Privacy policy
English translation for convenience. The German version is legally binding.
Last updated: October 2026
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Patrick Schmidt
HeySponsor – Agentur für Sportmarketing
Jovyplatz 4
45964 Gladbeck
Germany
Phone: +49 157 78771689
Email: patrick@heysponsor.de
2. General information on data processing
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Personal data is any data that can be used to identify you personally or that relates to an identified or identifiable person.
We only process personal data to the extent necessary to provide a functional website, to handle enquiries, to deliver our offers and services, or for the other purposes described in this privacy policy.
Where we require your consent for certain functions, processing only takes place after you have given it. You can withdraw your consent at any time with effect for the future.
3. Visiting the website and server log files
When you visit our website, your browser automatically transmits information to our website's server. This may include in particular:
- IP address of the requesting device
- date and time of access
- pages or files accessed
- referrer URL
- browser and browser version
- operating system
- host name of the accessing computer
- amount of data transferred
- HTTP status code
This data is processed to provide the website technically, to ensure the stability and security of the service and to identify technical errors.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in particular in the secure and smooth provision of our website.
Server log files are only stored for as long as necessary for these purposes and are then deleted or anonymised, unless statutory retention obligations apply.
4. Hosting by Vercel
Our website is hosted by Vercel. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
As part of hosting, Vercel processes in particular technical data and server log data generated when you use our website, such as IP addresses, times of access, pages accessed and technical information about your device. The website may be delivered via a global server network (content delivery network).
Processing takes place to provide our website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR.
Where Vercel processes personal data on our behalf, this is based on a data processing agreement pursuant to Art. 28 GDPR. For transfers to the USA, see section “Transfers to third countries”.
5. Fonts and external content
Our website loads all fonts, images and scripts directly from our own server. No content from third-party providers such as Google Fonts, YouTube or embedded maps is loaded.
6. Contacting us
If you contact us by email, phone or via a form on our website, we process the personal data you provide, in particular: name, email address, phone number, the content of your message and any other information you voluntarily provide.
The data is processed to handle and respond to your enquiry.
Information you submit via the forms on our website (contact, stand enquiry, meeting request, newsletter sign-up) is transferred to and stored in our customer relationship management system (CRM). The CRM is also operated on Vercel; the database is provided by Supabase Inc. Data processing agreements pursuant to Art. 28 GDPR are in place or are being concluded with both providers.
The legal basis is Art. 6 (1) (f) GDPR. Where your enquiry aims at concluding or performing a contract, Art. 6 (1) (b) GDPR may also apply.
The data you submit will be deleted once your enquiry has been fully processed and no statutory retention obligations or other legitimate reasons for further storage apply.
7. Newsletter and Brevo
You can sign up on our website for a newsletter or information about RACKET SPORTS GERMANY.
We use the service Brevo provided by Brevo SAS, 7 rue de Madrid, 75008 Paris, France, to send and manage the newsletter.
Your sign-up via the form on our website is first stored in our CRM (see section “Contacting us”) and passed on to Brevo for sending.
When you sign up, we process in particular your email address and any other information you voluntarily provide.
Double opt-in. We generally use the double opt-in procedure. After entering your email address you will receive a confirmation email; your sign-up is only completed once you click the confirmation link. This ensures that the sign-up was made by the owner of the email address and allows us to prove consent.
Processing is based on your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, in particular via the unsubscribe link contained in every newsletter.
Newsletter tracking. Where technically possible and covered by your consent, newsletters may be evaluated statistically, for example whether an email was opened or a link in it was clicked. This helps us improve our newsletters and provide relevant content.
Further information on data processing by Brevo can be found in Brevo's privacy information.
8. Links to Google Maps and social networks
Our website links to Google Maps (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and to our profiles on Instagram and LinkedIn.
These are plain links, not embedded content. Simply visiting our website does not transmit any data to these providers. Only when you click such a link do you leave our website; the respective provider is responsible for data processing on the linked page.
9. Cookies
Our website does not set any cookies and does not use comparable technologies for analytics or marketing purposes. No tracking takes place.
A consent banner is therefore not required.
10. Legal bases of processing
Unless a more specific legal basis is stated in this privacy policy, the following legal bases apply:
Art. 6 (1) (a) GDPR – the data subject has given consent to the processing of their personal data for one or more specific purposes.
Art. 6 (1) (b) GDPR – processing is necessary for the performance of a contract or to take steps prior to entering into a contract.
Art. 6 (1) (c) GDPR – processing is necessary for compliance with a legal obligation.
Art. 6 (1) (f) GDPR – processing is necessary for the purposes of our legitimate interests, unless these are overridden by the interests or fundamental rights and freedoms of the data subject.
11. Recipients of personal data
In operating our website, personal data may be transmitted to or processed by the following categories of recipients in particular:
- hosting and IT service providers (Vercel)
- providers of our CRM system and its database (Vercel, Supabase)
- newsletter and email marketing service providers (Brevo)
Data is only transmitted where there is a legal basis under data protection law.
12. Transfers to third countries
Our service providers Vercel Inc. and Supabase Inc. are based in the USA. Processing of personal data outside the European Union or the European Economic Area can therefore not be ruled out.
Where such a transfer takes place, it is carried out only in compliance with Art. 44 et seq. GDPR and on the basis of a permissible transfer mechanism, in particular the European Commission's adequacy decision on the EU-US Data Privacy Framework (for certified companies) or appropriate safeguards such as standard contractual clauses.
13. Storage period
We generally store personal data only for as long as necessary for the respective purpose. Statutory retention obligations may require longer storage. After the respective retention period has expired, the data is deleted unless another legal basis for further storage exists.
14. Your rights
You have the following rights regarding your personal data:
Right of access – under Art. 15 GDPR you can request information as to whether and which personal data we process about you.
Right to rectification – under Art. 16 GDPR you can request the correction of inaccurate or the completion of incomplete personal data.
Right to erasure – under Art. 17 GDPR you can request the deletion of your personal data under certain conditions.
Right to restriction of processing – under Art. 18 GDPR you can request the restriction of processing under certain conditions.
Right to data portability – under Art. 20 GDPR you have the right, under certain conditions, to receive your personal data in a structured, commonly used and machine-readable format.
Right to object – under Art. 21 GDPR you can object, on grounds relating to your particular situation, to processing based on Art. 6 (1) (e) or (f) GDPR. Where personal data is processed for direct marketing purposes, you have the right to object at any time.
Right to withdraw consent – where processing is based on your consent pursuant to Art. 6 (1) (a) GDPR, you can withdraw it at any time with effect for the future. The lawfulness of processing carried out on the basis of the consent before its withdrawal remains unaffected.
15. Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.
16. No automated decision-making
We do not use decision-making based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
17. Data security
We use appropriate technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Data on our website is transmitted in encrypted form via HTTPS/TLS where technically possible.
18. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or reflects changes to our services and technical systems. The current privacy policy applies to each new visit.
19. Data protection contact
If you have any questions about data protection or the processing of your personal data, you can contact us at any time:
Patrick Schmidt
HeySponsor – Agentur für Sportmarketing
Jovyplatz 4
45964 Gladbeck, Germany
Email: patrick@heysponsor.de
Phone: +49 157 78771689