Privacy Policy
Privacy Policy Hi1 Golf
1. Responsible party and contact details
The responsible party within the meaning of the GDPR is AFG Healthcare GmbH.
You can reach us by email at hi1-golf@afg-healthcare.com or by post at
the following address:
AFG Healthcare GmbH
Gmeinstraße 13
8055 Graz
Austria
2. Collection and processing of personal data
We collect personal information from you when you use our service in
or register with us. The data we collect
can be the following:
- Name, address, email address, telephone number
- Payment data such as credit card information, bank details
- information about your orders
- Information that you provide to us voluntarily, e.g. contact forms
We use your personal data primarily to fulfill our
contractual obligations towards you and to carry out our
We will not share your information with third parties unless
because this is necessary for the performance of the contract or you have expressly
If we share your information with third parties, we will
ensure that these third parties take appropriate security measures,
to protect your data.
Only if you have given your consent in accordance with Art 6 para 1 lit a GDPR
we will use the data you have provided to us when you gave us this consent for
also for other purposes, such as sending newsletters
etc. The exact purpose of use depends on the respective
Declaration of consent. Consent to the processing of your data
is voluntary and you can give your consent without having to
adverse consequences at any time.
This revocation is possible at any time, whereby we point out that up to
until your revocation is received, we will process your data lawfully
All data processing necessary for the performance of
contracts or to comply with legal obligations,
remain unaffected and can continue to be carried out.
If you withdraw your consent to the processing of your data
You will not suffer any disadvantage and we will not send you any (advertising)
Information is no longer transmitted.
We will only store your personal data for as long as
for the fulfillment of our contractual or legal obligations
is required.
2.1. Cookies
We use cookies and similar tracking tools to improve our services and personalize your user experience. Cookies are small files that are stored on your
computer or mobile device and information about your
Use of our website. You can deactivate the use of cookies in your browser at any time, but this may restrict certain functions of our website.
2.1.1. Google Analytics
Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies that enable analysis of the
Use of the website by its users. Your IP address will be
recorded, but immediately pseudonymized (by deleting the last 8 bits).
This means that only a rough localization is possible. The resulting
Information is transferred to the provider's server and stored there. Google uses this information on our behalf to evaluate your use of our websites and to compile reports on website activity. User data at Google is stored for a maximum period of 50 months. You can prevent this by setting your browser so that no cookies are stored. In addition, you can prevent the collection of data generated by the cookie and related to your
You can prevent Google from using the website-related data (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=de available browser plugin
download and install.
For more information about Google’s terms of use and privacy policy, please visit: http://www.google.com/analytics/terms/de.html
or under:
https://www.google.de/intl/de/policies/ .
The basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or
To transfer data there, Google uses so-called
Standard contractual clauses (=Article 46, paragraphs 2 and 3 of the GDPR).
Standard Contractual Clauses (SCC) are from the
The templates provided by the EU Commission are designed to ensure that your
Data comply with European data protection standards even if they
transferred to third countries (such as the USA) and stored there
Through these clauses, Google undertakes to process your
relevant data to comply with the European data protection level, even if
the data is stored, processed and managed in the USA. This
Clauses are based on an implementing decision of the EU Commission. You can find
the decision and the corresponding standard contractual clauses can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de .
Worth mentioning in this context are the efforts to create a new (third) Privacy Shield. The adequacy decision for the EU-US data protection framework has already been adopted by the European Commission (2023/4745 of July 10, 2023). The decision stipulates that the USA will ensure an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to US companies within the new framework. Based on the new adequacy decision, personal data can subsequently be safely transferred from
the EU to US companies participating in the framework without
that additional data protection safeguards must be introduced.
The Google data processing conditions, which correspond to the standard contractual clauses,
can be found at https://policies.google.com/privacy/frameworks?hl=de
You can find out more about the data processed through the use of Google Analytics in the Privacy Policy at https://policies.google.com/privacy?hl=de
2.1.2. ActiveCampaign
We also use the ActiveCampaign service for various purposes. ActiveCampaign is a software company from the USA with a branch in Ireland. Contact:
ActiveCampaign, Inc., 1 N Dearborn St., 5th Floor, Chicago, Illinois 60602, US.
ActiveCampaign is an integrated software solution that we use to cover various aspects of our online marketing. These include: email marketing, reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms.
Our registration service generally allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as the content of our website, is stored on servers of our software partner ActiveCampaign. We may use it to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all information collected solely to optimize our marketing measures.
More information about ActiveCampaign’s privacy policy: https://www.ActiveCampaign.com/legal/privacy-policy
More information from ActiveCampaign regarding EU data protection regulations: https://www.ActiveCampaign.com/legal/gdpr-updates/privacy-shield
You can find more information about the cookies used by ActiveCampaign here: https://www.ActiveCampaign.com/legal/cookie-policy
As part of the optimization of our marketing measures, the following data in particular can be collected and processed via ActiveCampaign:
In addition, we will also use ActiveCampaign to provide contact forms in the future. We use the ActiveCampaign service to provide you with online forms. To do this, we forward your data to ActiveCampaign, which stores the data
exclusively on our behalf. See the corresponding privacy policy for “ActiveCampaign”. Please note in this context:
If you contact us via contact forms, personal data
Data may be transmitted to service providers in third countries.
Worth mentioning in this context are the efforts to create a new (third) Privacy Shield. The adequacy decision for the EU-US data protection framework has already been adopted by the European Commission (2023/4745 of 10 July 2023). The decision stipulates that the USA
ensure an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to US companies within the new framework. Based on the new adequacy decision, personal data can now be transferred securely from the EU to US companies participating in the framework without the need to introduce additional data protection safeguards. In this context, the US Department of Commerce certifies those companies that ensure an adequate level of security under the GDPR. Active Campaign is one of the certified companies; the current list can be viewed on the US Department of Commerce website at: https://www.dataprivacyframework.gov/s/participant-search
More information about ActiveCampaign’s privacy policy: https://www.ActiveCampaign.com/legal/privacy-policy
More information from ActiveCampaign regarding EU data protection regulations: https://www.ActiveCampaign.com/legal/gdpr-updates/privacy-shield
You can find more information about the cookies used by ActiveCampaign here: ttps://www.ActiveCampaign.com/legal/cookie-policy
2.1.3. Hotjar
To improve the user experience on
We use the software Hotjar (http://www.hotjar.com, 3 Lyons
Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Using Hotjar
we can track user behavior (mouse movements, clicks, scroll height, etc.) on
our websites. For this purpose, Hotjar uses
Cookies on users' devices and can collect user data such as
Browser information, operating system, time spent on the site, etc.
For more information about data processing by Hotjar, see
You under www.hotjar.com/privacy .
2.1.4. Microsoft Clarity
To improve the user experience on
We use the software Microsoft Clarity
(http://clarity.microsoft.com, Microsoft Corporation, One Microsoft Way,
Redmond, WA 98952-6399, USA). Using Microsoft Clarity we can
User behavior (mouse movements, clicks, scroll height, etc.) on our
Measure and evaluate websites. For this purpose, Microsoft uses Clarity
Cookies on users' devices and can collect user data such as
Browser information, operating system, time spent on the site, etc.
For more information about data processing by Microsoft
Clarity can be found at https://privacy.microsoft.com/de-de/privacystatement .
2.2. Contact us
If you contact us via the contact form on the website or by email, the data you provide will be used exclusively to process your request and will not be processed further without your explicit consent. The purpose of the processing is solely to record and respond to the request.
2.3. Newsletter
If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our email newsletter. This is based on your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR and is used for electronic communication with you.
You can unsubscribe from the newsletter at any time by sending a message to the contact option described or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use or we reserve the right to process the data in any other way that is required by law and about which we will inform you in this declaration.
3. Data security
We use technical and organizational security measures to protect your personal data from loss, misuse, unauthorized access or disclosure. Our security measures are regularly reviewed and adapted to the current state of the art.
4. Transmission of your data to recipients
We may disclose your personal data to the following recipients
pass along:
- payment service providers to process payments
- delivery services and carriers to deliver your orders
- tax advisors and tax authorities to fulfill tax obligations
- IT service providers to provide technical support
5. Your rights as a data subject
You as the data subject have various rights with regard to the
processing of your personal data. These rights are set out in the GDPR
and include:
- Right to information: You have the right to request information about which personal
Data about you is stored and how it is processed. - Right to rectification: If your personal data is incorrect or incomplete, you have the right to request rectification or completion.
- Right to erasure (“right to be forgotten”): Under certain circumstances, you have the right to request the erasure of your personal data, for example if the data is no longer needed or has been processed unlawfully.
- Right to restriction of processing: Under certain circumstances, you have the right to request restriction of processing of your personal data
to request, e.g. if you dispute the accuracy of the data or the
processing is unlawful. - Right to object: You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
- Right to data portability: You have the right to receive a copy of your personal data in a structured, common and machine-readable format and to transmit this data to another controller.
- Complaint: You have the right to lodge a complaint with the data protection authority if you believe that the processing of your personal data violates the GDPR:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
You can assert your rights as a data subject against Hi1 Golf at any time by contacting us using the contact details provided in our privacy policy. We will respond to your request as soon as possible.
process and give you an answer. Please note that certain conditions and time limits may apply to exercising your rights.
6. Right of objection and revocation
You have the right to object to the processing of your personal data at any time for reasons related to your particular situation. This applies in particular if your data is processed on the basis of a legitimate interest. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms.
In addition, you have the right to withdraw your consent to the processing of your personal data at any time. Please note that withdrawing your consent does not affect the legality of the processing carried out up to the time of withdrawal.
To exercise your right of objection or revocation, you can contact us using the contact details provided in our privacy policy. We will process your request as quickly as possible and give you an answer.
7. Updating the Privacy Policy
You have the right at any time, for reasons related to your particular
situation, against the processing of your personal data
This applies in particular if your data is stored due to
of a legitimate interest. In this case, we will
no longer process your personal data unless compelling
legitimate grounds for processing outweigh your interests, rights
and freedoms.
In addition, you have the right to withdraw your consent to the processing
your personal data at any time. Please note that the
withdrawal of your consent, the legality of the processing carried out up to the withdrawal
Processing is not affected.
To exercise your right of objection or revocation, you can contact us at
using the contact details provided in our privacy policy. We
will process your request as quickly as possible and give you an answer.
8. Liability for links
We are not liable for the content of third-party websites over which we have no influence, regarding possible data protection violations. For the content (including personal information) of the linked pages the respective provider or operator of the pages is responsible.
We are unable to control the content of the linked pages without concrete evidence of violations of law. If any misconduct becomes known, we will to take action to remove those links.