Privacy policy
CostaCaddie is a static site with no accounts, no forms and no analytics running. This page states what that means in practice, and what would change if it ever stopped being true.
Who is responsible
CostaCaddie (costacaddie.com) is operated by Crisàlide Tecnologies SL, which is the data controller for the limited processing described below. For any question about this policy, or to exercise any of the rights set out at the end of it, write to [email protected]. That address reaches the people who run the site directly.
What this site collects
Nothing, directly. CostaCaddie has no user accounts, no login, no newsletter sign-up, no comment box and no contact form. There is nowhere on this site to enter personal data and nothing here that asks for it. The pages are pre-built HTML files, so no code of ours runs on a server while you read them and there is no application log of your visit.
The data this site publishes is about golf courses — their published tariffs, their details and their stated policies. It is not data about the people reading it.
Hosting and server logs
The pages are served by a third-party hosting provider. As with essentially every web host, that provider's infrastructure writes standard access logs when a page is requested: the IP address, the time of the request, the file requested, the user agent string and, in some cases, the referring page. This happens at the network level; it is not something CostaCaddie switches on or off.
Those logs exist to deliver the site and to protect it from abuse, and the lawful basis is legitimate interest under Article 6(1)(f) GDPR. They are not linked to any other data, not used to build a profile of you, and never sold or passed to advertisers. CostaCaddie keeps no copy of them and maintains no database of visitors.
How long those logs are kept is set by the provider, not by us. The hosting provider has not been finalised at the time of writing, so this page cannot state a retention period without guessing at one. When the provider is chosen, this section will name it, name the country the site is served from, and state how long it keeps its logs. Until then it describes the arrangement rather than the vendor, because naming a provider we have not chosen — or a retention period we have not checked — would be worse than saying so.
Analytics
Visits are measured with PostHog, in cookieless mode, on their EU servers in Frankfurt. No cookie is set and nothing is stored on your device: PostHog counts visitors using a hash computed on its own servers, which cannot be tied back to you, cannot follow you to another site, and is not usable for advertising.
What that records is page views, the country and browser your request reports, the page that referred you here, and clicks on links. There are no user profiles, and a returning reader cannot be recognised — which makes the numbers approximate, and that is an acceptable price. Because nothing is stored on your device, there is no consent banner to click. Any tracker blocker will stop the measurement script, and the site works identically without it.
What is and is not stored in your browser is described on the cookie policy.
Links to other sites
Course pages link to the clubs' own websites so that you can book at the source. Some pages may in future carry links to travel booking partners — see the affiliate disclosure for what that involves. Following any outbound link takes you to a site with its own privacy policy and its own cookies, over which CostaCaddie has no control and to which it passes no personal data about you. No affiliate link is live on this site today.
Your rights
Where the hosting provider's access logs contain your IP address, that is personal data under the GDPR and the following rights apply to it: access to it, rectification, erasure, restriction of processing, objection to processing, and data portability. You may also complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos.
To exercise any of these, write to [email protected]. Because the logs sit with the hosting provider, are not indexed by person and are short-lived, please include the approximate date, time and IP address of the visit; without them a specific record cannot be found. Requests are answered within one month, as the regulation requires. If one cannot be fulfilled — because the logs covering that period have already been rotated away, for instance — you will be told so plainly rather than left waiting.
Changes to this policy
This policy will change when the site does: when a hosting provider is chosen, when analytics is switched on, or when the first affiliate link goes live. Each of those is a material change and each will be reflected here before it takes effect, not after. The date below is the day this text was last edited.
Last updated