Privacy policy

We appreciate your interest in our website and our services. Protecting your personal data is important to us. Below, we provide information about what data we process, for what purposes, and what rights you have.

The entity responsible for data processing on this website is:

Golf Performance Institute GmbH
Lise-Meitner-Straße 41a
10589 Berlin
Germany

Phone: +49 (0) 30 62872336
Email: info@gpi-fitting.com

Personal data is any data that can be used to personally identify you. We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

We process your data in particular to:
- provide technical support for our website,
- respond to inquiries,
- manage appointments and services,
- organize our communication with prospective and existing customers,
- make our website more user-friendly,
- and to comply with legal obligations.

To the extent that we obtain your consent, we process your data on the basis of Article 6(1)(a) of the GDPR.

To the extent that processing is necessary for the performance of a contract or for the implementation of precontractual measures, it is carried out on the basis of Article 6(1)(b) of the GDPR.

To the extent that we are subject to a legal obligation, processing is carried out on the basis of Article 6(1)(c) of the GDPR.

To the extent that processing is necessary to protect our legitimate interests or the legitimate interests of a third party, and no overriding interests, fundamental rights, or fundamental freedoms on your part stand in the way, it is carried out on the basis of Article 6(1)(f) of the GDPR.

To the extent that information is stored on or retrieved from your device, this is additionally governed by the provisions of the Telecommunications and Digital Services Data Protection Act (TDDDG).

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations.

Unless a more specific retention period is stated in this Privacy Policy, we will delete your personal data as soon as the purpose of processing no longer applies. If statutory retention obligations apply, the data will be deleted upon expiration of the respective retention periods.

We use external service providers to assist us in operating the website and providing our services. Where necessary, these service providers are engaged on the basis of a data processing agreement in accordance with Article 28 of the GDPR.

These recipients or categories of recipients may include, in particular:
- hosting and infrastructure service providers,
- booking and communication service providers,
- analytics and optimization service providers,
- IT and support service providers,
- payment, shipping, or tax service providers, to the extent that this is necessary for the fulfillment of the contract in individual cases.

To the extent that we engage service providers based outside the EU or the EEA, or that service providers engage subcontractors in third countries, personal data may be transferred to third countries.

Such transfers will only take place if the legal requirements are met. This is done, in particular, on the basis of an adequacy decision by the European Commission or appropriate safeguards, specifically standard contractual clauses pursuant to Article 46 of the GDPR.

Our website is hosted on Webflow. In doing so, we process personal data necessary for the technical operation, stability, and security of the website.

This may include, in particular, technical connection data, server log data, IP addresses, browser information, device information, and usage data.

The processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and efficient operation of our website.

When you visit our website, your browser automatically transmits information to our website’s server. This information is temporarily stored in what are known as server log files.

In particular, the following information may be collected:
- IP address,
- Date and time of access,
- Browser type and version,
- Operating system used,
- Referrer URL,
- Hostname of the accessing computer,
- Pages and files accessed.

Processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and uninterrupted provision of the website, as well as in the prevention and analysis of technical malfunctions or cases of misuse.

Our website uses cookies and similar technologies.

We use technically necessary cookies to ensure that the website functions properly, is secure, and is user-friendly. The legal basis is Art. 6(1)(f) of the GDPR and § 25(2) of the TDDDG.

We use non-technically necessary cookies or similar technologies—particularly for analytics, convenience features, or external services—only with your consent. The legal basis is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

You can revoke or modify your consent at any time with future effect via the cookie settings on our website.

When you contact us via the contact form, email, or phone, we process the data you provide in order to handle your inquiry.

This may include, in particular, your name, email address, phone number, the content of your inquiry, and, if applicable, any additional information you voluntarily provide.

Processing is based on Article 6(1)(b) of the GDPR, provided your inquiry relates to the conclusion or performance of a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the efficient handling of inquiries and communication with prospective and existing customers.

We will delete this data as soon as your inquiry has been fully processed, provided there are no legal retention requirements or further storage is necessary for the performance of a contract.

When you request services, make a reservation, or order gift certificates or other offers through our website, we process the data necessary for these purposes.

This may include, in particular, your name, address, contact information, contract and order details, communication data, and, if applicable, payment information.

Processing is based on Article 6(1)(b) of the GDPR for the purpose of taking pre-contractual measures and fulfilling the contract, as well as on Article 6(1)(c) of the GDPR to the extent that statutory retention and documentation requirements apply.

Due to commercial and tax law requirements, contract-related data may be retained for up to 6 or 10 years.

We use the tivent booking software for online appointment scheduling.

When you book an appointment through our website or use a tivent booking interface, the data you enter is processed for appointment management and communication purposes. This may include, in particular, the following data:
- First and last name,
- Email address,
- Phone number, if requested,
- Appointment and booking details,
- Optional comments or messages,
- Technical usage data.

Processing is based on Article 6(1)(b) of the GDPR, insofar as the booking serves to initiate or fulfill a contract. To the extent that processing is necessary for the secure technical operation and organization of the booking system, it is additionally based on Article 6(1)(f) of the GDPR.

Tivent processes the data on our behalf. In connection with the operation of the booking software, additional technical service providers may be engaged by Tivent, in particular for hosting and system emails.

If you book through Tivent, Tivent’s privacy policy also applies to its own processing as the provider of the booking software. To the extent that you request services, make reservations, or order gift certificates or other offers through our website, we process the data necessary for these purposes.

We use a Superchat chat widget on our website to process inquiries quickly and in an organized manner.

When you use the live chat, we process the data you enter in the chat. This may include, in particular:
- Name or a display name of your choice,
- Contact information, if provided by you,
- Content of your message,
- Date and time of the communication,
- Technical usage data,
- Any additional information or attachments you may have submitted.

Processing is based on Article 6(1)(b) of the GDPR insofar as it relates to the initiation or performance of a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in efficient customer communication and the structured handling of inquiries.

To the extent that consent is required to load the chat widget or the associated technologies, processing in this regard is based on Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Superchat acts as a data processor on our behalf.

We offer you the option to contact us via WhatsApp as well. We use Superchat to manage and process this communication.

When you contact us via WhatsApp, we process the following in particular:
- your phone number,
- your profile name and, if applicable, your profile picture, to the extent provided by WhatsApp,
- message content,
- attachments such as images, files, or voice messages,
- communication and metadata.

Processing is based on Article 6(1)(b) of the GDPR, insofar as the communication serves the purpose of entering into or performing a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring customer-friendly and prompt communication.

Please note that when using WhatsApp, additional data processing takes place by WhatsApp or Meta, over which we have no complete control. This applies in particular to the processing of metadata by the respective platform provider.

Within Superchat, we use an AI assistant that automatically responds to incoming inquiries or assists with the preliminary structuring and processing of messages.

The AI only responds after you have actively contacted us. As part of this feature, the content of your message may be processed to generate an appropriate response, categorize inquiries by topic, or make our communication more efficient.

Processing is based on Article 6(1)(b) of the GDPR to the extent that the communication serves the purpose of entering into or performing a contract. Otherwise, it is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the prompt, consistent, and efficient handling of incoming customer inquiries.

No decision is made exclusively by automated means within the meaning of Article 22 of the GDPR that produces legal effects concerning you or similarly significantly affects you.

Please refrain from providing any sensitive information in the chat that is not necessary for your inquiry, if possible.

We use Hotjar to better understand user behavior on our website and to make our website more user-friendly.

In particular, Hotjar may collect:
- pseudonymized usage and interaction data,
- clicks,
- scrolling and mouse movements,
- pages visited and page usage,
- device and browser information,
- technical information about the visit,
- survey data or feedback, if applicable, provided that the corresponding features are used.

Hotjar is used only with your consent. The legal basis is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect.

If we embed YouTube videos on our website, personal data is not processed until you activate or play the video in question.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Through this embedding, IP addresses, device information, and usage data, in particular, may be transmitted to YouTube or Google. Use of this feature is subject to your consent, where such consent is required. The legal basis is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

If we embed Google Maps on our website, personal data is transmitted to Google when the map loads.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In particular, IP addresses, location data, usage data, and device information may be processed. This data is used only with your consent, to the extent that such consent is required. The legal basis is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

On our website, we provide links to our social media profiles. These are generally simple links. When you click on one of these links, you leave our website, and the privacy policy of the respective provider applies.

Data is typically not transmitted to the respective platform until you actively click on the link.

We take appropriate technical and organizational measures to protect your data against loss, tampering, unauthorized access, and other unauthorized processing. We continuously improve our security measures in line with technological advancements.

Under applicable law, you have the following rights in particular:
- Right of access pursuant to Art. 15 GDPR,
- Right to rectification pursuant to Art. 16 GDPR,
- Right to erasure pursuant to Art. 17 GDPR,
- Right to restriction of processing pursuant to Art. 18 GDPR,
- Right to data portability pursuant to Art. 20 GDPR,
- Right to object pursuant to Art. 21 GDPR,
- Right to withdraw consent with future effect.

To exercise your rights, simply send us an informal notice, for example via email to info@gpi-fitting.com.

To the extent that we process your data pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your data for such marketing purposes.

You have the right to file a complaint with a data protection supervisory authority regarding our processing of your personal data.`

We reserve the right to amend this Privacy Policy if required due to legal, technical, or organizational changes. The most recent version published on our website is always the one that applies.