Privacy · DIECINUEVE

1. Who is responsible

The controller of your data is DIECINUEVE, located at Rancagua 438, Providencia, Santiago.

For anything about your data, write to reservas@diecinueve.cl.

The golfdesk booking platform, by NovoDev SpA, processes the data on behalf of the venue: only to provide the service, following the venue’s instructions and under confidentiality.

2. What data we use

• When you book a bay or a table: name, phone, email (optional), day, time, number of people, and the occasion and comments you choose to leave.
• When you book on the website: where the visit came from (for example, Instagram) and the campaign, if the link includes them or the previous page reports them, and the click identifier that ad platforms add to an ad link. They are only used to count, in overall figures, where bookings come from and which campaign brought them; the click identifier is deleted after 90 days.
• If you join the club: name, phone, email, birthday (optional) and the date you agreed to receive news.
• If you request a corporate quote: company, name, role, email, phone and the details of the activity.
• In «My account»: your visits, level and perks, calculated from your bookings.
• Only if you accept the cookie notice: the Meta pixel identifiers (_fbp and _fbc cookies) and, when a booking is confirmed, the browser you booked from and the page address. We send them to Meta with the booking code and amount; never your name, phone, email or IP address.
• Minimal technical data so the site works and stays secure (for example, the IP address in server logs).

3. Health information in comments

If you tell us about an allergy or an accessibility need in your booking comments, it is your choice: you authorize us to use it only to look after you on that visit. We never use it for anything else, and comments are deleted 90 days after the visit.

4. Why we use it and on what basis

• To manage your booking: confirm it, remind you, let you cancel and welcome you. Basis: the booking you request (contract).
• To send you news, invitations, discounts and a birthday greeting. Basis: your consent, which you can withdraw anytime.
• To answer a corporate quote. Basis: your request; and your consent if you also agree to corporate news.
• To meet legal obligations, such as tax. Basis: the law.
• To keep the site secure and prevent abuse (such as fake bookings). Basis: the venue’s legitimate interest, without affecting your rights.
• To measure visits to the site and learn which campaigns work, with Google Analytics. Basis: your consent in the cookie notice, which you can withdraw anytime.
• To learn which Facebook and Instagram ads bring visits and bookings, and improve who sees the venue’s ads, with the Meta pixel and Conversions API. Basis: your consent in the cookie notice, which you can withdraw anytime.
• Levels and badges in «My account» are a game: they are not used to make automated decisions about you.

5. Who we share it with

With those who help us provide the service, on our behalf and under confidentiality, and with Meta only if you accept:

• NovoDev SpA, which runs the golfdesk platform.
• Cloud infrastructure and email providers, which store or transmit the data so the system works.
• Google (Google Analytics), only if you accept measurement cookies: it acts on behalf of the venue to measure use of the site, with advertising and ad personalization turned off.
• Meta (Facebook and Instagram), only if you accept the cookie notice: it receives visits, searches for times, and booking starts and confirmations (with the code and amount) to measure the venue’s ads. Meta also uses this data under its own terms, as its controller, for example to show ads.
• Authorities, only when the law requires it.

6. Data outside Chile

Some infrastructure providers have servers outside Chile, for example in the United States. We only work with providers offering adequate protection and confidentiality guarantees, as required by Chilean law.

If you accept measurement cookies, Google Analytics data is processed on Google servers outside Chile (for example, in the United States), under the data protection terms Google offers its customers.

If you accept, data from the Meta pixel and Conversions API is processed on Meta servers outside Chile (for example, in the United States).

7. How long we keep it

• Booking data: while you remain a customer. After 3 years without activity, if you are not a club member, your record is anonymized.
• Booking comments: 90 days after the visit.
• Club: until you unsubscribe or delete your data.
• Corporate quotes: 2 years after they close.
• Requests about your data: 3 years, as a record of our answer.
• Ad click identifier and Google Analytics identifier stored with the booking: 90 days after the visit.
• Google Analytics: measurement cookies last 180 days, and Google keeps measurement data for the period set in the venue’s account (14 months at most).
• Meta identifiers (fbp and fbc) stored with the booking: 90 days after the visit. The browser and page address are deleted as soon as the confirmation is sent to Meta.
• Meta pixel: its cookies last 90 days, and Meta keeps the data under its own policies.
• Anything the law requires us to keep longer (such as tax records), for the legal period.

8. Your rights

Free of charge, you can: know what data we hold (access), correct it (rectification), delete it (erasure), ask us to stop a use (objection), get a copy to take elsewhere (portability) and ask us to pause its use while we review a complaint (temporary blocking). You can also withdraw your consent anytime, without affecting what was done before.

The fastest way is «My account»: see, correct, download or delete your data instantly, and leave the club. We email you the link, no password needed.

Or use the form on this page or write to reservas@diecinueve.cl. We reply within 30 calendar days (extendable once by 30 more in justified cases, and we will tell you). We may ask you to confirm your identity.

If you are not satisfied with our answer, you can complain to Chile’s Personal Data Protection Agency (Agencia de Protección de Datos Personales).

9. Children and teenagers

The club and «My account» are for people over 18. Bookings are made by an adult, even if children come along. We do not ask for data of children under 14; if we receive it without authorization from their parent or guardian, we delete it.

10. Cookies

We use cookies the site needs to work: remembering your language, your «My account» on this browser, and the venue staff session.

In addition, only if you accept in the cookie notice, we use Google Analytics measurement cookies (_ga and _ga_…, for 180 days) to count visits, clicks on «Book» and confirmed bookings (the booking code, the amount and the offer used), and learn which campaigns work. Google processes them on behalf of the venue, with advertising and ad personalization turned off, and the data may be processed outside Chile.

We never send Google your name, phone or email, or the personal links to your account, booking or payment. If you do not accept, nothing from Google is loaded. Your choice is kept on this browser for 180 days (gd_consent) and you can change it anytime under «Cookie preferences» at the bottom of the site.

In addition, only if you accept in the cookie notice, we use the Meta pixel (_fbp and _fbc cookies, for 90 days) to learn which Facebook and Instagram ads bring visits and bookings: the visit, the search for times, the start of a booking and the confirmed booking (the code and amount). We also send the confirmation from our server (Meta Conversions API), with the browser and the page address, so it is not lost if the browser blocks it.

We never send Meta your name, phone or email, the personal links to your account, booking or payment, or a discount code. If you do not accept, nothing from Meta is loaded and nothing is sent to it from the server.

11. Security

• Everything travels encrypted (HTTPS).
• Venue staff sign in with their own username and password, and each person only sees what their role allows.
• Passwords and payment credentials are stored encrypted.
• If an incident put your data at risk, we would report it to the Agency and, when appropriate, to you, without delay.

12. Changes to this policy

This is version 2026-10-05. If we make an important change, we will publish it here with the new date and, if it affects what you agreed to, ask for your consent again.