Privacy Policy

1. Controller

The controller responsible for the processing of personal data in connection with CookieJar Shooting is:

2. General Information

We process personal data only to the extent necessary to operate CookieJar Shooting, process orders and payments, provide the purchased shooting analysis and coaching services, communicate with customers and comply with legal obligations.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

3. Data Processed When Using Our Services

Depending on the service used, we may process the following information:

• First name and last name
• Email address
• Age
• Basketball position
• Team information
• Training goals and other information provided by the customer
• Submitted shooting videos
• Purchased package
• Payment and transaction information
• Communication and coaching notes
• Information relating to follow-up reviews

This information is processed primarily to perform the contract, provide the requested services and communicate with the customer.

4. Shooting Videos

Customers can submit basketball shooting videos for the purpose of personalized shooting analysis and coaching.

These videos are used by CookieJar Shooting to assess shooting mechanics and provide individualized technical feedback and training concepts.

Customers should only submit videos that they are legally permitted to provide. Customers should avoid unnecessarily including other identifiable persons or unrelated personal information.

Submitted videos are not used for advertising or sold to third parties.

5. Video Storage – Cloudinary

Submitted videos are stored using Cloudinary, a cloud-based media management and storage provider.

The video file and associated technical information may be processed by Cloudinary on our behalf for the purpose of securely storing and delivering the submitted videos.

Video URLs and related information may also be stored in our database so that the submitted material can be associated with the relevant customer and order.

Where personal data is processed outside the European Economic Area, appropriate safeguards required by applicable data protection law are used where necessary.

6. Retention of Shooting Videos

For Cookie Pro, submitted shooting videos are generally retained for a maximum of 90 days after the analysis, unless a longer retention period is necessary due to legal obligations or the establishment, exercise or defence of legal claims.

For Cookie Pro+, submitted shooting videos may be retained during the 60-day coaching period so that follow-up reviews can be performed.

Where technically and legally possible, customers may request earlier deletion of their submitted videos. Such deletion may affect our ability to provide remaining services that require access to those videos.

7. Database – Supabase

Customer and order information is stored in a PostgreSQL database provided through Supabase.

The database may contain information such as customer details, order information, package information, payment status, submitted video references, coaching notes, follow-up information and legal consent records.

Access to customer information is restricted to what is reasonably necessary for operating and providing CookieJar Shooting services.

8. Payments – Stripe

Payments are processed through Stripe.

CookieJar Shooting does not store complete credit card numbers or card security codes on its own servers.

Stripe processes payment-related information in accordance with its own privacy documentation and applicable data protection requirements.

We may receive information such as payment status, transaction identifiers and information necessary to associate a successful payment with the corresponding order.

9. Transactional Emails – Resend

We use Resend to send transactional emails, such as order confirmations, service-related messages and Cookie Pro+ follow-up feedback.

For this purpose, the customer's email address and the content necessary to send the relevant message may be processed.

10. Reviews

Customers may voluntarily submit reviews about CookieJar Shooting.

If a review is submitted for publication, the information provided as part of the review may be stored and displayed on the website where applicable.

Reviews are only published where they have been approved for publication.

11. Legal Bases

Depending on the specific processing activity, personal data may be processed on the following legal bases under Article 6 GDPR:

• Article 6(1)(b) GDPR – processing necessary for the performance of a contract or for taking steps at the request of the customer before entering into a contract.
• Article 6(1)(c) GDPR – processing necessary for compliance with legal obligations.
• Article 6(1)(f) GDPR – processing necessary for legitimate interests, where those interests are not overridden by the interests or fundamental rights and freedoms of the customer.
• Article 6(1)(a) GDPR – processing based on consent where consent is legally required and has been given.

12. Retention of Personal Data

Personal data is retained only for as long as necessary for the respective purpose.

Where legal retention obligations apply, data may be retained for the legally required period even after the customer relationship has ended.

Data may also be retained for as long as necessary to establish, exercise or defend legal claims.

Once the applicable purpose and retention periods have expired, personal data is deleted or anonymized where technically possible.

13. Your Data Protection Rights

Subject to the applicable legal requirements, you have the following rights under the GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure of personal data
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing
• Right to withdraw consent where processing is based on consent

To exercise your rights, contact:

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Please note that certain data may need to be retained where required by law or necessary for the establishment, exercise or defence of legal claims.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully.

In Austria, the competent supervisory authority is the Austrian Data Protection Authority (Datenschutzbehörde).

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

15. Cookies and Analytics

CookieJar Shooting does not currently use Google Analytics, Meta Pixel or advertising tracking technologies on the website.

Necessary technical technologies may be used where required for the operation, security and functionality of the website and services.

If optional analytics, advertising or other non-essential tracking technologies are introduced in the future, the relevant information and, where legally required, consent mechanisms will be updated before such technologies are used.

16. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.

Access to customer information is limited to what is reasonably necessary for the operation and provision of CookieJar Shooting services.

17. Website Hosting – Vercel

The CookieJar Shooting website is hosted using Vercel.

When accessing the website, technical information such as IP address, browser information, operating system, timestamps and other technical request information may be processed as required to operate, secure and maintain the website.

18. Changes to This Privacy Policy

We may update this Privacy Policy where necessary due to changes in our services, technical infrastructure, legal requirements or data processing activities.

The current version will always be made available on this page.