz

Last updated: 11 November 2026

1. What this is about

This Privacy Policy explains which personal data Tennis Schweiz processes when you visit tennisschweiz.ch and the online shop, order from us, use the web app app.tennisschweiz.ch, take part in our events, listen to our podcast or contact us. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, on the EU General Data Protection Regulation (GDPR).

2. Controller

Tennis Schweiz, owner Noël Müller, Schlossgasse 6, 5723 Teufenthal AG, Switzerland, email info@tennisschweiz.ch. You can reach us at this address for all questions about data protection.

3. What data we process and why

3.1 Visiting the website

When you access our website, technical data is processed, such as IP address, date and time, pages accessed, browser, device and the previously visited page. We need this data for secure operation, to fix errors and to protect against misuse (legitimate interest, Art. 6(1)(f) GDPR).

3.2 Orders

For orders, we process your contact and order data, for example name, address, email address, telephone number if applicable, products ordered, price, payment method and order history. We use this data to perform the contract, to inform you and to comply with statutory retention obligations (Art. 6(1)(b) and (c) GDPR). We need your name, email address and, for goods, the delivery address for the contract. Without this information, we cannot carry out the order. Any further information is voluntary. Card data is processed by the payment providers. We only receive information such as the payment method and payment confirmation.

3.3 Web app app.tennisschweiz.ch

For our digital books and guides, the Coach planner and My training, we set up a personal account after purchase. For the free versions of the Coach planner and of My training, you can open an account yourself. You sign in without a password via a link or a six-digit code that we send you by email. After a purchase, Shopify automatically reports the order to the web app. From it, we only take your email address, the order number, the items purchased with their quantity and the language of the order, in order to create or add to your account and unlock the purchased content. We store:

email address and order number, to verify your access
books and guides purchased, start date and progress, for example unlocked and completed days, completed exercises and ticked-off items
your ticks, your answers in the knowledge check and your settings, for example language and reminder time
your notes and, in the guides, your measurements, focus points and entries in plans, if you have consented to this
for the Coach planner: the duration of your access and your training plans with title, selection and notes
for My training: the duration of your access, your sessions with title, selection and notes and, if you use these functions, your training log (date, duration and type of training or activity, for example gym or running, the distance where applicable, effort and satisfaction on a scale, measurements, results and notes), planned training sessions, including as a weekly series, and drafts (date, time, location, title and notes), your focus before training and your review afterwards (implementation on a scale and what you write about it), your self-assessments, your goals, your reminder settings and your training programme (training days with time and duration, focus areas, playing level, duration and start) with the training sessions planned from it
for My training, only with your explicit consent: your information about pain after training (whether you had pain, in which parts of the body, how severe and your note on it)
for My training, if you train together with others: the email address of people you invite and a check value of this address, the name, the playing level and the classification that you provide for joint training sessions, and joint training sessions (date, time, location, title and exercises) with the notes of both sides and the scores
for My training, if you create a challenge, are challenged or take part: name, format, period and stake of the challenge, who is taking part or has taken part, who has been challenged or has declined, the names of guests without an account, the matches (date, format, people involved, result and who entered it) and which periods have been settled
for access limited in time: when we sent you the reminder before expiry
for a free account: the time of registration and of confirmation and the version of the GTC and of the Privacy Policy that you confirmed
technical information about sign-ins, such as time and browser, to prevent misuse and fix errors

We use this data exclusively to provide you with the purchased content, the Coach planner and My training, to store your entries, to enable the PDF export, to send you reminders and to help you with questions (Art. 6(1)(b) GDPR). We do not sell your data, do not pass it on for advertising purposes and do not use it for advertising.

Your notes. Notes may contain personal thoughts, including about how you feel. You decide for yourself what you write. Your notes are only visible to you. We do not look at them or evaluate them, not even in anonymised form or by automated means. We only store notes with your explicit, voluntary consent (Art. 9(2)(a) GDPR). We obtain this consent when you first open a book, separately from your agreement to start the book. Without consent, you can read the book and tick off exercises, but not write notes. In the guides, the same applies to measurements, focus points and entries in plans. You can withdraw your consent at any time in your account in the web app. We will then delete your notes in this book, and in the guides also the measurements, focus points and entries in plans. Your access remains.

Coach planner. Your training plans are used only to provide the service (Art. 6(1)(b) GDPR). Please do not record any names or health information of players in the notes.

My training. Your sessions, your training programme, your planned training sessions and drafts, your focus and review, your training log, your self-assessments and goals are used only to provide the service, for example for the overview of your week, your month and your progress and for the report on a goal (Art. 6(1)(b) GDPR). This information is only visible to you, except for the date, time, location and title of a training session that you plan with a training partner (see “Training together”). For administration, we only count how many entries there are in total. Please do not record any health information in the notes or in the review. The voluntary “Body and pain” function exists for this purpose. For a planned training session and for your training programme, you can download a calendar file. It is only created when you click. Whatever you then add to your calendar is processed by your calendar provider.

Body and pain. In My training, you can voluntarily record after a training session whether you had pain, in which parts of the body and how severe, with a note. This is health data and therefore sensitive personal data. We only store it with your explicit, voluntary consent, which you give in My training by ticking a separate box (Art. 6(7)(a) FADP, Art. 9(2)(a) GDPR). Without this consent, you can use My training without restriction. The information is used only to show it to you in the training log and in the week and month. It is only visible to you. We do not look at it, do not evaluate it, not even in anonymised form or by automated means, do not pass it on and do not use it in emails. My training does not give medical advice. You can withdraw your consent at any time in My training or in your account. We will then delete all information about pain immediately. Your other entries remain.

Training together. In My training, you can invite other people by email to train together with you. To do this, you provide a name. We send the invited person an email with this name. We do not show your email address to the other person. Only invite people you know and who agree to this. We use the invited person’s address only for this invitation. We delete it as soon as the invitation has been accepted, declined or withdrawn, after 30 days at the latest. To prevent misuse, for example many invitations to the same address, we store a check value of the address, for no more than 30 days after the invitation or after it has been declined. This is a code calculated with a secret key, from which the address cannot be read. It also covers different ways of writing the same address, for example with an addition after the plus sign. For the limits, we also store for 24 hours when invitations, joint training sessions and emails about them and about challenges were triggered. Every invitation contains a link that the invited person can use to stop receiving invitations. We then store only the check value of their address until the person lifts the block again in My training. If the person accepts the invitation, we inform the inviting person by email. After that, you both see the other person’s name, playing level and classification, your joint record, your joint training sessions with date, time, location, title and exercises, the notes of both sides and the scores. Both of you can change a joint training session, but only the person who created it can delete it. At your request, we inform the other person by email about a new joint training session. If you plan a training session with a training partner, we create a joint training session for it with date, time, location and title. If you change these details in the plan, we adjust the joint training session. If you delete the plan or select nobody or a different person in it, the existing joint training session remains. You can delete it separately. Your focus and your notes on the planned training session, your training log, your review, your self-assessments, your goals and your information about pain remain private. The legal basis is the provision of the service (Art. 6(1)(b) GDPR) and, for the invitation to a person without an account, the check value and the block, our legitimate interest in delivering the invitation you requested and in preventing misuse (Art. 6(1)(f) GDPR). You can end a partnership at any time. We then delete joint training sessions that are planned from the following day onwards. Past ones remain readable for both of you until the person who created a training session deletes it or one of the two accounts is deleted. After the partnership has ended, you can remove training sessions created by the other person from your list, but they remain for the other person. So that the other person does not invite you again straight after the partnership has ended, we store a check value of your address for 30 days.

Challenge. In My training, you can create a challenge with your training partners. In it, you enter the results of your tiebreaks and short matches and see a ranking per week or month. Only the person who created the challenge can challenge others, and only people with whom they are connected via an accepted invitation. Challenged people receive a short email, unless they have switched off emails about challenges. They only take part once they accept. Until then, they only see the name of the person challenging them and the name, format and stake of the challenge. Until then, only the person who created the challenge sees the names of challenged people. The person who created the challenge adds guests without an account with a name only, without an email address, and only with their agreement. If that person removes a guest who has not yet played, we delete the name immediately. Everyone taking part with an account can enter results, including for matches in which they did not play themselves. A match can be deleted by whoever entered it or played in it and by the person who created the challenge, as long as the period has not been settled. A challenge may also include people with whom you yourself are not connected. Everyone taking part sees the names of the others, all matches of the challenge with the result and who entered it, the settlement and the ranking with statistics such as streak, form and head-to-head comparisons. They do not see any other information from your account. My training merely calculates a stake. Payments do not go through us, and we do not store any payment details. The legal basis is the provision of the service (Art. 6(1)(b) GDPR) and, for the names of guests and the matches of people who are no longer taking part, our legitimate interest and that of the players in keeping a complete record of the matches played together (Art. 6(1)(f) GDPR). You can leave a challenge created by someone else at any time. The person who created it can remove you. If your partnership with that person ends, you also drop out. In these cases, the matches you played remain with your name in the ranking of the others. If you decline a challenge request or leave a challenge, we store this so that you are not challenged again for this challenge. The person who created the challenge learns of this if they want to challenge you again. The person who created a challenge can delete it with all its matches at any time. If you delete your account, we delete the challenges you created, with all their matches. In the challenges of others, your matches remain without your name.

Free account. For the free versions of the Coach planner and of My training, you open an account yourself with your email address and confirm the registration via a link that we send you by email (Art. 6(1)(b) GDPR). If you do not confirm the registration within 7 days, we delete your details. With a free account, you do not receive a newsletter. That requires a separate subscription (section 3.6).

Protection against misuse. To protect the web app against automated attacks, we count sign-in requests, codes entered, registrations and invalid sign-in links per internet connection and limit them. We also count incorrect codes per account, no more than five per code and ten per day. For this, we do not store your IP address, but only a check value calculated from it, from which the address cannot be read. We delete it after two hours at the latest. If an internet connection or an account reaches one of these limits, we receive a notification by email. It does not contain an IP address. For incorrect codes, it states the account number and the shortened email address. We also see how often an account has signed in over the last 30 days. This is how we recognise when personal access is being passed on. An account can be signed in on no more than three devices at the same time. If you sign in on a further device, we end the oldest sign-in. In the books and guides, the web app displays your account number and your shortened email address as a watermark, including on printouts. If a screenshot or a printout turns up elsewhere, we can identify the account from it. Whether we take any action is always decided by a human (legitimate interest, Art. 6(1)(f) GDPR).

Reminders. If you switch on the daily reminder in the web app, we will send you a short email at the time you have chosen. In My training, you can also switch on a reminder for the review after a planned training session and a weekly review. The weekly review states the number, duration and type of your entries, open and planned training sessions and the next self-assessment, but no information about pain. You can likewise switch on an email before every planned training session with the title, day, time and duration of the training session, the exercises and your focus. For a planned training session, we record when we reminded you of it, so that no reminder arrives twice. Before every joint training session, we send both people a reminder with the other person’s name, date, time, location and title. When a week or a month of a challenge is over and matches were played in it, everyone taking part with an account receives a summary with ranking and settlement. These two emails are switched on until you switch them off. If you switch off the emails about challenges, you will no longer receive an email when you are challenged either. For the daily limit on reminders before joint training sessions, we store for 24 hours when we sent them. For a joint training session, we record for which date we reminded you, so that no reminder arrives twice. You can switch off any reminder at any time in the settings or via the link in every email (Art. 6(1)(b) GDPR).

Reminder before expiry. About 14 days before access to the Coach planner or to My training expires, we send you one email pointing out that you can renew. For this, we store when we sent the reminder for which expiry date (Art. 6(1)(b) GDPR).

Storage location. The account, entries and emails of the web app are stored on servers of Hostfactory AG in Switzerland, which processes the data only on our behalf. For the web app, no data is disclosed abroad.

Web app cookies. The web app only sets cookies that are necessary for operation: ts_session for signing in (until you sign out, no more than 60 days after last use), ts_csrf to protect the forms (until you close the browser), ts_lang for the chosen language (one year), ts_flash for a short message after an action (60 seconds) and ts_einladung, if you follow an invitation link without being signed in (two days). During training with a countdown, your browser stores the progress of the session you are carrying out locally on your device. The web app does not set any cookies for analytics or advertising.

3.4 Contact and forms

If you write to us by email or via a form, for example for the Tennis Community, we process your details such as name, email address and message in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR).

3.5 Events and Tennis Community

For our events, we process name, email address, ticket and participation in order to organise the event. Photos may be taken at events, which we show on our website and on social media. If you do not wish to appear in photos, let us know on site or by email. We will remove the images concerned.

3.6 Newsletter

If you subscribe to our newsletter, we use your email address to send you news from Tennis Schweiz (consent, Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email.

3.7 Cookies, analytics and marketing

Our shop runs on Shopify. Shopify uses cookies and similar technologies that are necessary for the cart, checkout and security. We only use other cookies for analytics and marketing if you consent, insofar as consent is required. We ask visitors from the EU and from Norway for this via a cookie banner. You can change your choice at any time, and cookies can be deleted in your browser settings. If we use measurement and marketing functions of the Shopify sales channels “Google & YouTube” or “Facebook & Instagram”, data is transmitted to Google or Meta respectively, again only within the scope of your consent, insofar as such consent is required.

3.8 Podcast and embedded content

On some pages, we embed the player of our podcast “Sip & Charge”, which is provided by Acast AB (Sweden). When the player loads, technical data such as your IP address is transmitted to Acast. Links to Spotify, Apple Podcasts, Instagram, TikTok and other platforms are plain links. The data protection provisions of the respective platform only apply once you click on them.

4. Recipients and service providers

We only pass on personal data to the extent necessary for the purposes stated, namely to:

Shopify (Shopify International Limited, Ireland, and Shopify Inc., Canada, with their sub-processors) for the website, shop, checkout and payment processing via Shopify Payments
the payment providers offered at checkout, for example TWINT and card issuers
Swiss Post for the shipping of goods
Hostfactory AG, Switzerland, for hosting the web app and our emails
Acast AB, Sweden, for the podcast player
Google and Meta, only within the scope of section 3.7
people you invite to train together in My training (your name), and people you train together with, to the extent set out in section 3.3 (“Training together”)
people in the same challenge, including challenged people before they accept, to the extent set out in section 3.3 (“Challenge”)
fiduciaries, tax advisers and authorities, insofar as we are legally obliged to do so

5. Disclosure abroad

Shopify and other service providers may process data outside Switzerland and the European Economic Area, in particular in Canada and the USA. In the view of the Swiss Federal Council and the European Commission, Canada provides an adequate level of data protection. For the USA, we rely on the recipient’s certification under the Swiss-U.S. or the EU-U.S. Data Privacy Framework, as applicable, or on standard contractual clauses. You can obtain a copy of the standard contractual clauses on request. Web app data remains in Switzerland.

6. How long we keep data

order and accounting data: ten years, as required by law
account and entries in the web app: as long as your account exists. You can delete your account yourself in the web app at any time, and on request we delete your account and entries within 30 days. We delete notes immediately if you withdraw your consent. Export your entries in the books as a PDF beforehand. Print out guides, training plans and sessions or save them as a PDF via the print function. On request, we will send you a copy of all your data.
training plans as well as sessions, training programme, focus, training log with planned training sessions and drafts, self-assessments and goals of My training: as long as your account exists, even after access has expired, so that you can use them again after a renewal. You delete individual plans, sessions and entries yourself. We delete information about pain immediately if you withdraw your consent.
invitations to train together: the address until the invitation is accepted or declined or until you withdraw it, no more than 30 days. The check value of the address for no more than 30 days after the invitation, after it has been declined or after the end of a partnership. Times for the limits: 24 hours. Block on invitations: the check value of the address, until the person lifts the block. Joint training sessions with notes and scores: until the person who created them deletes them or one of the two accounts is deleted. If the partnership ends, we delete the joint training sessions planned from the following day onwards. Times of the reminders before joint training sessions: 24 hours.
challenges with members, guests, matches and settlements: until the person who created the challenge deletes it or deletes their account. Names of guests without matches: until they are removed. A declined challenge request or leaving a challenge: as long as the challenge exists. If you delete your account, your matches remain in the challenges of others without your name.
sending of the reminders before expiry: as long as your account exists
free account without confirmation: no more than 7 days
sign-in links: valid for one hour, after a purchase seven days and for confirming a free account 24 hours, stored for 30 days. Sign-in codes: valid for 15 minutes, stored as a check value with the number of attempts for 30 days. Sign-in sessions with time and browser: until you sign out, no more than 60 days after last use. Check values for protection against misuse: no more than two hours.
backup copies of the web app: to protect against data loss, we back up the database of the web app every day in encrypted form. Hostfactory AG also backs up its servers daily. All backup copies are stored in Switzerland. We usually delete ours after 14 days, and Hostfactory usually deletes its own after 30 days. Until then, deleted data may still be contained in a backup copy. If we restore the database from a backup copy, we delete such data again as quickly as possible. We keep the state before a restore for no more than 90 days.
contact enquiries: as long as necessary to deal with them
technical logs: for a short time, usually a few weeks

7. Security

We protect your data with appropriate technical and organisational measures. Connections are encrypted. Sign-in links and codes for the web app are only valid for a short time and can only be used once. We automatically limit repeated sign-in attempts. Sessions are managed via secure cookies, and we only store sign-in keys and codes as a check value. We back up the database of the web app daily in encrypted form. The web app regularly checks its program files for changes and reports anything unusual to us. However, there is no absolute protection on the internet.

8. Your rights

You have the right of access to your data and the rights to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on our legitimate interest. You can withdraw consent at any time with effect for the future. To do so, write to us at info@tennisschweiz.ch. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or with the data protection supervisory authority of your country of residence.

9. No automated decisions

We do not make automated individual decisions and do not create profiles of you. My training calculates the rankings and statistics of a challenge only for the people in this challenge. We do not evaluate them further.

10. Children and young people

If you are under 16 years of age, please only order with your parents’ consent. This also applies to a free account.

11. Shopify as an independent controller

For certain functions of its own, such as the Shop app or Shop Pay, Shopify processes data under its own responsibility. You can find more information in Shopify’s privacy policy and in the Shopify privacy portal.

12. Changes

We adapt this Privacy Policy when our offers or the legal requirements change. The version published here at the relevant time applies.