Privacy Policy
By using the additional services in GolfBox (the “Additional Services”), you consent to this Privacy Policy. The consent also includes GolfBox A/S’ processing of your personal data as described herein.
1. Contact information Your contracting party for this Privacy Policy and data controller is:
GolfBox A/S Sensommervej 34 F 8600 Silkeborg Denmark CVR/Company registration no.: 27234704 Phone no.: +45 21734000 Mail: info@golfbox.dk Website: www.golfbox.net
(hereafter ”GolfBox”, ”we”, ”us” or ”our”)
2. Conditions of use 2.1 Responsibility If you contravene or violate this Privacy Policy or in any other way expose the Additional Services for economic or legal risk or possible legal exposure, we may prevent you from further use of the Additional Services, or parts hereof.
3. Data controller responsibility 3.1 We take the protection of your personal data seriously We are processing personal data and have adopted this Privacy Policy to inform you on how we process your personal data. We are the data controller for the Additional Services and we ensure that your personal data is processed in accordance with applicable legislation. 3.2 We ensure fair and transparent data processing When we ask to make your personal data available to us, we will inform you of the personal data we are processing and the purpose hereof. You will receive this information when your personal data is being collected.
4. Processing of personal data 4.1 Usage of the Additional Services We offer users Additional Services, including services offered third parties who may require transfer of personal data initially and/or ongoing. The Additional Services such as integration to partners, including the third party offers as well as quizzes / contests etc. It is still possible for you to use the application and website if you do not want us to collect and process your person data in order to offer you the Additional Services. By using the application and website, we might use cookies. You can read more about cookies in our cookie policy here: www.golfbox.net/cookies. 4.2 Processing of personal data when you use the Additional Services We are using your personal data as a data controller, when we are providing the Additional Services to you and in our contact with you. The personal data we use mainly includes: - Name; - ID-no.; - Email; - Telephone no.; - Address; - Birth Date; - Gender; - Golf Handicap; - Memberships; 4.3 We collect and keep your personal data for specific purposes We collect and keep your personal data in accordance with specific purposes or other legal commercial purposes. It occurs when we need to: - Administer your relation to us when we are acting as a data controller; - offer the requested Additional Services to you; 4.4 Disclosure of personal data In order to deliver our Additional Services to you, it is necessary to disclose relevant personal data on you to third parties. Our system and database are hosted on a server located in the EU/EEA. If we use data processors we only use data processors providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the relevant data protection laws including ensuring the protection of the rights of the data subject. 4.5 We only process personal data for specified, explicit and legitimate purposes We only process personal data about you which is relevant and sufficient in accordance with the purposes defined above. The purpose is decisive for the types of personal data we process about you. The same applies to the scope of the personal data that we use, e.g. we do not use personal data more extensively than what is necessary, in accordance with the specific purpose. 4.6 We only process relevant personal data We only collect, process and store personal data which is essential in relation to fulfill our specific purpose. Additionally, it may be determined by law which kind of personal data is essential in order to collect and store for our business operations, e.g. accounting legislation. The type and extent of the personal data we process may also be required to fulfill a contract or other legal obligation. 4.7 We control and update your personal data We ensure that the personal data which we process about you is not incorrect or misleading. We also make sure to update your personal data continuously. As our Additional Services may depend on your correct and updated personal data, we kindly ask you to inform us if there are any relevant changes regarding your personal data. You may use our contact information above to notify us of your amendments. 4.8 We delete your personal data when it is no longer necessary to keep We will delete your personal data when it is no longer required in relation to the purpose that was the reason for our collection, processing and storage of your personal data. We will store personal data that we are obliged to keep in accordance with the law. 4.9 We obtain your consent before processing your personal data We obtain your consent before processing your personal data for the purposes described above, unless there is another legal basis for the collection. We notify you of such legal basis and of our legitimate interests for processing your personal data. Your consent is voluntary, and you can at any time withdraw it by contacting us. Use the above stated contact information if you wish to withdraw your consent or want further information. 4.10 We do not disclose your personal data without your consent We will collect your consent and give you information concerning what your personal data will be used for before we disclose your personal data to third party business partners, e.g. for marketing purposes. You can, at any time, object to this kind of disclosure. We do not collect your consent if we are legally obliged to disclose your personal data, e.g. as part of a regulatory filing with an authority.
5. Security 5.1 We protect your personal data We protect your personal data to avoid unintended loss or amendment, against unauthorized publication and against unauthorized persons accessing your personal data, among other things by using encryption. We use data processors in the EU/EEA who store and process personal data on our behalf in accordance with this Privacy Policy and the current legislation. Should a breach of security occur, we will as soon as possible inform you if the breach may result in high risk to your rights e.g. theft of ID, economic loss, discrimination of you, loss of reputation or other significant inconvenience.
6. Your rights as Data subject 6.1 You have the right to access your personal data For the Additional Services you have the right, at any time, to receive information about the personal data we, as a data controller, are processing about you, where the data is collected from, and what we are using it for. You also have the right to be informed about the period for which the personal data will be stored and who the recipients of your personal data are, if we transfer your personal data inside your country and/or abroad. If you request so, we can inform you of, and provide you with, a copy of the personal data we process concerning you. The access can, however, be limited to ensure other people’s privacy protection, trade secrets and intellectual property rights. You may also have the right to data portability. You can use your rights by contacting us. You will find our contact information at the top. 6.2 You have the right to have inaccurate personal data rectified or deleted. If you think the personal data we are processing about you in relation to the Additional Services is inaccurate, you have the right to request rectification. You must contact us and inform us about the inaccuracies and how to rectify the information. In some instances, we are obliged to delete your personal data. This might be the case if you withdraw your consent. If you are of the opinion that your personal data is no longer necessary in accordance to the purpose for which we collected them, you are entitled to request their deletion. You can also contact us if you are of the opinion that your personal data is being processed contrary to applicable law or other legal obligations. We will investigate if the conditions are fulfilled, when you make a request of having your personal data rectified or erased. If so, we will carry out the amendments or deletion as fast as possible. 6.3 You have the right to object to our processing of your personal data You have the right to object to our processing of your personal data in relation to the Additional Services. You can also object to our disclosure of your personal data for marketing purposes. You can use the contact information above to submit an objection. If your objection is justified, we will ensure the termination of the processing of your personal data. 6.4 Lodging a complaint If you wish to make a complaint about our processing of your personal data, you have the right to contact the national Data Protection Authority. Please find the contact details for your country here: http://ec.europa.eu/newsroom/article29/document.cfm?action=display&doc_id=50061.
7. Responsibility and limitations of liability 7.1 Responsibility We are responsible for the information (factual/statistic information and personal data) we choose to show on the Additional Services. We reserve the right to change the content without warning. 7.2 Limitations of liability It is our objective that the Additional Services is always accessible. Yet the Additional Services can be inaccessible in situations, which can be due to safety or maintenance reasons, unstable network connection, failure in communication links or hardware. We execute backups on a regular basis but cannot guarantee that there will be no data loss. We renounce all responsibility for any losses and/or damage to the content on your profile related to such events.
8. Amendments of terms We reserve the right to amend this Privacy Policy with an appropriate notice to you at any time. The Terms in force at any time are available through the Additional Services.
9. Governing Law and jurisdiction Our Additional Services are based in EU/EEA. To the extent legally permitted, the information we collect is governed by the applicable Danish law. We operate the Additional Services in EU/EEA, and depending on your country of residence, the submission of personal data via the Additional Services may involve transfer of personal data to other EU/EEA countries, or where our servers are located. |