Privacy Policy

Last updated: October 30, 2026

Screengolfers OÜ ("Screengolfers", "we", "us", or "our"), a company registered in Estonia under registration number 16967267, operates the website screengolfers.com (the "Site"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or use our Site, including when you subscribe to a paid plan ("Paid Plan").

1. Data Controller

Screengolfers OÜ

Registration number: 16967267

Country of incorporation: Estonia

Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 3 / 5 / 7, 10145

Contact: [email protected]

2. What Data We Collect

2.1 Data you provide directly

  • Account information: When you create an account to list or claim a venue, we collect your name, email address, and password (or social login credentials via Google or other providers).
  • Venue information: If you list or claim a venue, we collect the business name, address, contact details, descriptions, images, and other information you submit about the venue.
  • Billing information: If you subscribe to a Paid Plan, we collect your company name, billing address, VAT number (where applicable), billing email, and your confirmation that you are subscribing as a business.
  • Communications: If you contact us, we collect the content of your messages and any information you choose to provide.

2.2 Payment data

Payments are processed by our payment provider, Stripe. Your full card details are entered directly with Stripe and are never stored on our servers. We receive limited payment information from Stripe, such as the card brand, last four digits, expiry date, payment status, and transaction history.

2.3 Data collected automatically

  • Usage data: Pages visited, links clicked, search queries, referral source, and interaction patterns on the Site.
  • Device and browser data: IP address, browser type and version, operating system, screen resolution, and language preferences.
  • Location data: Approximate geographic location derived from your IP address.

2.4 Data collected via cookies and similar technologies

We use cookies and similar tracking technologies as described in our Cookie Policy. This includes data collected by:

  • Google Analytics for traffic analysis and site performance
  • Cloudflare Analytics for performance monitoring and security
  • Our own tracking system for understanding user behavior and improving the Site
  • Stripe, during checkout, for payment processing and fraud prevention

3. How We Use Your Data

We process your personal data for the following purposes:

  • Providing our services: Operating the venue directory, processing account registrations, enabling venue listing and claiming.
  • Paid Plans and billing: Processing subscriptions and payments, issuing invoices, managing renewals, cancellations and plan changes, and sending payment-related notices such as receipts, renewal reminders, and failed payment alerts.
  • Fraud prevention and payment disputes: Detecting fraudulent transactions and responding to chargebacks or payment disputes.
  • Improving the Site: Analyzing usage patterns, diagnosing technical issues, and developing new features.
  • Analytics: Understanding how visitors use the Site to improve content, layout, and functionality.
  • Affiliate services: Facilitating product recommendations through our affiliate partners (AvantLink, Takomo) and tracking referral commissions.
  • Security: Protecting against fraud, abuse, and unauthorized access via Cloudflare.
  • Communications: Responding to your inquiries and sending service-related notices.
  • Legal compliance: Meeting our accounting, tax, and other obligations under applicable laws.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Consent: For non-essential cookies and tracking technologies (Article 6(1)(a) GDPR).
  • Contract performance: To provide our services when you create an account, list a venue, or subscribe to a Paid Plan, including processing payments (Article 6(1)(b) GDPR).
  • Legitimate interests: For analytics, security, fraud prevention, handling payment disputes, and improving our services, where these interests are not overridden by your rights (Article 6(1)(f) GDPR).
  • Legal obligation: Where processing is required to comply with applicable law, including retaining invoices and accounting records (Article 6(1)(c) GDPR).

5. Data Retention

  • Account data: Retained for as long as your account is active, plus 12 months after deletion to handle any outstanding matters.
  • Billing and transaction records: Retained for 7 years from the end of the financial year in which they were created, as required by the Estonian Accounting Act, even if you delete your account.
  • Analytics data (own tracking): Retained for up to 400 days.
  • Google Analytics data: Subject to Google's own retention settings (see Google's privacy policy).
  • Cloudflare Analytics data: Subject to Cloudflare's retention policies (see Cloudflare's privacy policy).
  • Affiliate data: Retained for the duration required by our affiliate partners' terms and applicable tax/accounting obligations.

6. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

  • Service providers: Cloudflare (CDN and security), Google (analytics), Hetzner (hosting), and authentication providers (social login).
  • Payment processing: Stripe processes payments on our behalf. For certain activities, such as fraud prevention and compliance with financial regulations, Stripe acts as an independent controller under its own privacy policy (stripe.com/privacy).
  • Accounting: Our accounting provider receives invoices and transaction records as required to keep our accounts and meet tax obligations.
  • Affiliate partners: AvantLink and Takomo receive limited data (such as referral identifiers and transaction data) necessary to track affiliate commissions.
  • Legal requirements: If required by law, regulation, legal process, or governmental request.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

7. International Transfers

Your data may be processed outside the European Economic Area (EEA), in particular by Google (United States), Stripe (United States), and Cloudflare (global network). Where transfers occur outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework, or adequacy decisions by the European Commission.

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten"), subject to our legal obligation to retain billing and accounting records
  • Restrict processing in certain circumstances
  • Data portability (receive your data in a machine-readable format)
  • Object to processing based on legitimate interests
  • Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. As an Estonian entity, our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), but you may also contact your local supervisory authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL via Cloudflare), access controls, and secure hosting infrastructure. Card payments are handled entirely by Stripe, which is certified to PCI DSS Level 1.

10. Children's Privacy

Our Site is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. For material changes affecting customers on a Paid Plan, we will notify you by email.

12. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data:

Screengolfers OÜ

Registry code: 16967267

Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 3 / 5 / 7, 10145

Email: [email protected]

Privacy Policy