Privacy policy

The Golf Loft BV, trading as The Golf Loft, Kapellestraat 97, 9800 Astene, Belgium, is the controller for the data processed through this website.

• Enterprise number: 1019.957.077
• Email: info@golfloft.be
• Phone: +32 9 366 67 16

We have not appointed a data protection officer; that is not required for a company of this size handling this kind of data. Questions about your data reach us directly at the address above.

We collect nothing “just in case”. Every category below exists because a concrete part of the service does not work without it.

Your account

First name, surname, email address and an encrypted password, and optionally your handicap. Basis: performance of the contract — without an account you cannot log in, reach your membership or reach your bookings.

Bookings

Name, email address, phone number, the time, the simulator, the amount and the access code for the door. Basis: performance of the contract. We ask for your phone number so we can reach you if something goes wrong with your session.

Orders at the bar

Email address, the items ordered, any note and the location (table or bay). Basis: performance of the contract.

Payments

Amount, time, payment method and the Stripe reference. We never see your card number — you pay on Stripe’s own page. Basis: contract, and for the bookkeeping a legal obligation.

Credits and gift vouchers

The code, the balance, and every movement on it with the reason. Basis: performance of the contract. The history is needed to be able to show what happened to a balance.

Scores and standings

Your name and your scores in a competition. Note: the leaderboard is a public page, so your name is visible there to everyone. Basis: legitimate interest in a working competition. If you would rather not appear, tell us — we will take you out.

Newsletter

Only your email address. Basis: your consent, which you withdraw at any time through the link at the bottom of every newsletter.

Contact form

Name, email address and your message. These are not stored in a database: they are sent straight to our mailbox. Basis: legitimate interest in answering your question.

Technical logs

Use of access codes, the simulators switching on and off, emails sent and errors. An IP address is sometimes part of that. Basis: legitimate interest in the security of the building and the site, and in being able to work out what went wrong.

Till receipts we get from the till contain no data about who bought anything: only products, quantities and amounts.

We do not sell your data and do not pass it on for third-party advertising. We do work with a small number of service providers acting strictly on our instructions:

Supabase — database, login and file storage

Holds your account, your bookings, your orders and your scores. Processed in: Ireland (EU, region eu-west-1).

Stripe Payments Europe, Ltd. — online payments

Your card details never reach our servers: you pay on Stripe’s own page. Processed in: Ireland (EU), with transfer to the US under the European Commission’s standard contractual clauses.

one.com — outgoing email

Processes the email address and the content of the confirmation email. This covers confirmations, the newsletter and password recovery. Processed in: Denmark (EU).

Render — website hosting

Processes technical logs with IP address, needed to run and secure the site. Processed in: Belgium (EU).

Beyond that, we only pass data on where the law obliges us to, for instance to the tax authorities or to the police and judiciary on a valid request.

Your data sits in the European Union. The one exception is Stripe: it can transfer data to the United States, and does so on the basis of the European Commission’s standard contractual clauses. If you would rather make no online payment at all, you can pay at the counter.

Your account

As long as it exists, and then up to 2 years after your last activity. You can also have it deleted yourself.

Bookings, orders and payments

Seven years, because accounting law requires it of us.

Credits and gift vouchers

As long as there is a balance, and then seven years as part of the bookkeeping.

Scores

As long as the competition runs and afterwards in the historical standings, unless you ask for your scores to be removed.

Newsletter

Until you unsubscribe. After that we only keep the fact that this address unsubscribed, so you do not get emails again by accident.

Contact emails

At most one year in our mailbox, unless a case comes out of it.

Technical logs

At most twelve months.

Under the GDPR you have the right to:

• see what data we hold about you;
• have mistakes corrected;
• have your data erased, in so far as we are not legally required to keep it;
• have the processing restricted;
• receive your data in a readable file so you can take it with you;
• object to processing that rests on our legitimate interest, such as your appearance in the standings;
• withdraw your consent for the newsletter at any time.

Send an email to info@golfloft.be for that. We answer within one month. To avoid handing somebody else’s data to the wrong person, we may ask you to prove your identity.

If you are unhappy with how we handle it, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be.

No decisions about you are taken by a computer alone, and we do not build profiles of your behaviour. Prices depend on your membership and on the time, not on who you are or what you have done before.

You must be at least 16 to create an account yourself and book online. If you are younger, a parent or guardian does it for you. If we notice that a child’s account was created without that involvement, we delete it.

Your password is stored encrypted and is not readable by us. Traffic with the site goes over HTTPS. Access to the database runs through strict access rules, and the admin pages are only reachable by accounts with administrator rights. Complete certainty does not exist, but a breach that poses a risk to you is reported to the supervisory authority and, where needed, to you.

This site uses no trackers, no analytics software and no advertising cookies — so no cookie banner either. What is kept locally in your browser is set out on the Cookies page.

If what we process changes, we amend this text and change the date at the top. For a significant change we notify account holders by email.