Privacy policy
Last updated 2026-08-15
Who we are
Siguldas Padel Korti is operated by Padel Sigulda, SIA, the data controller for the personal data described here. You can reach us at padel@padelsigulda.lv or at Oskara Kalpaka iela 2, Sigulda, Siguldas novads, LV-2150, Latvia.
What we collect
- Booking details — the court, date, time and price of your reservations, and any players you add.
- Contact details — your name, email, and (optionally) mobile number, so we can confirm bookings and reach you about changes.
- Account data — if you create an account, your password is stored only as a salted argon2id hash; we never keep it in readable form.
- Payment status — whether a booking is paid, refunded or owed. We never see or store your full card number — card details are entered directly with our payment provider.
- Membership cards — if you link a Siguldas karte or Goda Ģimene card for a discount, we store only a one-way HMAC fingerprint and expiry, never the raw card number.
- Sign-in with Google — if you use it, we receive your name, email and profile picture; if you connect your calendar, we add your bookings to it.
- Communication preferences — your email/WhatsApp notification choices and language.
Why we use it, and our legal basis
- To provide the booking service you asked for — creating, confirming and managing reservations and payments (performance of a contract, GDPR Art. 6(1)(b)).
- To meet legal obligations — keeping accounting and tax records for issued payments and invoices (Art. 6(1)(c)).
- Our legitimate interests — securing the service, preventing fraud and abuse, and keeping it working (Art. 6(1)(f)).
- With your consent — optional marketing messages and WhatsApp notifications, which you can withdraw at any time (Art. 6(1)(a)).
Who we share it with
We use a small set of trusted providers who process data only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Google Ireland Limited | Google account sign-in (authentication) and optional Google Calendar sync | Ireland (EU) |
| Revolut Bank UAB | Online card payment processing | Lithuania (EU) |
| Resend (Plus Five, Inc.) | Transactional email delivery (confirmations, reminders, receipts) | United States — under EU Standard Contractual Clauses |
| Meta Platforms Ireland Limited | WhatsApp message delivery — only if you opt in to WhatsApp notifications | Ireland (EU) |
Where a provider is outside the EU/EEA (our email provider is in the United States), the transfer is covered by the European Commission's Standard Contractual Clauses.
How long we keep it
- Booking & payment records — retained as long as required by Latvian accounting and tax law (at least 5 years).
- Account data — kept while your account is active; removed (or anonymised) on request, except records we must keep for the period above.
- Payment event logs — automatically deleted after 30 days.
- Sign-in sessions — the session cookie expires after about 30 days, or when you sign out.
Your rights
You can ask us to access, correct, delete, restrict or port your data, object to processing, or withdraw consent. Email padel@padelsigulda.lv and we'll respond within one month. If you're unhappy with how we handle your data you can complain to the Datu valsts inspekcija (Data State Inspectorate of Latvia) (https://www.dvi.gov.lv).
Cookies
We use only strictly-necessary cookies — see our cookie notice.
Changes
We'll update this page if our practices change, and revise the date at the top.