Skip to content

Privacy Policy

11 September 2026

1. Data controller

Quontum ApS is the data controller for processing of personal data on cttp.golf and hub.cttp.golf.

  • ✓Email: sl@cttp.golf
  • ✓Phone: +45 22 39 22 51
  • ✓Address: Nørrevænget 11, 8450 Hammel, Denmark
  • ✓CVR: 38973908

2. What data we collect

We distinguish between three contexts: the website (cttp.golf), the contact form, and the application itself (hub.cttp.golf).

On the website (cttp.golf)

Anonymized usage data from Google Analytics 4, only with consent to statistics cookies.

Via the contact form

Name, email, optional club and phone, your message, IP address with derived location and network info (country, city, ISP/organization), browser and device info, referrer/source, UTM campaign tags and the path of pages visited in your session. For Danish contacts we also perform a public CVR lookup on the supplied club name. This data is used solely to answer your enquiry, prevent spam and qualify the request.

In the application (hub.cttp.golf)

Player names (voluntarily entered when submitting results), distance results with timestamp, email addresses and login info (only for account holders, typically club administrators), payment info (handled exclusively via Stripe) and IP addresses for temporary security logging.

3. Purposes and legal basis

Data is used for four purposes, each with a specific legal basis:

  • ✓Running tournaments: legitimate interest (Article 6(1)(f))
  • ✓Fulfilling subscription contracts: contractual obligation (Article 6(1)(b))
  • ✓Accounting requirements: legal obligation under Danish bookkeeping law (Article 6(1)(c))
  • ✓Improving the website via statistics: consent (Article 6(1)(a))

4. Retention period

We keep data only as long as necessary for the purpose, no longer:

  • ✓Player names: automatically anonymized after 24 months. Anonymized distance results are kept for statistics and Hole in One history
  • ✓When the subscription ends: all club data, including anonymized distance results, is deleted 6 months after termination. Data is not handed out to the club or any third party, and cannot be exported
  • ✓Financial data: 5 years as required by Danish bookkeeping law
  • ✓Google Analytics 4 data: maximum 2 years
  • ✓Contact form enquiries: 24 months, or until the matter is closed

Live leaderboards with player names are only visible during the active tournament. After the tournament ends, names are not publicly available on the internet.

5. Security and hosting

We use modern security measures to protect your data:

  • ✓Encrypted connection (HTTPS/TLS 1.3)
  • ✓Encrypted storage of personal data
  • ✓Role-based access control
  • ✓Daily automatic backups
  • ✓Access logs for audit
  • ✓Privacy by design from the ground up

The website (cttp.golf) is hosted with Simply.com in Denmark. The application itself (hub.cttp.golf), where club administrators work with tournaments and personal data, runs on separate, secure infrastructure in the EU. Login to the application is with email and password or via Google account (OAuth), and only club administrators can access their own club data.

6. Sub-processors

The following providers process data on our behalf. All have a valid data processing agreement.

  • ✓Simply.com (Denmark): hosting of the website cttp.golf
  • ✓Microsoft Azure (EU): hosting of the application hub.cttp.golf
  • ✓Stripe (EU + USA, SCC): payment processing
  • ✓Google Ireland Ltd (EU): Analytics 4 + Tag Manager, only with consent

7. Your GDPR rights

You have the following rights under the General Data Protection Regulation. Requests are sent to sl@cttp.golf and answered within 30 days.

  • ✓Right to access: find out what data we have about you
  • ✓Right to rectification: have incorrect data corrected
  • ✓Right to erasure ("right to be forgotten")
  • ✓Right to restriction of processing
  • ✓Right to data portability for the data we keep about you (account holder info, contact enquiries). Player data submitted during tournaments is not exportable. Player names are anonymized after 24 months, and all club data is deleted 6 months after subscription termination
  • ✓Right to object to processing
  • ✓Right to withdraw consent at any time
  • ✓Right to lodge a complaint with the Danish Data Protection Authority (datatilsynet.dk)

8. Cookies and tracking

We use technically necessary cookies and, only with your explicit consent, Google Tag Manager and Google Analytics 4 for statistics. You can withdraw consent at any time. See our separate cookie policy for details on which cookies are set and what we measure.

9. Changes to this privacy policy

This policy may be updated. Material changes are notified via the cookie banner or email to account holders. The date at the top of the page shows when the policy was last updated.

10. Data Processing Agreement (DPA)

Clubs using hub.cttp.golf and thereby processing player data may request a Data Processing Agreement (DPA) by writing to sl@cttp.golf. The DPA is delivered as a PDF and meets the requirements of GDPR Article 28.

11. Visitors from the United States (CCPA/CPRA)

Quontum ApS is a Danish company and the service runs from the EU. We give everyone the same rights regardless of where they live.

  • ✓We do not sell personal data, and never have
  • ✓We do not use personal data for cross-context behavioral advertising
  • ✓The rights in section 7 apply to California residents too: access, deletion, correction, and the right not to be treated differently for using them
  • ✓Requests go to sl@cttp.golf and are answered within 30 days
  • ✓We do not knowingly collect data about children under 16

About players, CTTP Golf collects only a self-chosen name and a distance. No account, no email, no cross-site tracking.