Privacy Policy

1. Data Controller & Website Operator

Data Controller:
Association Junior Golf Swiss determines the purposes and means of processing personal data collected through this website.
Email: hello@genevainvitational.com

Website Operator:
This website is owned and operated by EXP Golf, a division of Crownline Sports Inc., on behalf of Association Junior Golf Swiss.
Email: team@expgolf.org

2. Information We Collect

We collect personal data only when you voluntarily submit it through our contact form. The information collected includes:

• Name
• Email address
• Subject
• Message content

We do not collect any personal data from visitors who simply browse the website.

This tournament serves junior golfers aged 12–18. We do not knowingly collect personal data from children under 13 without parental consent. See Section 12 (Children's Privacy) for details.

3. Cloudflare Turnstile (Spam Protection)

Our contact form uses Cloudflare Turnstile, a privacy-focused alternative to traditional CAPTCHAs, to protect against spam and abuse. When you submit the contact form, Cloudflare may receive your IP address and browser metadata for verification purposes. Cloudflare processes this data in accordance with its own Privacy Policy.

4. Rate Limiting

To prevent abuse, our contact form employs in-memory rate limiting based on IP addresses. These IP addresses are held temporarily in server memory and are not stored persistently or logged.

5. Cookies

This website does not set any cookies for public visitors. Session cookies are used exclusively for authenticated administrators of the site and are strictly necessary for admin dashboard functionality.

6. No Analytics or Tracking

We do not use any analytics services, tracking pixels, advertising networks, or similar technologies on this website. Your browsing activity is not tracked or monitored.

7. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): By voluntarily submitting the contact form, you consent to the processing of your data for the purpose of responding to your inquiry.
• Legitimate Interest (Art. 6(1)(f) GDPR): We have a legitimate interest in protecting our website from spam and abuse through the use of Cloudflare Turnstile and rate limiting.

Under the revised Swiss Federal Act on Data Protection (revFADP), effective September 1, 2023, processing is based on consent and legitimate interest, consistent with the GDPR bases outlined above.

8. Data Retention

Contact form submissions are retained for a maximum of 12 months, after which they are reviewed and deleted unless there is an ongoing reason to retain them. You may request earlier deletion at any time by contacting us at hello@genevainvitational.com.

9. Your Rights

Under the GDPR (EU & UK Residents)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict processing of your data
• Data portability
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

These rights also apply to UK residents under the UK GDPR.

Under the Swiss Revised Federal Act on Data Protection (revFADP)

Swiss residents have similar rights under the revFADP, including the right to access, rectify, and request deletion of personal data. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) if you have concerns.

US State Privacy Rights

If you are a resident of a US state with applicable privacy legislation (e.g., California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana MCDPA), you may have rights including the right to know what personal data we collect, request deletion, and opt out of data sales.

We do not sell or share your personal data as defined by the CCPA/CPRA. To exercise your rights, contact us at hello@genevainvitational.com.

10. International Data Transfers

Your data may be processed by the following third-party service providers, which may involve transfers outside of Switzerland and the EU/EEA:

• Cloudflare — spam protection (Turnstile)
• Vercel — website hosting and infrastructure
• Neon — database hosting (PostgreSQL)
• Resend — transactional email delivery

These providers maintain appropriate data protection measures, including Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) where applicable, to ensure an adequate level of data protection.

11. Security

We take appropriate technical and organizational measures to protect your personal data, including HTTPS encryption for all connections, Content Security Policy (CSP) headers, and restricted access permissions for administrative functions.

12. Children's Privacy

This website promotes a junior golf tournament for players aged 12–18. We do not knowingly collect personal data from children under 13 without verifiable parental consent, in accordance with the US Children's Online Privacy Protection Act (COPPA) and equivalent provisions under GDPR (requiring parental consent for children under 16 in certain jurisdictions). If you are a parent or guardian and believe your child has provided personal data through our contact form, please contact us to request deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this page periodically.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Association Junior Golf Swiss (Data Controller)
Email: hello@genevainvitational.com

EXP Golf, a division of Crownline Sports Inc. (Website Operator)
Email: team@expgolf.org