Privacy policy

Privacy Policy

Last updated: 23 August 2026

This privacy policy explains what personal data we process when you visit wishbone.golf, place an order, or contact us, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Golf Tech Golfartikelvertriebs GmbH
Carlbergergasse 66, 1230 Vienna, Austria
Companies register no.: FN 31852t · VAT ID: ATU15304908
Phone: +43 1 867 43 33 · E-mail: office@golftech.at

2. Shop, orders and payment

Our shop is operated on the platform of Shopify International Limited (Ireland) as our processor; technical data (IP address, browser, pages visited) is processed in server logs to deliver the website securely (Art. 6(1)(f) GDPR). When you order, we process your name, addresses, e-mail, phone number, order and payment details to perform the contract (Art. 6(1)(b) GDPR) and to meet statutory retention duties (Art. 6(1)(c) GDPR). Payment data is processed by the payment provider you choose at checkout; we do not receive your full payment credentials. Delivery data is shared with our shipping partners.

3. Cookies

We currently use only strictly necessary cookies (cart, session), on the basis of our legitimate interest in providing the shop (Art. 6(1)(f) GDPR, § 165(3) TKG 2021). We do not use analytics or marketing cookies on this site. Should we introduce any, they will be used only with your prior consent via a cookie banner (Art. 6(1)(a) GDPR).

4. Contact form and customer service

Our contact form runs on our own forms platform, hosted by Railway Corp. (USA; EU Standard Contractual Clauses / EU–U.S. Data Privacy Framework) with e-mail delivery via Mailgun (Sinch group, EU region). We process the data you enter (name, e-mail, country, message, any images); your IP address is not stored with your enquiry. Enquiries are handled in our customer-service platform Crisp (Crisp IM SAS, France — EU servers). To organise support efficiently, conversations may be automatically categorised with the help of an AI language-model service of Anthropic Ireland, Limited, as our processor under EU Standard Contractual Clauses — an organisational aid only; content is not used to train AI models. Legal basis: Art. 6(1)(b)/(f) GDPR.

To have your enquiry handled locally, we may forward it — including your name, contact details and the details of your case — to the distributor responsible for your country (Art. 6(1)(b)/(f) GDPR; for distributors outside the EEA: EU Standard Contractual Clauses or Art. 49(1)(b) GDPR).

5. Marketing (only with your consent)

If you tick the optional marketing checkbox in our contact form or subscribe to our newsletter, we process your name and e-mail address with our marketing platform ActiveCampaign, LLC (USA; EU–U.S. Data Privacy Framework and EU Standard Contractual Clauses) to send you product information (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail.

6. Storage periods

Orders and invoices are kept for the statutory periods (in Austria generally 7 years). Contact enquiries are kept no longer than needed to handle them — our target maximum is 24 months after the enquiry is closed; deletions are carried out in periodic review runs and, at any time, immediately upon your request for erasure (Art. 17 GDPR).

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests and to direct marketing (Art. 21), and to withdraw any consent at any time (Art. 7(3)). Contact: office@golftech.at. You may lodge a complaint with a supervisory authority — in Austria: Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

8. Changes

We update this policy when our services or the legal situation change; the current version is always available on this page.