GolfBox Tournament

The processed data

• The subject matter and duration of processing
  • Members can enter and participate in competitions. GolfBox Tournament might be connected to external databases to be able to search and select members. Entry data, start times, and results are registered, and can be displayed publicly for live scoring purposes. Results can be transferred to ranking lists. Scorecards/handicap adjustments can be transferred to external databases for official handicapping. Data is processed for as long as the competition exists.

• The nature and purpose of the processing
  • Competitions are held to give the club / organization the ability to create income from entry fees and to offer members and guests the service of playing golf and compete against other golfers. 

• The types of personal data
  • GolfBox may process personal data such as member number, name, gender, member categories, telephone/mobile, e-mail address, postal address, transaction purchase and amount on behalf of the club / organization.
  • GolfBox does not process any special category or sensitive data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health or sex life or sexual orientation, civil registration numbers, or data related to criminal records.

• The category of the data subject
  • Member

• The physical location (of servers) where personal data is processed
  • GolfBox hosting environment is located within EU/EEA

Payment Provider Integration

The processed data with sub-processor

• The subject matter and duration of processing
  • Collecting payments through different payment providers such as Nets, Paytrail, PayPal, and Payex on behalf of clubs/organizations. GolfBox is transferring personal data to the provider including the amount to pay and receives acknowledgement of received payment back and registers this purchase, such as a tee time, a lesson, and a competition entry, has been payed within each designated module. Data is registered and processed in GolfBox for as long as the payment exists.

• The nature and purpose of the processing
  • Clubs/organizations can receive payments online for their products offered.

• The types of personal data
  • GolfBox may process personal data such as member number, name, telephone/mobile, e-mail address, postal addresses, transaction purchase and amount on behalf of the club / organization.
  • GolfBox does not process any special category or sensitive data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health or sex life or sexual orientation, civil registration numbers, or data related to criminal records.

• The category of the data subject
  • Member

• The physical location (of servers) where personal data is processed
  • GolfBox hosting environment is located within EU/EEA

Players First integration

The processed data with sub-processor

• The subject matter and duration of processing
  • Players First offers clubs/organizations a software product which enables the clubs/organizations to conduct surveys and follow up, based on members and activity data. GolfBox provide and transfer data to Players First. Nothing in this regard is registered with GolfBox.

• The nature and purpose of the processing
  • Clubs/organizations using Players First will receive valuable information about members and guests to improve their product and increase their business.

• The types of personal data
  • GolfBox may process personal data such as member number, name, gender, telephone/mobile, e-mail address, postal address on behalf of the club / organization.
  • GolfBox does not process any special category or sensitive data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health or sex life or sexual orientation, civil registration numbers, or data related to criminal records.

• The category of the data subject
  • Member

• The physical location (of servers) where personal data is processed
  • GolfBox hosting environment is located within EU/EEA

Security measures

The processor is required to ensure a high level of security in its products and services, which is ensured by relevant organizational, technical, and physical security measures required by information on security measures as described in Article 32 of the GDPR.

The processor regularly evaluates the security measures in place for all products and services to ensure they meet industry standards.

Currently the security measures evaluate to these main elements:

• Data is encrypted in transit via HTTPS and SSL certificates
• The data importer will use up-to-date virus checking software to assist the prevention and detection of malware or similar damaging code within the data importer’s systems
• The data importer implements firewalls in a manner that prevents them from being bypassed
• All individuals hired by or otherwise working for the data importer are assigned unique accounts which must not be shared, and must be kept confidential
• Individuals are forced to change passwords upon first logging into an account
• Password configurations are enforced and ensure a minimum level of password integrity
• Policies ensures leavers will have access permissions promptly revoked
• Remote access is through secure VPN