Privacy policy

Protecting your personal data is important to us. This privacy policy explains what personal data we process when you visit zoomgolf.net, place an order, contact us, register a product, submit a warranty claim or otherwise interact with ZOOM, and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller

Golf Tech Golfartikelvertriebs GmbH
Carlbergergasse 66, 1230 Vienna, Austria
Companies register no.: FN 31852t · VAT ID: ATU15304908
Phone: +43 1 867 43 33
E-⁠mail: office@golftech.at

We have not appointed a data protection officer, as we are not legally required to do so. For all privacy matters, please contact us at the address above.

2. What data we process, and why

2.1 Visiting our website

Our website is provided by Vercel Inc. (USA) as our processor. When you visit the website, Vercel processes technical data (IP address, date and time of access, page visited, referrer, browser type and device information) in server logs to deliver the website securely and reliably. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR). Transfers to the USA are covered by Vercel's certification under the EU–U.S. Data Privacy Framework and EU Standard Contractual Clauses.

The fonts, images, videos and 3D models on our website are served by the website itself; your browser does not connect to any other provider for them.

2.2 Cart, orders and payment

Products, prices, availability, the cart and the checkout are provided by Shopify. Our shop is operated on the platform of Shopify International Limited, Victoria Buildings, 1–⁠2 Haddington Road, Dublin 4, Ireland, acting as our processor. When you add a product to your cart, our website creates a cart at Shopify and passes on your IP address so that Shopify can detect and limit abuse. The checkout is provided directly by Shopify; what you enter there is collected by Shopify on our behalf. Shopify may transfer data within the Shopify group, including to Shopify Inc. in Canada (covered by the European Commission's adequacy decision for Canada) and to other group companies on the basis of the EU Standard Contractual Clauses. Details: Shopify Privacy Policy.

When you place an order we process your name, billing and delivery address, e-⁠mail address, phone number, order details and payment information to perform the contract (Art. 6(1)(b) GDPR) and to meet statutory retention duties, in particular under tax law (Art. 6(1)(c) GDPR). Payment data is processed by the payment service provider you choose at checkout — currently Shopify Payments (including Shop Pay, Apple Pay, Google Pay, the card networks and the local payment methods shown at checkout) and PayPal (Europe) S.à r.l. et Cie, S.C.A.; we do not receive your full payment credentials. Delivery data is shared with our shipping partners to deliver your order.

2.3 Customer account

If you create a customer account, we process your account data (name, e-⁠mail, addresses, order history) until you delete the account or ask us to delete it. Customer accounts are provided by Shopify. Legal basis: Art. 6(1)(b) GDPR.

2.4 Is providing your data required?

Data marked as required in the checkout or in a form is needed to conclude or perform the respective contract or to handle your request — without it we cannot provide the service concerned. All other details (for example marketing preferences) are voluntary, and not providing them has no consequences for the service.

3. Cookies and consent

Strictly necessary cookies are used on the basis of our legitimate interest in providing the shop (Art. 6(1)(f) GDPR, § 165(3) TKG 2021): "zoom_cart" stores the identifier of your cart and is deleted after 10 days; Shopify stores your cookie preferences. All other cookies and similar technologies — analytics and marketing (sections 4.2 to 4.5) — are set only with your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Meta and Shopify analytics are not loaded before you consent; until then the Google tag runs in a restricted mode without cookies (section 4.3).

We ask for your consent through Shopify's cookie banner, which uses the same choice on our website and at checkout; Shopify records your choice as proof of consent. You can reopen the settings at any time via the "Cookie settings" link in the footer of our website and change or withdraw your consent with effect for the future.

We show the cookie banner in the countries where consent is required, in any case in the European Economic Area, the United Kingdom and Switzerland. If you visit our website from another country, the services named in sections 4.2 to 4.5 are loaded without asking first; you can object to them at any time via the "Cookie settings".

On the checkout pages, Shopify sets the cookies needed for payment. Where you have consented, the services named in section 4 also record your checkout there (e.g. starting checkout and the purchase).

4. Audience measurement, analytics and advertising

4.1 Vercel Web Analytics (without cookies)

For anonymous audience measurement we use Vercel Web Analytics from Vercel Inc. (USA), our hosting provider. It sets no cookies and stores nothing on your device. It records the page visited, the referring page, the country, and the device type, operating system and browser. The IP address is not stored; individual visits are told apart by a hash formed from the request, which is discarded after 24 hours. Visitors are not followed across other websites. Legal basis: our legitimate interest in improving our offering (Art. 6(1)(f) GDPR).

4.2 Shopify analytics (only with your consent)

With your consent to analytics cookies, our website sends page views, products viewed and cart actions to Shopify so that we can evaluate visits, sales and abandoned purchases in our shop reports. For this, Shopify sets cookies that recognise a visit and returning visitors, and acts as our processor (see section 2.2). You can withdraw your consent at any time via the cookie settings.

4.3 Google Analytics 4 and the Google tag

With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as our processor, to analyse how our shop is used. Google may transfer data to Google LLC in the USA; Google LLC is certified under the EU–U.S. Data Privacy Framework. IP addresses are not stored by Google Analytics 4. You can withdraw your consent at any time via the cookie settings.

As long as you have not consented, our website loads the Google tag in a restricted mode (Google Consent Mode): it sets no cookies, stores nothing on your device and transmits no advertising identifiers. Google then receives only cookieless signals about the page view (page visited, time, your consent status and technical details such as browser and IP address), which Google uses to model visits and conversions in aggregated form without recognising you. Legal basis: our legitimate interest in reliable audience and performance measurement (Art. 6(1)(f) GDPR). You can object to this at any time (Art. 21 GDPR), e.g. by e-⁠mail to office@golftech.at.

4.4 Google Ads and Google Merchant Center

With your consent to marketing cookies we use Google Ads conversion tracking and remarketing, and Google Merchant Center conversion measurement for our product listings; without consent, the restricted mode described in section 4.3 applies. For this advertising data, Google acts as an independent controller. Transfers to the USA are covered by Google LLC's certification under the EU–U.S. Data Privacy Framework.

4.5 Meta (Facebook/Instagram) marketing (only with your consent)

With your consent to marketing cookies we use the Meta Pixel and related Meta Business Tools of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, to measure and improve our advertising on Facebook and Instagram. For the collection and transmission of event data via the Meta Pixel, we and Meta Platforms Ireland are joint controllers; the essence of this arrangement is set out in Meta's Controller Addendum. Meta alone is responsible for the subsequent processing. Transfers to Meta Platforms, Inc. in the USA are covered by its certification under the EU–U.S. Data Privacy Framework.

5. Newsletter

If you subscribe to our newsletter, we process your e-⁠mail address (and name, if provided) to send it, using ActiveCampaign, LLC, 1 North Dearborn Street, Chicago, IL 60602, USA, as our processor. Transfers to the USA are covered by ActiveCampaign's certification under the EU–U.S. Data Privacy Framework and EU Standard Contractual Clauses. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every newsletter.

6. Customer service and helpdesk

For customer service we use Crisp, a chat and helpdesk service of Crisp IM SAS, 149 Rue Pierre Sémard, 29200 Brest, France, as our processor. Crisp processes your support enquiries — messages, e-⁠mail address, uploaded files and technical data — on servers in the European Union. When you contact us, we process your enquiry to answer it (Art. 6(1)(b) or (f) GDPR).

To organise our support efficiently, incoming conversations may be automatically categorised (e.g. "resolved / still open") with the help of an AI language-model service provided by Anthropic Ireland, Limited, as our processor under EU Standard Contractual Clauses. This is purely an organisational aid: excerpts of the conversation are analysed, no automated decision with legal or similarly significant effect is taken, and the content is not used to train AI models.

7. Contact form

The contact form on our website is operated on our own forms platform, hosted for us by Railway Corp. (USA; EU Standard Contractual Clauses / EU–U.S. Data Privacy Framework) with e-⁠mail delivery by Mailgun (Sinch group), processed in Mailgun's EU region. We process: name, e-⁠mail address, country, your message, and any details or images you provide. Your IP address is not stored with your enquiry and is not transmitted to any geolocation service. Images you upload are stored in a private storage bucket (Amazon Web Services, EU region) and are only accessible via short-lived secure links. Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in handling your enquiry (Art. 6(1)(f) GDPR); where we ask for your consent (e.g. for marketing e-⁠mails via ActiveCampaign, see section 5), Art. 6(1)(a) GDPR.

8. Product reviews

We manage the product reviews on our website with Judge.me, a reviews app for Shopify, as our processor. After an order we may invite you by e-⁠mail to review the product you bought. If you leave a review, Judge.me processes your name, e-⁠mail address, your review and any photos you upload. On our website we show only your first name with the initial of your last name, the stars, the text, the date, the verified-purchase label and your photos. Legal basis: our legitimate interest in genuine customer reviews (Art. 6(1)(f) GDPR) or the publication you request with your review (Art. 6(1)(b) GDPR). You can object to the invitation at any time.

9. Product registration and warranty claims

You can register your product via the product registration on our website; the form is provided by Shopify and the Shopify app "Product Registration" (Appsolve) as our processors. There, and for warranty or service requests, we process the data you provide: name, contact details, address, product and serial number, purchase information and proof of purchase, and photos of the product. Legal basis: performance of the warranty/service contract and the product registration (Art. 6(1)(b) GDPR); for optional marketing preferences, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting your product registration or your statutory warranty rights.

10. Sharing with our distributors

ZOOM products are serviced through a network of national distributors. If you submit a service request, warranty claim or product registration, we may forward your request — including your name, contact details and the details of your case — to the distributor responsible for your country, so that they can handle your case locally. Legal basis: performance of the contract or measures you have requested (Art. 6(1)(b) GDPR) and our legitimate interest in efficient local service (Art. 6(1)(f) GDPR). Where a distributor is located outside the European Economic Area and the European Commission has not issued an adequacy decision for the country concerned, we safeguard the transfer with EU Standard Contractual Clauses or, where applicable, rely on the derogation of Art. 49(1)(b) GDPR (transfer necessary for the performance of your request).

11. Social media

Where our website contains links to our social media profiles, these are plain links — no data is transmitted to the platforms until you click them. For our pages on those platforms, the respective platform's privacy policy applies.

12. International data transfers

Where we or our processors transfer personal data outside the European Economic Area, we ensure an adequate level of protection through: an adequacy decision of the European Commission (e.g. Canada, United Kingdom), the provider's certification under the EU–U.S. Data Privacy Framework, or the EU Standard Contractual Clauses, supplemented by additional safeguards where necessary. You can request a copy of the relevant safeguards via office@golftech.at.

13. Storage periods

Orders and invoices are kept for the statutory periods. For the other categories below, the periods stated are the target maximum periods we apply: deletions are carried out in periodic review runs and, at any time, immediately upon your request for erasure (Art. 17 GDPR).

• Orders and invoices: 7 years after the end of the financial year (§ 132 Austrian Federal Fiscal Code), longer where warranty or product-liability periods require.
• Warranty claims and product registrations: for the duration of the warranty and 12 months thereafter, unless a longer period is needed to establish, exercise or defend legal claims.
• Contact enquiries: up to 24 months after the enquiry is closed.
• Newsletter data: until you unsubscribe.
• Cart cookie: 10 days.
• Consent records (cookie banner): for as long as needed to prove consent.

14. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw any consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests; we will then stop the processing unless we have compelling legitimate grounds. You may object to direct marketing at any time without giving reasons.

To exercise your rights, contact office@golftech.at. You also have the right to lodge a complaint with a supervisory authority, in Austria: Datenschutzbehörde, Barichgasse 40–⁠42, 1030 Vienna, www.dsb.gv.at — or with the supervisory authority of your place of residence.

15. Automated decision-making

We do not use automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

16. Minors

Our shop is not directed at children. We do not knowingly collect personal data from children under 14.

17. Changes to this policy

We update this privacy policy when our services or the legal situation change. The current version is always available on this page.