Privacy policy
CostaCaddie is a static site with no accounts, no forms and no analytics running. This page states what that means in practice, and what would change if it ever stopped being true.
Who is responsible
CostaCaddie (costacaddie.com) is operated by Crisàlide Tecnologies SL, which is the data controller for the limited processing described below. For any question about this policy, or to exercise any of the rights set out at the end of it, write to [email protected]. That address reaches the people who run the site directly.
What this site collects
Nothing, directly. CostaCaddie has no user accounts, no login, no newsletter sign-up, no comment box and no contact form. There is nowhere on this site to enter personal data and nothing here that asks for it. The pages are pre-built HTML files, so no code of ours runs on a server while you read them and there is no application log of your visit.
The data this site publishes is about golf courses — their published tariffs, their details and their stated policies. It is not data about the people reading it.
Hosting and server logs
The pages are served by a third-party hosting provider. As with essentially every web host, that provider's infrastructure writes standard access logs when a page is requested: the IP address, the time of the request, the file requested, the user agent string and, in some cases, the referring page. This happens at the network level; it is not something CostaCaddie switches on or off.
Those logs exist to deliver the site and to protect it from abuse, and the lawful basis is legitimate interest under Article 6(1)(f) GDPR. They are not linked to any other data, not used to build a profile of you, and never sold or passed to advertisers. CostaCaddie keeps no copy of them and maintains no database of visitors.
How long those logs are kept is set by the provider, not by us. The hosting provider has not been finalised at the time of writing, so this page cannot state a retention period without guessing at one. When the provider is chosen, this section will name it, name the country the site is served from, and state how long it keeps its logs. Until then it describes the arrangement rather than the vendor, because naming a provider we have not chosen — or a retention period we have not checked — would be worse than saying so.
Analytics
There is no analytics on this site today. No measurement script is loaded, no analytics cookie is set and no identifier is stored on your device. Open your browser's network panel on any page here and you will see this site's own HTML, stylesheet and scripts, served from this domain, and no third-party request at all.
If audience measurement is added later it will be Google Analytics 4, and it will be denied by default. The measurement script is not fetched when the page loads; a consent banner appears first and asks. Only if you accept is the script loaded, and only then is anything recorded. Decline, or ignore the banner, and nothing is loaded and nothing is stored. The site behaves identically either way, because no part of it depends on being measured.
What your answer means and where it is kept is described on the cookie policy.
Links to other sites
Course pages link to the clubs' own websites so that you can book at the source. Some pages may in future carry links to travel booking partners — see the affiliate disclosure for what that involves. Following any outbound link takes you to a site with its own privacy policy and its own cookies, over which CostaCaddie has no control and to which it passes no personal data about you. No affiliate link is live on this site today.
Your rights
Where the hosting provider's access logs contain your IP address, that is personal data under the GDPR and the following rights apply to it: access to it, rectification, erasure, restriction of processing, objection to processing, and data portability. You may also complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos.
To exercise any of these, write to [email protected]. Because the logs sit with the hosting provider, are not indexed by person and are short-lived, please include the approximate date, time and IP address of the visit; without them a specific record cannot be found. Requests are answered within one month, as the regulation requires. If one cannot be fulfilled — because the logs covering that period have already been rotated away, for instance — you will be told so plainly rather than left waiting.
Changes to this policy
This policy will change when the site does: when a hosting provider is chosen, when analytics is switched on, or when the first affiliate link goes live. Each of those is a material change and each will be reflected here before it takes effect, not after. The date below is the day this text was last edited.
Last updated