This policy describes how TrackDataGolf (“we”), available at www.trackdatagolf.com, collects and processes your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1 Data controller
The controller is the publisher of TrackDataGolf. For questions about your data or to exercise your rights, use our contact form.
2 Data we collect
Depending on the features you use, we may process:
- Account data: first and last name, email address, password stored only in hashed form, golf handicap, and account type (player or coach).
- Golf profile data: information about your golf activity, relationship with a coach, unit system, language, and notification preferences.
- Activity data: test results, practice sessions, completed drills, reports, and improvement history.
- Coach–player relationship: when a relationship is active, the associated coach can view the activity data needed to coach the player.
- Technical data: session identifiers, technical logs, and IP address needed for operation and security.
- Contact data: name, email address, subject and message content, and the temporary code used to verify your address.
3 Purposes and legal bases
- Create and manage your account — performance of a contract (GDPR Article 6(1)(b)).
- Provide tests, drills, reports, and coaching tools — performance of a contract.
- Verify your email address and respond to requests — performance of a contract and legitimate interests related to security.
- Send transactional emails — performance of a contract.
- Send the activity summaries selected in your preferences — based on your choice, which you can change at any time in your profile.
- Prevent abuse and secure the service — legitimate interests (GDPR Article 6(1)(f)).
- Comply with our legal obligations — legal obligation (GDPR Article 6(1)(c)).
4 Recipients and service providers
Access to data is limited to the people and service providers who need it to operate the service:
- o2switch — website and database hosting and email delivery.
- Cloudflare Turnstile — anti-bot protection for the contact form.
- YouTube — delivery of certain videos embedded in practice content. Technical data may be transmitted when these videos load.
We do not sell or rent your personal data.
5 Retention periods
- Account and profile: for the life of the active account, followed by deletion or anonymization as required by applicable obligations.
- Performance and practice data: while the account remains active, unless deletion is requested or a legal obligation requires otherwise.
- Contact verification codes: until used or until they expire after 15 minutes.
- Contact messages: for the time needed to process and follow up on the request.
- Technical logs: for a limited period proportionate to security and maintenance needs.
6 Cookies and third-party services
TrackDataGolf uses strictly necessary cookies for authentication, session continuity, and security. They do not require prior consent.
Cloudflare Turnstile may process technical data to distinguish legitimate users from bots. Some pages also embed YouTube videos, which may communicate with Google services when loaded.
7 Security
We apply appropriate technical and organizational measures: HTTPS connections, hashed passwords, restricted access, email verification, request rate limits, anti-bot controls, and security logging.
8 Your rights
In particular, you have the following rights:
To exercise a right, contact us through the contact form and provide the email address associated with your account. Proof of identity may be requested only if there is reasonable doubt about your identity.
Exercise my rights9 Transfers outside the European Union
Primary hosting is located in France. Some international providers, including Cloudflare and Google, may process data outside the European Union. Such transfers are governed by safeguards provided under the GDPR, such as an adequacy decision or Standard Contractual Clauses.
10 Complaint to the CNIL
If you believe your rights have not been respected after contacting us, you may lodge a complaint with France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL): www.cnil.fr.
11 Changes to this policy
This policy may change as service features or regulations evolve. The update date shown at the top of the page identifies the version currently in effect.