1. Data Controller
The Data Controller of personal data collected through this website is TennisTime Sagl, an innovative Swiss startup with registered office in Lugano, Canton Ticino, Switzerland, owner of the intellectual property, patent and registered trademark REB® (RebTennis).
We process users' personal data in full compliance with the European Union General Data Protection Regulation (GDPR, Reg. EU 2016/679) and the Swiss Federal Data Protection Act (FADP / nFADP).
For any clarification regarding data processing or to exercise the rights provided by law, you can contact us at the email address: info@rebtennis.com or through our contacts page.
2. Data Processed and Purposes
The computer systems responsible for the operation of this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. The data processed includes:
Technical and browsing data: IP addresses (anonymised where possible), access times, pages viewed, HTTP status codes and parameters relating to the user's operating system and computer environment. Such data is used exclusively for IT security purposes (attack prevention and DDoS mitigation via Cloudflare infrastructure) and to ensure correct content delivery. No user profiling or behavioral analysis is performed.
Data voluntarily provided by the user: the optional and explicit sending of messages through the contact form entails the acquisition of the identifying data provided (e.g. name, surname, email address and message text) in order to respond to inquiries or requests for licensing of the REB® patent.
3. Cookie Policy and Types of Cookies
Cookies are small text files sent by a website to the user's terminal and retransmitted on each subsequent visit. REB Tennis does not use optional cookies of any category (neither analytics, nor profiling, nor functional): only strictly necessary technical cookies are present, provided by Cloudflare infrastructure.
Zero Tracking & No Profiling Policy: REB Tennis adopts a strict data minimization policy. We do not use Google Analytics, tracking pixels or similar systems, nor profiling or user tracking cookies. Cloudflare is configured and used solely as a DNS/CDN service for perimeter security, DDoS attack prevention and static file delivery speed. No Web Analytics, RUM (Real User Measurement) or Zaraz services are enabled.
Technical and Security Cookies (Strictly Necessary): ensure normal navigation and use of the website and perimeter security (Cloudflare bot management and anti-DDoS). They do not require prior consent and cannot be disabled.
4. Technical Storage Used
The table distinguishes between HTTP cookies (files sent by the server and stored in the browser) and LocalStorage (data saved locally in the browser, never sent to the server).
| Name / Key | Storage Type | Typology | Purpose | Duration |
|---|---|---|---|---|
rebtennis_cookie_consent |
LocalStorage | Technical / Necessary | Stores locally the user's acknowledgement of the cookie policy. It is not an HTTP cookie and is never sent to the server. | Persistent |
__cf_bm |
HTTP Cookie | Technical / Cloudflare Security | Strictly necessary cookie provided by Cloudflare network to distinguish human traffic from malicious bots (Bot Management). Contains no personal identifying data. | 30 minutes |
cf_clearance |
HTTP Cookie | Technical / Cloudflare Security | Strictly necessary cookie provided by Cloudflare to remember that a user has passed a security check (e.g. CAPTCHA), preventing repeated verification. Contains no personal identifying data. | 1 year |
artivism_oauth_state |
HTTP Cookie | Technical / CSRF Security (Admin) | Temporary anti-CSRF token generated solely during the login procedure for the CMS administration area. Never set for regular website visitors. | Session (10 min) |
5. Data Subject Rights
In accordance with the GDPR (articles 15-22) and the Swiss Federal Data Protection Act (FADP), users have the right to:
• Request confirmation as to whether or not personal data concerning them is being processed and obtain access.
• Request rectification of inaccurate data or completion of incomplete data.
• Request erasure of data (right to be forgotten) in the cases provided by law.
• Request restriction of processing or object to processing on legitimate grounds.
• Request data portability in a structured, commonly used and machine-readable format.
• Withdraw previously granted consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Requests may be sent by email to info@rebtennis.com. Users also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, CH-3003 Bern) or with the relevant national supervisory authority of the European Economic Area.
6. Changes to this Policy
TennisTime Sagl reserves the right to make changes to this privacy notice at any time, notifying users on this page. It is recommended to check this section periodically referring to the date of last update indicated below.
Last updated: September 2026