Privacy policy

1. Data controller

TeeGuard AB is the data controller for data processed through this website and in our contact with customers.

When TeeGuard is used on a golf course, the golf club is the data controller for the camera monitoring and TeeGuard is its data processor, under a data processing agreement with the club.

Contact: info@teeguard.ai, Löjtnantsgatan 7, 553 38 Jönköping, Sweden.

2. Data from the website

The website has two first-party cookies: a necessary one that stores your cookie choice and, if you accept it, one that remembers the language. With your consent the language is picked from your browser's language and time zone; this is worked out in your browser, and neither the time zone nor your location is sent to us. We use no web analytics. There is more in the cookie policy.

When you visit the website, your IP address and browser information (user agent) are kept in the server's access log. It is used only for operations and to limit misuse, stays in the same region as the website and is deleted after at most 90 days.

When you send the contact form we process your name, golf club, email address, number of holes and message, and your phone number if you provide it. The request is stored in our database, and a notification with the same details is sent to our email inboxes. Your IP address and browser information are not stored with the request. The service that receives the form counts requests per IP address in memory, without storing the address itself, to limit how many can be sent in a short time. As with other visits, the address may appear in the service's operations log, which is deleted after at most 90 days.

3. Data from cameras on the golf course

When TeeGuard is installed on a course, data is processed on the golf club's behalf. An encrypted video stream is sent to TeeGuard's service in the same region. The service looks for people, not faces, and the head of every person detected is blurred in memory before anything is stored in the cloud. No video is stored.

What is stored is the number of people, the time, clothing colour, a rough height band (a 10 cm range, never an exact height) and one blurred image per event. The blurred image is deleted within 24 hours and the other data after 30 days, unless agreed otherwise with the club.

Questions about camera monitoring on a particular course should go first to the golf club, which is the data controller.

4. Legal basis

• Legitimate interest: to answer enquiries and to run and develop the service.
• Contract: when you are a customer or represent one.
• Legal obligation: when the law requires us to keep data, such as accounting records.

5. How long we keep data

• Contact requests: 24 months from when the request arrived, both in the database and in the notification emails in our inboxes, which are cleared by then at the latest. Email us at info@teeguard.ai and we will delete the request and the notification emails sooner.
• Customer data: for as long as the agreement runs, and then for as long as the law requires (accounting records for seven years).
• Data from cameras: as described in section 3.

6. Who has access

Data is handled by TeeGuard staff and by sub-processors who need it to deliver the service, such as our hosting provider. Sub-processors are bound by agreements. We do not sell data or share it for marketing.

The database and the images are stored within the EU/EEA, and requests from the contact form are kept there too. The notification about a new request is sent through Mailgun in the EU to our email inboxes at Google Workspace. Transfers to countries outside the EU/EEA are made only with safeguards under the GDPR, such as the European Commission's standard contractual clauses.

7. Your rights

You have the right to know what data we hold about you, to have incorrect data corrected and to have data erased. You can ask us to restrict processing, object to processing based on legitimate interest and receive your data in a structured format.

Contact us at info@teeguard.ai. We reply within 30 days. You can also complain to the Swedish Authority for Privacy Protection (IMY).

8. Security

We protect data with encrypted traffic, encrypted storage in the cloud, access control and logging. If a personal data breach must be reported under the GDPR, we report it to the Swedish Authority for Privacy Protection (IMY) within 72 hours of becoming aware of it.

9. Changes

We update this policy when our processing changes. The date of the latest change is shown at the top of the page, and we inform customers directly of significant changes.