Home > Privacy Policy

Privacy Policy

1 Background

This policy outlines how we at DiscGolfPark comply with the EU General Data Protection Regulation (GDPR) when collecting and processing personal data.

Spin18 Oy, 1723737-0 (the Company, “we”, “our”) is the data controller in relation to the processing of your personal data, unless otherwise stated.

In this notice, we describe how we collect, process, and share the personal data that we store. Personal data means any information which may be used to identify an individual.

It is important to us that you feel safe with how we handle your personal data. We take measures to ensure that your personal data is protected and that the processing of your personal data is carried out in accordance with applicable data protection regulations and our internal policies and procedures.

This policy covers the website discgolfpark.com and its language versions, our contact and offer request channels, our newsletter, and the accounts used by DiscGolfPark designers and partners.

2 From where do we collect your personal data

We may collect your personal data in the following ways:

Personal data that we collect from you

We collect your personal data when you contact us or send us an offer request through the forms or contact details on our website, when you subscribe to our newsletter, and when you are granted a designer or partner account for managing course content.

Personal data that we collect or generate automatically

When you visit our website, it will automatically collect some personal data about you and your visit such as your IP address.

Personal data that we collect from other sources

In a business context, we may collect contact details of representatives of municipalities, companies and other organisations from public sources such as organisation websites and public registers.

3 When and why we process your personal data

We process your personal data for the following purposes:

Customer communication and offer requests

We have contact and offer request forms on our website that collect your personal data when you submit the form, and we process the correspondence that follows.

  • Categories of personal data: Identification data. Contact data, such as email address and phone number. Organisation data, such as company or municipality and country. Communication data.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (b), performance of a contract or steps taken at your request prior to entering into a contract, and GDPR Article 6 (1) (f), our legitimate interests. The processing is necessary in order to respond to your enquiry, prepare an offer, and manage the resulting customer relationship.
  • Storage period: Your personal data is processed during the customer relationship and for 3 years after our last contact with you. Enquiries that do not lead to a customer relationship are deleted 2 years after the last contact.

Marketing and newsletter

If you have subscribed to our newsletter, we will process the following personal data to send you our newsletter and to advertise our services.

  • Categories of personal data: Contact data, such as email address. Language preference. Information generated by the use of our newsletter, such as whether a message was opened and which links were clicked.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (a), your consent. The processing is necessary in order to send our newsletter to our newsletter subscribers and to measure and develop it.
  • Storage period: Your personal data is processed until you unsubscribe from the newsletter, or after 24 months of continuous inactivity. You can withdraw your consent at any time using the unsubscribe link in any newsletter.

Designer and partner accounts

We process personal data in order to give DiscGolfPark designers and partners access to publish and maintain course information on our website.

  • Categories of personal data: Identification data. Contact data, such as email address. Account data, such as username and role. Content data.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (b), performance of the contract to which the data subject is party, and GDPR Article 6 (1) (f), our legitimate interests. The processing is necessary in order to administer the accounts and to keep our systems secure.
  • Storage period: Your personal data is processed during the designer or partner relationship and for 12 months thereafter.

Publishing course information

We publish information about DiscGolfPark courses on our website, which may include the name of the course designer and information about the course owner or operator.

  • Categories of personal data: Identification data. Contact data. Content data.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (f), our legitimate interests. The processing is necessary in order to document and present DiscGolfPark courses and the designers who created them.
  • Storage period: Your personal data is processed as long as it is necessary in relation to the purposes for which they are processed.

Legal compliance

We process your personal data to comply with legal requirements such as tax and accounting regulations.

  • Categories of personal data: Identification data. Contact data.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (c), compliance with our legal obligations. The processing is necessary in order to comply with legal requirements such as tax and accounting regulations.
  • Storage period: Documentation and verifications concerning financial year accounts are stored for 6 years from the end of the relevant accounting year.

4 Cookies

We use cookies on our website. Cookies are small text files that are stored in your device when you visit our website. Cookies are divided into necessary and other cookies. Our website needs necessary cookies in order to store user-specific information and settings. These may include, for example, the logged-in user’s session, the language or region selection, your cookie choices, and any other display settings. It is not required to ask a specific permission to set necessary cookies, because these are necessary to provide the website and its functionalities to you.

In addition to necessary cookies, we use other cookies:

Analytics

We process your personal data in order to analyse the use and content of our website.

  • Categories of personal data: Information generated by the use of the website, such as IP address.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (a), your consent. The processing is necessary to analyse the use of our website and to develop it.
  • Storage period: Analytics data is stored for a maximum of 14 months from your visit.

Marketing

We process your personal data in order to measure the effectiveness of our marketing and to show you relevant content on other platforms.

  • Categories of personal data: Information generated by the use of the website, such as IP address and cookie identifiers.
  • Legal basis: The legal basis for processing is GDPR Article 6 (1) (a), your consent. The processing is necessary to measure and develop our marketing.
  • Storage period: Marketing data is stored for a maximum of 12 months from your visit.

You can accept or reject cookies that are not necessary when you first visit our website, and you can change your choices at any time. A full list of the cookies we use, including their purposes and lifespans, is available in our Cookie Policy. You can also block or delete cookies in your browser settings, although some parts of the website may then not work as intended.

5 Recipients that we share your personal data with

Where necessary, we share your personal data with others.

Service providers

In order to fulfil the purposes of the processing of your personal data, we share personal data with service providers that we have engaged. These service providers provide IT services to us such as operation, technical support and maintenance of IT systems, website hosting, newsletter delivery and analytics. The service providers may only process your personal data for these purposes and in accordance with our instructions and not for their own purposes.

We are the data controller for the processing of personal data that the service providers carry out on our behalf.

Group companies

In certain cases, we share your personal data with group companies for example for reporting purposes. In these cases sharing means mostly giving access.

  • Recipient: Discmania Inc.
  • Purpose: Reporting and conducting shared business purposes.
  • Legal basis for the transfer: Legitimate interest, GDPR Article 6 (1) (f).

The DiscGolfPark sales and designer network

DiscGolfPark operates through sales managers and course designers in several countries. If your enquiry concerns a country covered by one of them, we forward your enquiry to the relevant contact so that they can respond to you. Some of these contacts work for independent companies, in which case they are the data controller for their own processing of your personal data.

  • Recipient: DiscGolfPark sales managers, designers and distributors.
  • Purpose: Responding to enquiries and offer requests concerning their country or region.
  • Legal basis for the transfer: Legitimate interest, GDPR Article 6 (1) (f).

Other recipients

In certain cases, we share, if necessary, your personal data with other recipients for certain purposes. Examples of recipients are external advisors, authorities, courts, the police and potential buyers or sellers of the company.

  • Recipient: External advisors.
  • Purpose: If necessary, we may share information with external advisors, e.g. to a law firm, if the sharing of personal data is necessary for us to prepare for and defend ourselves against any legal claims that may be made against us.
  • Legal basis for the transfer: Legitimate interest, GDPR Article 6 (1) (f).

6 Where we process personal data

We always strive to store and process personal data within the EU/EEA. However, some of our service providers are located outside the EU/EEA and in such a case personal data will be processed outside the EU/EEA. In order to ensure that the personal data is protected we make sure that appropriate safeguards are in place in relation to the service providers which handle your personal data outside the EU/EEA, e.g. by way of adopting standard data protection clauses adopted by the EU Commission. If you have questions regarding to which countries your personal data is transferred and which safeguards we take to protect your personal data, or to request a copy of such safeguards and information, respectively, where they are available, please contact us at europe@discgolfpark.com.

7 Your rights

Under data protection regulations you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfil your rights. Please submit requests for exercising your rights by contacting us at europe@discgolfpark.com.

You have the right to:

Access your personal data

You have the right to access personal data we process about you. You may request a copy of your personal data. We will provide you with it unless we have lawful reasons not to share this data or if sharing the data would adversely affect the rights and freedoms of others.

Update your personal data

Furthermore, you have the right to request that incorrect or incomplete personal data is corrected or completed.

Withdraw consent

To the extent we rely on your consent to process personal data you have the right to at any time withdraw your consent. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Object to the processing of personal data

You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concern your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

Delete your personal data

Under certain circumstances you have the right to request that your personal data is deleted. However, we cannot delete your personal data if we for example are obligated under law to keep the data.

Restrict the use of your personal data

You have the right under certain circumstances to request that the processing of your personal data is restricted. If the processing of your personal data has been restricted we may only, besides storing the data, process your personal data with your consent, in order to establish, exercise or defend legal claims or to defend rights of others.

Transfer your personal data (data portability)

Finally, you have the right to request a copy of the personal data that we store about you in a structured, commonly used and machine-readable format (data portability). The right to data portability, compared to the right to access, only comprises such personal data you yourself have provided and which we process based on certain legal grounds, e.g. your consent.

8 We can update this information

We may occasionally update this information, e.g. if we would process personal data for new purposes, collect additional categories of personal data or share personal data with other recipients. In such a case we will notify you in an appropriate way. The latest version of the information is always published on this page.

9 Contact

If you have any questions regarding the processing of your personal data, please do not hesitate to contact us. See below for contact details.

Spin18 Oy / DiscGolfPark
1723737-0
E-mail: europe@discgolfpark.com
Phone: +358 10 231 2550
Postal address: Etu-Hankkionkatu 18
33700 Tampere, Finland

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority within your jurisdiction. In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki, tietosuoja@om.fi, tietosuoja.fi.

10 Information regarding categories of personal data

The list below explains which categories of personal data we process.

  • Identification data: name.
  • Contact data: email address, phone number, postal address.
  • Organisation data: company or municipality, role, country.
  • Communication data: content of the communication you have with us.
  • Content data: content of the information you provide in our forms or publish through a designer or partner account.
  • Account data: username, role and access rights.
  • Information generated by the use of the website: information generated by the use of our website, such as IP addresses and cookie identifiers.

Last updated: 24th of August, 2026