Privacy policy
This policy explains what personal data cap-ibiza.com collects, why, how long it is kept and how to exercise your rights. The data controller is Aurélien Capoue (contact@cap-ibiza.com).
Contact form
When you use the contact form, the following data is recorded: your name, your email address and the content of your message.
- Purpose: to answer your enquiry and, where relevant, arrange a coaching session.
- Legal basis: your own request (pre-contractual steps taken at your request, GDPR art. 6.1.b).
- Recipients: the site publisher only. A notification email is sent through the Resend service, and the enquiry is stored in the site's Supabase database.
- Retention: 3 years from the last exchange, then deletion.
These fields are needed in order to reply to you; no other data is requested.
Audience measurement
The site uses its own audience measurement, with no advertising tool and no third-party cookies. It is only activated after you explicitly accept it in the consent banner.
- Data recorded: the page viewed, where the visit came from (referring site: direct, social network or another website), a random visitor identifier and a random session identifier.
- What is not recorded: your IP address, your name, your email, or any data that identifies you directly.
- Purpose: to understand site traffic and which pages are most visited.
- Legal basis: your consent (GDPR art. 6.1.a), which you can withdraw at any time.
- Retention: 25 months maximum.
Until you accept — or if you decline — no measurement takes place and the site works normally. You can change your mind at any time through the “Cookies” link in the footer: the identifiers already stored are then removed from your browser.
Cookies and local storage
This site sets no advertising cookies and no third-party tracking cookies. It uses your browser's local storage for the following purposes:
- Your language choice (fr / en / es) — strictly necessary for the site to work, kept until you clear your browser data.
- Your answer to the consent banner — strictly necessary so it is not shown again on every visit.
- The anonymous audience-measurement identifiers — only if you accepted (see previous section).
The first two require no consent because they are essential to the service you requested; the third one depends on your agreement.
Third-party content and services
Some features rely on third-party services, which may receive technical data (including your IP address) when they are called:
- YouTube and TikTok videos: the players load only after you click a video. At that point YouTube or TikTok may set their own trackers, governed by their own policies.
- Google reviews: they are fetched server-side through the Google Places API — no data about you is sent to Google. Only the review authors' profile pictures are loaded from Google's servers.
- Google Fonts: fonts are loaded from Google's servers, which therefore receive your IP address.
- Cloudflare hosting: technical server logs, needed for security and for the site to run, are processed by Cloudflare.
Processors and transfers outside the EU
The following providers act on the publisher's behalf: Cloudflare (site hosting), Supabase (database and media storage), Resend (notification emails), Google (reviews and fonts).
Some of these providers are established in the United States. Any transfers are covered by the European Commission's standard contractual clauses and/or the EU–US Data Privacy Framework.
Security
The site is served exclusively over HTTPS. Access to the administration area (enquiries, media library, statistics) is protected by authentication and restricted to the publisher.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.
To exercise these rights, write to contact@cap-ibiza.com. You will receive a reply within one month at the latest.
If you believe your rights are not being respected, you may lodge a complaint with the Spanish supervisory authority (AEPD, www.aepd.es) or with the authority in your country of residence.
Minors
Coaching sessions are aimed at children from age 6, but the contact form is intended for parents or legal guardians. No data is knowingly collected from a minor without a responsible adult being involved.
Changes
This policy may be updated to reflect changes to the site or to the applicable rules. The date of the latest update is shown at the bottom of this page.
Last updated: September 6, 2026
