PRIVACY POLICY
Last updated: August 2026
Note on this translation: This is an English translation of our German-language privacy notice ("Datenschutzerklärung"), provided for your convenience only. It has no independent legal effect. In the event of any discrepancy, ambiguity or dispute, the German version shall be authoritative and prevail.
1. Information on the collection of personal data
Below we provide information on the collection of personal data when you use our website and when you book our services. Personal data means all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
The controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) is:
Tee It Up GmbH
Oehleckerring 25
22419 Hamburg,
Germany
Email: info@teeitupgolf.de
Telephone: +49 (0)40 560 69 189
Website: www.teeitupgolf.de
Where we use engaged service providers for individual functions of our offering, or wish to use your data for advertising purposes, we will inform you in detail about the respective operations below. In doing so, we will also state the defined criteria for the retention period.
2. Your rights
You have the following rights against us in relation to the personal data concerning you:
-
right of access;
-
right to rectification or erasure;
-
right to restriction of processing;
-
right to object to the processing;
-
right to data portability.
-
To exercise these rights, you can reach us using the contact details of the controller stated above.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
3. Objection to the processing of your data and
withdrawal of consent
If you have given consent to the processing of your data, you may withdraw it at any time. Such withdrawal affects the permissibility of processing your personal data from the point at which you have declared it to us.
Insofar as we base the processing of your personal data on a balancing of interests, you may object to the processing. When exercising such an objection, we ask you to set out the relevant grounds arising from your particular situation.
You have the right to object to direct marketing at any time and without giving reasons.
4. No automated decision-making
Your data is not used to create profiles or to make automated decisions.
5. Obligation to provide personal data
In principle, there is no statutory or contractual obligation to provide us with personal data.
Insofar as personal data is collected for the use of individual functions of our website, in particular for contacting us or subscribing to our newsletter, its provision is voluntary. However, without the information marked as required in each case, we are generally unable to process your enquiry or carry out the newsletter dispatch.
By contrast, for the booking of our simulators or other services, and for the performance of the respective contractual relationship, the provision of the personal data required for this purpose is necessary. Without this information, we are generally unable to provide the requested booking or service, or unable to provide it in full.
Insofar as personal data is technically required to provide and properly display our website, it is processed automatically. Without this processing, the website cannot be provided, or cannot be provided without errors.
6. Hosting and content management system (CMS)
Our website is operated via the platform Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Wix provides the content management system (CMS) as well as the technical infrastructure for the operation of our website.
The personal data that arises when using our website is processed on Wix's servers. This may include, in particular, IP addresses, communication data, website accesses and further technically required data.
We have concluded a data processing agreement with Wix insofar as this is required under data protection law. Personal data is processed exclusively within the framework of the applicable data protection provisions.
Israel benefits from an adequacy decision of the European Commission pursuant to Article 45 GDPR. Insofar as personal data is processed in Israel, the data transfer therefore takes place on the basis of this adequacy decision.
Further information on data processing by Wix can be found at: https://de.wix.com/about/privacy.
7. Server log files
When our website is accessed, Wix automatically collects information and stores it in what are known as server log files. This includes, in particular:
-
IP address;
-
date and time of access;
-
browser type and browser version;
-
information on the operating system used;
-
host name of the accessing computer;
-
referrer URL (previously visited website);
-
pages accessed and further technical information about the request.
This data is processed in order to ensure the functionality, stability and security of our website, as well as to detect and prevent misuse and attacks.
The data is not merged with other data sources and is only evaluated insofar as this is necessary to investigate security incidents or unlawful use.
The processing takes place on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in the secure and trouble-free operation of our website.
The server log files are stored for as long as this is necessary to ensure the security, stability and functionality of the website and to detect and prevent misuse. Wix does not publish a specific retention period.
Further information can be found in Wix's privacy policy: https://de.wix.com/about/privacy.
8. Cookies and local storage
In addition to the data mentioned above, cookies or local storage items are stored in your browser when you use our website. These are small text files by means of which certain information flows to the entity that sets the cookie. Cookies cannot execute programmes or transfer viruses to your computer.
The storage of cookies and local storage items that are strictly necessary for the functioning of the website takes place on the legal basis of Section 25(2) no. 2 TDDDG (the German Telecommunications Digital Services Data Protection Act). Other cookies and local storage items are only stored following your consent; the legal basis in this case is Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR.
Overview of the cookies, storage technologies and external services used on the website:
CLICK HERE FOR THE OVERVIEW TABLE! --> LINK
Cookies can be managed in your browser settings. Deactivating strictly necessary cookies may, however, lead to functional restrictions.
You can manage your cookie settings at any time in the cookie management tool .
9. Consent management with Usercentrics
To obtain, manage and document your consents for the use of cookies and comparable technologies, we use the consent management service Usercentrics provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
Usercentrics enables us to obtain, manage and document your consents to the use of cookies, web storage technologies and other services that require consent.
In this context, a record is kept of which consents you have given or refused, in order to comply with statutory documentation obligations and to take your choices into account on future visits to our website.
Within the scope of using Usercentrics, the following personal data may in particular be processed:
-
consent status and consent history;
-
time of consent or withdrawal;
-
pseudonymised user identifier (consent ID);
-
information about the browser and device used;
-
IP address (where applicable, truncated or pseudonymised);
-
language settings;
-
log data for the fulfilment of statutory documentation obligations.
The processing takes place in order to fulfil our legal obligation to obtain and document consents in a verifiable manner. The legal basis for this is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR, as well as Section 25(2) no. 2 TDDDG insofar as the use is technically necessary.
To store your consent decision, Usercentrics uses strictly necessary cookies as well as entries in the local storage or session storage of your browser. These serve exclusively to manage and document your cookie settings and are not used for marketing or analytics purposes.
Insofar as Usercentrics processes personal data on our behalf, this takes place on the basis of a data processing agreement pursuant to Article 28 GDPR.
You can manage your cookie settings at any time in the cookie management tool.
10. Booking, point-of-sale and payment systems (Sweetspot, ExtendaGO and Adyen)
10.1 Purpose of the processing
For the administration of our playing operations, the booking of tee times and tournaments, the sale of goods and services, and the processing of payments, we use the booking platform Sweetspot, the point-of-sale system ExtendaGO and the payment service provider Adyen.
Personal data is processed, in particular, for the:
-
administration of members and guest players;
-
booking and running of tee times, tournaments and other services;
-
carrying out of sales in the shop and in food and beverage;
-
processing of cashless payments;
-
creation of till receipts and invoices;
-
administration of vouchers, credit balances and customer accounts;
-
fulfilment of documentation obligations under commercial and tax law; and
-
ensuring of a secure and efficient business operation.
10.2 Categories of data processed
Within the scope of using the booking, point-of-sale and payment systems, the following personal data may in particular be processed:
-
master data (e.g. name, address, email address, telephone number, membership number);
-
booking and reservation data;
-
tournament and playing-operations data;
-
purchase and transaction data;
-
payment data and payment status;
-
voucher and credit-balance data;
-
communication data;
-
date, time and place of the respective transaction;
-
technical identifiers (e.g. customer or transaction ID).
We do not store complete credit or debit card data.
10.3 Provision of the data
The provision of the personal data required for the booking or performance of our services is necessary for the conclusion and performance of the respective contract. Without this information, we are generally unable to provide the requested booking or service, or unable to provide it in full.
10.4 Service providers used
To provide our services, we use the following service providers:
-
Sweetspot AB, Verkstadsgatan 1, 702 27 Örebro, Sweden, as the booking and administration platform;
-
Extenda Retail AB, Elektrogatan 10, 171 54 Solna, Sweden, as the provider of the ExtendaGO point-of-sale system;
-
Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands, for the processing of cashless payments.
Depending on the nature of the respective processing, these companies act either as processors pursuant to Article 28 GDPR or as separate controllers within the meaning of Article 4(7) GDPR.
10.5 Legal basis
Personal data is processed:
-
pursuant to Article 6(1)(b) GDPR for the performance of the contract or of pre-contractual measures;
-
pursuant to Article 6(1)(c) GDPR for the fulfilment of legal obligations, in particular retention obligations under commercial and tax law;
-
pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in an efficient, secure and economical organisation of our playing and business operations.
10.6 Retention period
Personal data is only stored for as long as this is necessary for the fulfilment of the respective processing purposes or where statutory retention obligations exist.
Documents relevant under commercial and tax law are generally stored until the expiry of the statutory retention periods, currently ten years as a rule. Thereafter, the data is deleted or anonymised, provided that no statutory or contractual retention obligations preclude this.
10.7 Recipients of personal data
Personal data is transferred exclusively to those recipients required for the provision of the respective services. These include, in particular, Sweetspot, Extenda Retail and Adyen, as well as, where applicable, further technical service providers.
10.8 Data security and data transfers
We employ appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access.
Insofar as personal data is processed outside the European Union or the European Economic Area, this takes place exclusively under the conditions of Articles 44 et seq. GDPR.
11. Web analytics with Google Analytics 4 (GA4)
11.1 Purpose of the processing
Insofar as you have consented to this, we use the web analytics service Google Analytics 4 (GA4) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website.
Google Analytics serves the statistical analysis of the use of our website. The information obtained enables us to evaluate user behaviour, to measure the reach of our online offering, and to continuously optimise our website and our services technically and in terms of content.
Google Analytics uses cookies and comparable technologies to record information about the use of our website and to assign a pseudonymous identifier (client ID) to your device. Google Analytics 4 also uses statistical modelling methods and machine learning to evaluate usage data and – where technically necessary – to supplement incomplete data sets. No individual users are identified in the process.
11.2 Categories of data processed
Within the scope of using Google Analytics, the following personal data may in particular be processed:
-
IP address (truncated or anonymised);
-
information about the device used (device type, operating system, browser type and browser version);
-
approximate location data (country, region or city);
-
usage data (e.g. pages accessed, click paths, scrolling behaviour, dwell time);
-
referrer information;
-
date and time of the visit;
-
technical identifiers (e.g. client ID, cookie ID or device identifier);
-
event data as well as information about the use of individual functions of our website.
According to our settings, your IP address is automatically truncated within the European Union or the European Economic Area before any further processing (IP anonymisation). A direct identification of you on the basis of the IP address therefore does not, in principle, take place.
We do not currently use Google Signals. Accordingly, no cross-device evaluation on the basis of a Google account takes place.
11.3 Provision of the data
The provision of your personal data is voluntary. Without your consent, Google Analytics is not activated and no processing of your personal data for analytics purposes takes place.
You can withdraw your consent at any time with effect for the future via our cookie settings.
11.4 Service provider used
Google Analytics is provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4 Ireland
To provide the service, Google Ireland may transfer personal data to affiliated companies, in particular:
Google LLC
1600 Amphitheatre Parkway
Mountain View,
California
94043 USA
11.5 Legal basis
Personal data is processed exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
11.6 Retention period
The personal data collected by Google Analytics is stored in accordance with our configuration for 14 months and is then automatically deleted.
The cookies and comparable technologies used by Google Analytics are stored for varying periods depending on the type of cookie in question. Depending on the cookie, the retention period ranges from the end of the browser session up to two years.
11.7 Recipients of personal data
The recipient of the personal data is Google Ireland Limited and – insofar as this is necessary for the provision of the service – Google LLC and further companies affiliated with Google.
11.8 Transfers to third countries
A transfer of personal data to the United States cannot be excluded.
Google LLC is certified under the EU–U.S. Data Privacy Framework. Insofar as personal data is transferred to the USA, the transfer takes place on the basis of the European Commission's adequacy decision pursuant to Article 45 GDPR.
Insofar as data transfers to third countries take place beyond this, they are based on the standard data protection clauses approved by the European Commission pursuant to Article 46 GDPR.
11.9 Data security
We have configured Google Analytics such that:
-
IP anonymisation is activated;
-
Google Analytics is only loaded after your consent;
-
the data is processed exclusively in pseudonymised form; and
-
no cross-device evaluation by means of Google Signals takes place.
Through appropriate technical and organisational measures, we ensure that personal data is processed exclusively to the extent necessary.
12. Contacting us
When you contact us, the data you provide (email address, name of contact person, telephone number and your message) is stored by us in order to answer your questions. We delete the data arising in this connection once its storage is no longer necessary, or we restrict the processing where statutory retention obligations exist.
This data is processed by us in order to be able to deal with your request. The data processing takes place on a contractual basis (Article 6(1)(b) GDPR) insofar as it concerns matters relating to our services. For carrying out customer service in other respects and answering your enquiries, the processing takes place on the basis of legitimate interests (Article 6(1)(f) GDPR), as it enables satisfactory customer advice.
13. Google Maps
This website uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of this service, we can embed map material on our website and show you the location of our company.
Google Maps is only embedded after your consent. The legal basis for the processing of your personal data is therefore Article 6(1)(a) GDPR and Section 25(1) TTDSG.
To use the functions of Google Maps, it is necessary for your IP address to be stored and transmitted to Google. This information is generally transmitted to Google servers in the USA and stored there. We have no influence over this data transmission.
When Google Maps is activated, Google may use Google Fonts for the purpose of the uniform display of fonts. When Google Maps is called up, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
The transfer of personal data to the USA takes place on the basis of the EU–US Data Privacy Framework (DPF) pursuant to Article 45 GDPR. Google is certified under the DPF and thereby undertakes to comply with European data protection standards.
In addition, standard contractual clauses of the European Commission pursuant to Article 46 GDPR may apply to data transfers. Further information on this can be found at:
https://privacy.google.com/businesses/gdprcontrollerterms/ https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
Further information on the handling of user data can be found in Google's privacy policy: Google Privacy Policy (German).
Further information on the EU–US Data Privacy Framework can be found here: https://www.dataprivacyframework.gov/participant/5780
14. Newsletter (Wix Email Marketing)
14.1 Purpose of the processing
If you sign up for our newsletter or notification service, we use the service Wix Email Marketing provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, in order to send you regular information about our golf club, events, tournaments, offers, promotions and other news by email.
The newsletter/notification is sent exclusively following your prior consent using the double opt-in procedure. After signing up, you will receive an email in which you must confirm your registration by clicking a confirmation link. Only after this confirmation is your newsletter registration completed.
Provided that you have expressly consented to this, a statistical evaluation of the newsletter/notification dispatch also takes place, in order to measure the success of our campaigns and to continuously improve our information offering.
14.2 Categories of data processed
Within the scope of the newsletter/notification dispatch, the following personal data may in particular be processed:
-
master data (e.g. name, form of address and email address);
-
time of registration and of the double opt-in confirmation;
-
IP address at the time of registration and confirmation;
-
information about the dispatch status (e.g. delivery or non-deliverability);
-
unsubscriptions from the newsletter;
-
open and click rates, provided that you have consented to this;
-
technical information about the device and browser used, as well as the time of use.
Provision of the data
The provision of your personal data is voluntary. However, without providing your email address, registration for our newsletter is not possible.
Consent to the success measurement of the newsletter is voluntary and can be withdrawn at any time with effect for the future.
14.3 Service provider used
For the dispatch of our newsletter/notification, we use the service Wix Email Marketing provided by:
Wix.com Ltd.
40 Namal
Tel Aviv St.
Tel Aviv 6350671
Israel
Wix processes personal data to provide the newsletter/notification service and the associated administration and analytics functions.
Insofar as Wix processes personal data exclusively on our instructions, this takes place on the basis of a data processing agreement pursuant to Article 28 GDPR.
14.4 Legal basis
Our newsletter/notification is sent exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.
The processing of personal data within the scope of registration and documentation of the double opt-in procedure takes place on the basis of Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR for the fulfilment of our statutory documentation obligations.
Insofar as you have consented to the statistical evaluation of the newsletter dispatch, this likewise takes place on the basis of your consent pursuant to Article 6(1)(a) GDPR.
14.5 Retention period
Your personal data is stored for the duration of your newsletter/notification subscription.
After you unsubscribe from the newsletter, your data is generally deleted, provided that no statutory retention obligations exist or that further storage is required for the assertion, exercise or defence of legal claims.
Evidence data regarding the consent given (double opt-in) is stored in accordance with the statutory limitation periods.
14.6 Withdrawal of consent
You can withdraw your consent to receive our newsletter/notification, and where applicable to the statistical success measurement, at any time with effect for the future.
The withdrawal can be effected in particular via the unsubscribe link contained in every newsletter, or by a message to the contact details stated in this privacy notice.
The lawfulness of the processing carried out up to the withdrawal remains unaffected.
14.7 Recipients of personal data
The recipient of the personal data is Wix.com Ltd. and, where applicable, further companies affiliated with Wix, insofar as this is necessary for the provision of the newsletter service.
14.8 Transfers to third countries
Wix is based in Israel. An adequacy decision of the European Commission pursuant to Article 45 GDPR exists for Israel.
Insofar as personal data is transferred within the scope of the provision of services to recipients in third countries outside the European Union or the European Economic Area, this takes place exclusively in compliance with Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision of the European Commission or of appropriate safeguards such as the standard data protection clauses of the European Commission.
14.9 Data security
We employ appropriate technical and organisational measures to protect your personal data against loss, manipulation and unauthorised access.
The newsletter is dispatched exclusively following successful confirmation via the double opt-in procedure. Consent and its withdrawal are documented in order to comply with our statutory documentation obligations.
15. Profiles on social media
General information on data processing in connection with our profiles on social networks.
We use our profiles on the social network Instagram to provide information about our company and the services we offer, and of course also to get in touch and communicate with users of the social networks.
Please note that the personal data of users of the social networks may be processed outside the European Union. This may give rise to risks for users, e.g. the enforcement of users' rights may be more difficult.
If you leave us messages or comments on one of our company profiles, we process your personal data in order to communicate with you. This constitutes a legitimate interest; the legal basis is Article 6(1)(f) GDPR. We do not store communication data any further on our part.
The terms and conditions of the operators of these platforms apply. We are unable to make any statement as to which data is processed by these operators in the course of your visit to these networks. Please obtain information directly from the respective provider; the links to the relevant data protection notices as well as details of the controllers can be found below.
Should you additionally have requests for access, or wish to assert your rights as a data subject, we point out that these can be asserted most effectively with the providers. Only they have access to their users' data and can directly take appropriate measures and make information available. Should you nevertheless require support, you are of course welcome to contact us.
Details of the operator: Meta Platforms Ireland Ltd. ("Meta") 4 Grand Canal Quay Grand Canal Bridge Dublin 2, Ireland
Data protection notices: https://de-de.facebook.com/help/instagram/519522125107875
Version 1.1 / August 2026