Privacy policy

NODODATA S.L., NIF B21802434, is the controller of personal data collected through Elite Fairways. Our registered address is C/ Cañada de la Carrera 6, Planta 0, 28223 Pozuelo de Alarcón (Madrid), Spain. Contact us at hello@elitefairways.com.

This policy follows Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

What we collect and why

• Newsletter: email address, optional first name, signup page and form variant. You consent by subscribing to an occasional letter when we publish something worth your time. You can withdraw that consent by emailing us.
• Contact: name, email, contact reason, optional company and message. We use these details to answer your request, based on our legitimate interest in responding to readers and potential partners, or to take steps you request before a contract.
• Property enquiries: first name, email, phone or WhatsApp number, target market, budget band, timeline, intended use, existing-agent status, optional notes and your processing consent with its version. We store and review the brief and contact you on the basis of that consent. We do not enrol you in marketing or share your brief with an agency without a separate agreement naming that agency.
• Submission records: record ID, time, form type, source page, tags derived from your answers, IP address, browser user agent and referring page. Honeypot fields, fill time and, when enabled, a security token help detect abuse. Gmail addresses are normalised by removing dots and plus tags.
• Abuse logs: time, reason for rejection, IP address, user agent, route and source page. Rejected submissions do not enter the lead alert queue.
• Site measurement: page path, time, referring URL, user agent and a daily identifier derived from IP address, user agent and date. The pageview log does not store the raw IP address. This identifier is pseudonymous, not a guarantee of anonymity. We use this measurement for our legitimate interest in understanding readership. Optional Google Analytics and Hotjar load only after consent, as explained in our cookie policy.

Required fields are needed to handle the relevant request. Optional fields may be left blank. Do not include sensitive personal information in free-text fields. The golf-trip endpoint no longer accepts enquiries; historical trip records can contain first name, email, preferred region and submission metadata.

Security checks support our legitimate interest in preventing spam and protecting the service. They can automatically reject a form, but do not make decisions with legal or similarly significant effects. If a legitimate request is blocked, contact us by email.

Service providers and international transfers

Hetzner hosts the site and its locally stored records in Germany. Telegram is used for lead alerts. The application creates an alert record with the lead ID, email and target market; any downstream Telegram delivery is managed outside these form routes.

If configured, Beehiiv receives newsletter email addresses, signup attribution and subscription preferences. Google Analytics and Hotjar receive browser and usage information only after analytics consent. If enabled, Cloudflare Turnstile processes browser security signals and a verification token to protect forms.

Some providers may process data outside the European Economic Area. Contact us for the applicable destinations and safeguards, including any adequacy decision or standard contractual clauses. We may also disclose records where a legal obligation requires it.

How long records are kept

We keep enquiry records while needed to address the enquiry, newsletter records while you remain subscribed, and limited records where necessary for legal obligations or claims. Security and measurement records should be kept only as long as needed for those purposes. The current local storage does not automatically expire records; deletion requests require manual handling. You can request deletion or unsubscribe using the contact email above.

Your rights

You may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Email us to exercise these rights; we may request proportionate identity verification. We normally respond within one month, with extensions where the GDPR permits.

You may complain to Spain’s Agencia Española de Protección de Datos (AEPD) or another competent supervisory authority. See also our legal notice.