Privacy policy
CostaCaddie is a static site with no accounts and no forms. This page states what it collects, what it measures, and what reaches anyone else when you follow a link or accept GetYourGuide's widget.
Who is responsible
CostaCaddie (costacaddie.com) is operated by Crisàlide Tecnologies SL, which is the data controller for the limited processing described below. For any question about this policy, or to exercise any of the rights set out at the end of it, write to [email protected]. That address reaches the people who run the site directly.
What this site collects
Nothing through a form or an account. CostaCaddie has no user accounts, no login, no newsletter sign-up, no comment box and no contact form. There is nowhere on this site to enter personal data and nothing here that asks for it. The pages are pre-built HTML files, so no code of ours runs on a server while you read them and there is no application log of your visit. The one part of this site that sends data about you to another company is GetYourGuide's activity widget, and only if you accept it; it is described below.
The data this site publishes is about golf courses — their published tariffs, their details and their stated policies. It is not data about the people reading it.
Hosting and server logs
The pages are served by a third-party hosting provider. As with essentially every web host, that provider's infrastructure writes standard access logs when a page is requested: the IP address, the time of the request, the file requested, the user agent string and, in some cases, the referring page. This happens at the network level; it is not something CostaCaddie switches on or off.
Those logs exist to deliver the site and to protect it from abuse, and the lawful basis is legitimate interest under Article 6(1)(f) GDPR. They are not linked to any other data, not used to build a profile of you, and never sold or passed to advertisers. CostaCaddie keeps no copy of them and maintains no database of visitors.
How long those logs are kept is set by the provider, not by us. The hosting provider has not been finalised at the time of writing, so this page cannot state a retention period without guessing at one. When the provider is chosen, this section will name it, name the country the site is served from, and state how long it keeps its logs. Until then it describes the arrangement rather than the vendor, because naming a provider we have not chosen — or a retention period we have not checked — would be worse than saying so.
GetYourGuide's activity widget
Region and trip-plan pages can show activities from GetYourGuide in GetYourGuide's own widget. Until you accept it, and after you reject it, nothing of GetYourGuide's loads and nothing is sent to it: the page shows a plain link instead.
If you accept, GetYourGuide's script runs on the page and its widget loads from GetYourGuide's servers (widget.getyourguide.com and collector.getyourguide.com). Your browser then sends GetYourGuide your IP address, your browser and device details, the page you are on, and a visitor_id cookie that GetYourGuide keeps for 400 days to recognise your browser. The widget also loads its fonts from Google Fonts, so Google receives your IP address and browser details too. That data goes to GetYourGuide's and Google's servers, not to ours, and their own privacy policies govern what they do with it.
The lawful basis is your consent, under Article 6(1)(a) GDPR. You can withdraw it at any time with “Cookie settings” at the foot of every page or on the cookie policy page; withdrawing removes what GetYourGuide stored on this site and reloads the page without the widget. It does not undo what was sent before, and cookies set on getyourguide.com are removed in your browser's settings. Each cookie is listed on the cookie policy page.
Analytics
Visits are measured with PostHog, in cookieless mode, on their EU servers in Frankfurt. No cookie is set and nothing is stored on your device: PostHog counts visitors using a hash computed on its own servers, which cannot be tied back to you, cannot follow you to another site, and is not usable for advertising.
What that records is page views, the country and browser your request reports, the page that referred you here, and clicks on links. If you accepted GetYourGuide's widget, it also records two events: activity_widget_view, when the widget is shown, and activity_widget_interaction, when you click into it, each with the page, region and place the widget was for. There are no user profiles, and a returning reader cannot be recognised — which makes the numbers approximate, and that is an acceptable price. Because it stores nothing on your device, measurement needs no consent. Any tracker blocker will stop the measurement script, and the site works identically without it.
What is and is not stored in your browser is described on the cookie policy.
Links to other sites
Course pages link to the clubs' own websites so that you can book at the source. Some pages link to booking partners (golfscape, GetYourGuide); following such a link takes you to that partner's site, under its own privacy policy and its own cookies. Following any outbound link takes you to a site with its own privacy policy and its own cookies, over which CostaCaddie has no control. Following a link sends that site nothing about you from CostaCaddie; GetYourGuide's widget, if you accept it, is the exception described above.
Your rights
Where the hosting provider's access logs contain your IP address, that is personal data under the GDPR and the following rights apply to it: access to it, rectification, erasure, restriction of processing, objection to processing, and data portability. You may also complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos.
To exercise any of these, write to [email protected]. Because the logs sit with the hosting provider, are not indexed by person and are short-lived, please include the approximate date, time and IP address of the visit; without them a specific record cannot be found. Requests are answered within one month, as the regulation requires. If one cannot be fulfilled — because the logs covering that period have already been rotated away, for instance — you will be told so plainly rather than left waiting.
Changes to this policy
This policy will change when the site does: when a hosting provider is chosen, when analytics records something it does not record today, or when a booking partner or a partner's widget is added. Each of those is a material change and each will be reflected here before it takes effect, not after. The date below is the day this text was last edited.
Last updated