Legal

Privacy policy

We process as little data as possible. This page explains what happens when you visit the website, request a club valuation or make a purchase enquiry.

Data controller

Strickland Golf Services, owner Jonathan Strickland, at Golf & more Duisburg,Altenbrucher Damm 92a, 47269 Duisburg. Phone +49 173 7335481, Email strickland-golf@web.de.

Accessing the website

When you visit the site, technically necessary connection data is processed so the page can be delivered. We do not use analytics or advertising services, embed external fonts or scripts, or use tracking cookies.

To protect against bulk form submissions, we count requests per sender. We do not store IP addresses for this purpose, only a one-way hash that is deleted within 24 hours. The legal basis is our legitimate interest in preventing misuse of our website under Art. 6(1)(f) GDPR.

Cookies and browser storage

We do not use cookies. In your browser we only store what you trigger yourself: if you save clubs in the used-clubs section, this list stays locally in your browser (Local Storage, key "sgs-merkzettel") and is not sent to us. This is required for the function you asked for, § 25(2) no. 2 TDDDG. You can delete the list in your browser at any time.

Google Maps

The map showing our location only loads when you tap "Load map". Before that there is no connection to Google. After that, your IP address and device and browser information are transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to Google LLC in the USA is possible. The legal basis is your consent given by tapping, Art. 6(1)(a) GDPR and § 25(1) TDDDG; it applies only to that page view and is not stored. Transfers to third countries are based on the EU-US Data Privacy Framework and Google's standard contractual clauses. More information: Google’s privacy policy.

Club valuation (trade-in)

For a valuation, we process your club details along with your name, email address and, optionally, phone number. The legal basis is Art. 6(1)(b) GDPR (steps taken prior to entering into a contract).

The result is always a non-binding estimate. It does not constitute an automated decision with legal effects within the meaning of Art. 22 GDPR; Jonathan Strickland determines the final value after the on-site inspection.

Photo upload and AI recognition

Uploading photos is voluntary and only happens with your explicit consent, Art. 6(1)(a) GDPR. The image is reduced in size in your browser and analysed to recognise brand, model and condition. If you submit the request, we store the photos together with the request in protected storage so the club can be assessed in advance. Only the administrator has access, via a secured login with two-factor authentication; images are shown via time-limited links. Photos are deleted automatically after 90 days. You can withdraw your consent at any time with effect for the future; on request we delete the photo immediately.

Please don’t upload photos showing people, number plates or anyone else’s personal details.

For photo recognition and the value estimate we use the AI model Claude by Anthropic via the Amazon Bedrock service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Processing takes place in the European Union: the request is sent to the AWS region Stockholm (eu-north-1); AWS processes it within the European Union, never outside. The photos and your details about the club are transmitted only for the analysis, are not stored by the provider and are not used to train AI models. Anthropic itself does not receive the photos. A data processing agreement under Art. 28 GDPR is in place with AWS. The result is a suggestion that you check and can correct.

Used club purchase enquiries

For a purchase enquiry, we process details of the item you're interested in, your name, email address, optional phone number and your message so we can respond. The legal basis is Art. 6(1)(b) GDPR. There is no online payment; we do not collect any payment details.

Contact form and work order

Through the contact form and the work order we process your name, email address, optionally your phone number, your message and the details of your clubs and the work you want done, in order to answer your enquiry and carry out the order. The legal basis is Art. 6(1)(b) GDPR. For a work order you receive a personal link where you can see its status without logging in; only you know this link.

Handling of enquiries

Jonathan Strickland handles enquiries, work orders and used clubs in the business app Corvaly by Hermes & Ajder AI Solutions GbR, Westhauser Straße 43a, 42857 Remscheid, Germany. The data stays in our database in Frankfurt am Main; Corvaly only displays it in the protected admin area after a login with a second factor. To notify about a new enquiry, Corvaly only receives the type of enquiry and its reference number, no names or contact details. Corvaly is also operated in Frankfurt am Main. A data processing agreement under Art. 28 GDPR is in place with Hermes & Ajder.

WhatsApp and links to other websites

Some buttons open WhatsApp with a prepared message. WhatsApp only opens when you tap them; there is no connection before that. Whatever you send there is processed by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, under its own privacy policy; a transfer to the USA is possible. If you would rather not, call us or use the contact form.

Links to golftimer for booking and to our partners lead to their own websites. We do not pass on any data; the privacy policy of the respective provider applies there.

Retention period

Purchase and contact enquiries are deleted completely twelve months after they were received. For trade-in enquiries and work orders we remove name, contact details and message after twelve months; the remaining details (clubs, work, status) are kept anonymously for valuation statistics and possible warranty questions. On request we delete earlier, unless statutory retention obligations apply. Photos are deleted after 90 days, access counters after 24 hours, internal access logs of the admin area after twelve months.

Hosting and database

The website is delivered through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. A transfer to the USA cannot be ruled out; Cloudflare is certified under the EU-US Data Privacy Framework, and the EU Commission's standard contractual clauses apply in addition. Database and photo storage are hosted by Supabase Inc. in the Frankfurt am Main data centre. The website does not send you any automatic emails; Jonathan Strickland gets in touch personally, by phone, WhatsApp or email. Data processing agreements under Art. 28 GDPR are in place with all service providers used.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent you have given at any time with effect for the future. A quick email to strickland-golf@web.de is enough.

You can also lodge a complaint with a data protection supervisory authority. In North Rhine-Westphalia, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit NRW.