Privacy statement
This statement explains how Nakkila Golf ry processes personal data on its website and in tee-time booking, competitions, the online shop, communications, and the membership and customer register. It is based on the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (1050/2018).
Updated [publication date]
Data controller
Nakkila Golf ry (business ID [Y-tunnus])
Suomalaisentie 71, 29250 Nakkila
nakkilagolf@nakkilagolf.fi · 02 537 4999
Please send any questions or requests about data protection to the email address above.
What data we process and why
Membership register
We process members' names, home municipality, contact details, date of birth, gender, membership number, Golf ID, handicap, type of membership, playing rights, and membership fee and invoicing details. The Finnish Associations Act (section 11) requires the club to keep a list of its members' names and home municipalities (Article 6(1)(c) GDPR). The other data is needed to run the membership under the club's rules, for example to invoice membership fees, manage playing rights and maintain membership and handicap records (Article 6(1)(b)). Member newsletters are based on the club's legitimate interest in communicating with its members (Article 6(1)(f)). The club also has junior members; data on members under 18 is processed on the same grounds.
Tee-time booking, competitions and the online shop
Name, contact details, Golf ID and handicap, and details of your bookings, entries and purchases. We need this data to handle your booking, entry or order, so the legal basis is a contract (Article 6(1)(b)).
What others can see
In tee-time bookings, the player's name, handicap and home club are shown on the tee sheet to other signed-in GolfBooker users. Competition entrants, groups, start times and results (name, home club, handicap and score) are shown on the club's competition pages, in the GolfBooker app and on results screens. Handicap-qualifying scores are sent to the Finnish Golf Union to calculate handicaps. This is based on the club's legitimate interest in organising shared play and competitions openly (Article 6(1)(f)). You can object to your name being shown by contacting the club.
Newsletter and other electronic messages
When you subscribe to the newsletter, we store your email address, the time of subscription, your IP address and browser details to verify your consent, and we mark you as a newsletter subscriber in the club's customer register. The club's emails contain a tracking image and tracked links that show us, per recipient, whether a message was opened and which links were clicked. We only send marketing messages by email or text message if you have agreed to receive them. The legal basis is your consent (Article 6(1)(a)). You can unsubscribe at any time using the link at the end of every message.
Security
Our servers process IP addresses and technical log data to protect the service against misuse. This is based on legitimate interest (Article 6(1)(f)). Logs are kept for [X] days.
Where the data comes from
We receive the data from you, from the Finnish Golf Union's membership and handicap system (Golf ID, handicap, memberships), and from the club's previous membership register.
Cookies
The site uses only cookies that are strictly necessary for it to work: if you sign in, the cookies needed to keep you signed in are stored in your browser. The site does not use statistics, marketing or third-party cookies, and visitor behaviour is not tracked.
Who receives the data
Finnish Golf Union
Membership, Golf ID and handicap data and handicap-qualifying scores are sent to the Finnish Golf Union, which is an independent controller of that data. When you book or enter a competition, we check your Golf ID and handicap in the Golf Union’s system.
Service providers
The website, tee-time booking, online shop and customer and membership register run on the GolfBooker service provided by Funect Oy (business ID [Funectin Y-tunnus]). Funect Oy processes the data on the club's behalf and on its instructions. As sub-processors, Funect Oy uses Hetzner Online GmbH and Supabase Inc. for servers and the database, Amazon Web Services for sending email, and Twilio Inc. for sending text messages.
The data is stored in the EU. Some of the providers belong to US groups, so data may also be accessed from the United States, for example for technical support or when text messages are sent. Such transfers are based on the European Commission’s decision on the EU-US Data Privacy Framework or on the Commission’s standard contractual clauses.
GolfBooker user account
You sign in with a GolfBooker account, which can also be used at other courses that use GolfBooker and in the GolfBooker app. Funect Oy is the controller of the account data; the account is described in GolfBooker's own privacy policy at golfbooker.app/privacy.
The club does not sell personal data.
Retention
Membership data is kept for the duration of the membership. When a membership ends, the data is deleted within [X] months, except for data needed to collect unpaid membership fees. Accounting records are kept as required by the Finnish Accounting Act: vouchers for 6 years and financial statements for 10 years from the end of the financial year.
Booking and entry data is kept for [X] months. Competition results are kept as the club’s competition history for [X]. Newsletter consent records are kept for [X] years after you unsubscribe, and your address stays on a block list so that it is not added again by mistake.
Do you have to provide the data
The data needed for membership, bookings and competitions is a condition for membership, booking or taking part. Subscribing to the newsletter is voluntary and does not affect your use of the website. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
Your rights
You have the right to access your data, ask for it to be corrected or erased, and restrict its processing. Where processing is based on consent or a contract, you can ask for your data to be transferred to another system. You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
Right to object: where processing is based on legitimate interest, you can object to it on grounds relating to your particular situation. You can always object to direct marketing.
Send your request to nakkilagolf@nakkilagolf.fi. We will reply within one month and may ask you to confirm your identity.
If you believe your data is being processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi) or with the supervisory authority in the country where you live or work.