Effective from: 7 October 2026

This Privacy Policy explains how falbergolf.com, s.r.o. processes personal data when you visit the online shop at falbergolf.com (including its language versions, e.g. cz.falbergolf.com), place an order, create a customer account or use our falbergolf mobile app for iOS and Android. It does not cover the FG Vector app, which has its own privacy policy at fgvector.com.

In short

  • We use your details mainly to deliver your order, take payment, issue invoices and handle returns and complaints.
  • Card, Apple Pay and Klarna payments are processed by Stripe and Klarna. We never see or store your full card number.
  • Analytics and advertising cookies (Google, Meta) are used only if you allow them in the cookie settings. You can change your choice at any time.
  • If you leave items in your basket after entering your e-mail address, we may send you a reminder. Each reminder contains a link to stop further reminders.
  • You can ask us at any time for access to, correction or erasure of your data, or object to its use: write to [email protected].

1. Who we are and how to contact us

The controller of your personal data is:

  • falbergolf.com, s.r.o.
  • Bystrcká 1137/38, 624 00 Brno, Czech Republic
  • Company ID (IČ): 26956608, VAT ID: CZ26956608
  • E-mail: [email protected]
  • Phone: +420 602 961 590

We have not appointed a Data Protection Officer. For any question about your personal data or to exercise your rights, please contact us at [email protected] or by post at the address above.

2. What data we process and where it comes from

We mostly receive personal data directly from you. Depending on how you use the shop, we process:

  • Identification and contact details: name, e-mail address, phone number, billing and delivery address, and company name and company or VAT ID if you buy as a business.
  • Order details: products and their configuration, prices, order number, payment method and payment status, delivery method, shipment tracking number, notes you add to the order, and correspondence about the order, returns and complaints.
  • Customer account details: username, e-mail address, password (stored only in encrypted, hashed form), saved addresses and order history.
  • Payment details: confirmation of payment, the last four digits and type of card, or the bank account you paid from by bank transfer. Full card details are entered directly into Stripe’s secure form and do not reach us.
  • Unfinished order details: the contents of your basket and the details you type into the checkout form or the “save your basket” window before you complete the order (see section 5).
  • Technical and usage data: IP address, browser and device type, language, pages visited, and cookie and similar identifiers, to the extent described in section 6.
  • Newsletter subscription: if you subscribe, your e-mail address and subscription data (date of sign-up, opens and clicks in our e-mails).
  • Mobile app data: if you allow notifications, a push notification identifier and basic device data (see section 7).

From third parties we receive only what is needed to complete your order: payment status from Stripe or Klarna, information about incoming bank transfers from our bank, and delivery status from the carrier. Mizuno does not receive your personal data; it builds clubs only to the order specification.

Providing your contact and delivery details is necessary to conclude and fulfil a purchase contract. Without them we cannot accept your order. Giving consent to cookies or notifications is voluntary and does not affect whether you can buy from us.

3. Why we process your data, on what legal basis and for how long

Purpose Legal basis (GDPR) How long we keep the data
Processing and delivering your order, payment, communication about the order Performance of a contract and steps taken at your request before entering into it (Art. 6(1)(b)) For the duration of the contract, then as stated in the rows below
Invoices, tax and accounting records Compliance with a legal obligation (Art. 6(1)(c)) under the Czech VAT Act and Accounting Act 10 years from the end of the year in which the invoice was issued
Withdrawal from the contract, statutory warranty claims, complaints Performance of a contract and compliance with a legal obligation (Art. 6(1)(b) and (c)) Until the claim is settled, and for the warranty period
Establishing and defending legal claims Legitimate interest (Art. 6(1)(f)) Until the end of the statutory limitation period, i.e. usually 4 years after delivery; longer if proceedings are under way
Customer account Performance of a contract (Art. 6(1)(b)) Until you close the account or ask us to delete it; orders and invoices are then kept as stated above
Reminders of an unfinished order (abandoned basket) Legitimate interest (Art. 6(1)(f)); if you use the “save your basket” window, your request (Art. 6(1)(b)) No longer than 90 days after the basket was created, or until you object or complete the order
Answering your enquiries by e-mail or phone Legitimate interest (Art. 6(1)(f)); for enquiries about an order, performance of a contract (Art. 6(1)(b)) For as long as needed to deal with the enquiry; correspondence about an order is kept with the order
Operation and security of the website, prevention of fraud and misuse Legitimate interest (Art. 6(1)(f)) For as long as needed for this purpose, as set by our hosting and security providers
Strictly necessary cookies (basket, login, language, saving your cookie choice, secure payment) Legitimate interest (Art. 6(1)(f)); no consent is needed for these under the Czech Electronic Communications Act See section 6
Website traffic analysis (Google Analytics) Consent (Art. 6(1)(a)) Until you withdraw consent; data in Google Analytics no longer than 14 months
Measuring the effect of advertising (Google Ads, Meta Pixel) Consent (Art. 6(1)(a)) Until you withdraw consent; see section 6
Newsletter and marketing e-mails Consent (Art. 6(1)(a)), given when you subscribe Until you unsubscribe; every e-mail contains an unsubscribe link
Request to review us on Google after your order Consent (Art. 6(1)(a)), given in the pop-up after your order Under Google’s policies; Google receives the data from us once
Push notifications in the mobile app Consent given in your device’s system settings (Art. 6(1)(a)) Until you turn notifications off or uninstall the app

Where we rely on legitimate interest, we have weighed our interest against your rights. You can object to such processing at any time (see section 11).

4. Payments

At checkout you can pay by card, Apple Pay, Klarna or bank transfer, depending on what is offered for your order.

  • Card and Apple Pay are processed by Stripe Payments Europe, Ltd. (Ireland). Your card details are entered directly into Stripe’s form. We only receive the payment result and basic card information (type, last four digits). Stripe uses automated tools to detect fraudulent payments and, for that purpose and to meet its own legal obligations, acts as an independent controller. See stripe.com/privacy.
  • Klarna is processed through Stripe. If you choose Klarna, your order and contact details are passed to Klarna Bank AB (publ) (Sweden), which decides on the payment method offered to you under its own terms and privacy notice and processes your data as an independent controller. See klarna.com.
  • Bank transfer: you receive our bank details and a QR code for payment. From our bank we receive information about the incoming payment (amount, payer’s name and account number, payment reference).

5. Unfinished orders (basket reminders)

If you add items to your basket and enter your e-mail address or phone number in the checkout form or in the “save your basket” window, the shop saves the basket contents and the details you have typed, even if you do not complete the order. We use them to:

  • restore your basket when you return, and
  • send you at most three e-mail reminders with a link back to your basket.

Every reminder contains a link to stop further reminders. You can also object by e-mail to [email protected]. Reminders may contain a tracking image that tells us whether the e-mail was opened. Basket data is deleted no later than 90 days after it was created. If you complete the order, the details become part of the order.

6. Cookies and similar technologies

Cookies are small files stored by your browser. Similar technologies include browser storage (local storage) and tracking pixels. We use them in three categories:

Category What it is used for Provider Consent required
Strictly necessary Basket, checkout, login to the customer account, language version, saving your cookie choice, secure card payment and fraud prevention falbergolf.com (WooCommerce, WPML), Stripe, Cloudflare No
Analytics Statistics on visits and use of the website (Google Analytics 4) Google Yes
Marketing Measuring orders and visits resulting from our ads (Google Ads conversion tracking, Meta Pixel) Google, Meta Yes

When you first visit, we ask for your choice in the cookie banner. Analytics and marketing cookies are used only after you allow them. You can change or withdraw your consent at any time in the cookie settings; this does not affect processing carried out before the withdrawal. Strictly necessary cookies are deleted at the end of the session or after a short period (usually up to one year for saving your choices). Analytics and marketing cookies are stored for up to two years, unless you delete them in your browser earlier.

For the Meta Pixel, we and Meta Platforms Ireland Ltd. are joint controllers for the collection and transmission of data to Meta. Meta is responsible for further processing; see Meta’s privacy policy. For Google services, see Google’s privacy policy.

7. falbergolf mobile app

The falbergolf app for iOS and Android displays our online shop. When you shop in the app, the same rules apply as on the website, including the cookie settings in section 6. In addition:

  • Push notifications: the app asks for permission to send notifications. If you allow them, the OneSignal service (OneSignal, Inc., USA) receives a notification identifier for your device together with technical data needed for delivery: device type and operating system, app version, language, time zone, IP address and whether you opened a notification. We use notifications to tell you about news and offers in the shop. You can switch them off at any time in your device settings. We do not link the notification identifier to your customer account.
  • Login: you log in to the same customer account as on the website. The app keeps you logged in using cookies stored on your device.
  • Camera and photos: the app accesses them only if you choose to attach a file to a form on the website. Nothing is accessed in the background.
  • The app does not use your location and contains no other analytics or advertising tools of its own.

Downloading the app is governed by the terms and privacy policies of Apple (App Store) and Google (Google Play), which process your data as independent controllers.

8. Who receives your data

We do not sell your personal data. We share it only to the extent necessary with:

Recipient Purpose Role
Active24, s.r.o. (Czech Republic) Website hosting Processor
Cloudflare, Inc. (USA) Content delivery and website security Processor
Google Ireland Ltd. / Google LLC E-mail (Google Workspace); Google Analytics and Google Ads with your consent Processor; for advertising services also an independent controller
Meta Platforms Ireland Ltd. Meta Pixel with your consent Joint controller (see section 6)
Stripe Payments Europe, Ltd. Card, Apple Pay and Klarna payments Processor; independent controller for fraud prevention and its legal obligations
Klarna Bank AB (publ) Klarna payments Independent controller
Československá obchodní banka, a. s. (CZK payments) and Fio banka, a.s. (EUR payments) Receiving bank transfers and refunds Independent controller
Česká pošta, s.p. and its partner delivery services in the destination country (for example DHL in Germany, Austrian Post in Austria) Delivery of your order Independent controllers
OneSignal, Inc. (USA) Sending our newsletter and push notifications in the mobile app Processor
Google Ireland Ltd. (Google Customer Reviews) Asking you to review our shop, only with your consent in the pop-up after your order (e-mail, order number, delivery country, estimated delivery date) Independent controller
Public authorities and courts Only where required by law Independent controllers

We have data processing agreements with our processors. They may use your data only on our instructions.

9. Transfers outside the European Economic Area

Some providers (Google, Meta, Stripe, Cloudflare, OneSignal) are based in, or have group companies in, the United States. Transfers take place on the basis of the European Commission’s adequacy decision for companies certified under the EU–US Data Privacy Framework, or on the basis of the Standard Contractual Clauses approved by the European Commission. Transfers to the United Kingdom (for example to Mizuno) rely on the European Commission’s adequacy decision for the United Kingdom. On request we will tell you which safeguard applies to a particular provider.

10. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, that would have legal or similarly significant effects. Stripe checks card payments with automated fraud detection tools, and Klarna decides which payment options to offer you under its own terms. You can contact the relevant provider or us about these decisions.

11. Your rights

Under the GDPR you have the right to:

  • access your personal data and receive a copy of it;
  • rectification of inaccurate or incomplete data (you can also update most details in your customer account);
  • erasure of data we no longer need or process unlawfully, unless we must keep it, for example invoices for tax purposes;
  • restriction of processing, for example while we verify the accuracy of your data;
  • data portability of data you provided to us on the basis of a contract or consent, in a commonly used machine-readable format;
  • object to processing based on our legitimate interest, including basket reminders;
  • withdraw consent at any time (cookie settings, device settings for notifications), without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, write to [email protected]. We will reply without undue delay, at the latest within one month; in complex cases this period may be extended by a further two months, and we will tell you why. We may ask you to confirm your identity so that we do not disclose your data to someone else.

12. Right to lodge a complaint

If you believe that we process your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz, or with the data protection authority in the EU country where you live or work. We will be glad if you contact us first so that we can try to resolve the matter.

13. Security

The website is protected by an encrypted connection (HTTPS). Access to customer data is limited to people who need it for their work. Passwords to customer accounts are stored only in hashed form.

14. Changes to this policy

We may update this policy, for example when we start using a new service. The current version is always published on this page together with its effective date. We will inform you of significant changes by e-mail or by a notice on the website.