Privacy Policy

Who we are

Costadura is operated by an individual based in Europe. For data protection purposes, the operator of this website is the data controller. Contact: hello@costadura.com.

What we collect

When you browse the site: Our hosting provider (Vercel) automatically logs standard server data: IP address, browser type, operating system, referring URL, pages visited, and timestamps. This is standard web server operation and is necessary for delivering the site to you. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

When you email us: If you contact us at hello@costadura.com, we receive your email address and whatever information you include in your message. We use this only to respond to your enquiry. We do not add you to any mailing list. Legal basis: legitimate interest.

What we do not collect: We do not use cookies. We do not run tracking scripts. We do not use analytics that identify individual users. We do not require account creation. We do not collect payment information. We do not process special category data.

Affiliate links and third-party services

Some links on this site are affiliate links to services including Booking.com, GetYourGuide, and car rental platforms. When you click an affiliate link, you leave costadura.com and are subject to the third party's own privacy policy. The third party may set cookies and collect data. We have no access to or control over the data those partners collect.

We earn a commission on completed bookings made through affiliate links. This does not affect the price you pay.

Hosting and infrastructure

This site is hosted on Vercel Inc. (USA). Vercel processes server requests on our behalf and may log IP addresses and request metadata in accordance with their privacy policy. The domain is managed through Cloudflare Inc. (USA), which may process DNS queries in accordance with their privacy policy. Both companies participate in or comply with data transfer mechanisms for international transfers from the EU/UK.

Data retention

Server logs are retained by our hosting provider according to their standard retention period. Email correspondence is retained for as long as necessary to respond to your enquiry and for our records. You can request deletion at any time.

International data transfers

Our hosting and domain providers are based in the United States. Data may be transferred to and processed in the US. These transfers are protected by the EU-US Data Privacy Framework, Standard Contractual Clauses, or equivalent mechanisms as applicable.

Your rights (EU/UK)

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have the right to:

• Access any personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing based on legitimate interest
• Request restriction of processing
• Data portability
• Lodge a complaint with a supervisory authority

In practice, we hold very little personal data. To exercise any right, email hello@costadura.com. We will respond within 30 days.

Your rights (California)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information. We do not share personal information for cross-context behavioural advertising. To make a request, email hello@costadura.com.

Children

This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us and we will delete it.

Changes to this policy

We may update this policy. When we do, the date at the top changes. Material changes will be noted on this page. We will not reduce your rights under this policy without clear notice.

Contact

For any privacy-related question or request: hello@costadura.com.