Privacy notice
1. Who is responsible
The controller of your personal data is Campo Nord, s. r. o., Vysokoškolákov 8556/33B, 010 08 Žilina, Slovakia, IČO 57 959 226, registered in the Commercial Register of the District Court Žilina, section Sro, insert no. 93102/L ("Campo Nord", "we").
Contact for all privacy matters: hello@camponord.eu, or by post to the registered office. We have not appointed a data protection officer, because the GDPR does not require one for our activities (Art. 37).
2. What we process, why, on what legal basis, and for how long
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Answering your enquiry (email to hello@ or another camponord.eu address) | Name, email, company, role, the content of your message, and anything else you choose to send | Art. 6(1)(b) GDPR: steps before a contract at your request. If you write on behalf of a company: Art. 6(1)(f), our legitimate interest in answering business enquiries | 12 months after the last contact, unless a contract follows |
| Booking a call (Google Calendar booking page) | Name, email, the time you choose, anything you write in the booking note, the Google Meet link | Art. 6(1)(b) GDPR: steps before a contract at your request. If you book on behalf of a company: Art. 6(1)(f) | 12 months after the call, unless a contract follows |
| Preparing and performing a contract with your company | Contact details of the client's contacts, contract and project correspondence | Art. 6(1)(b) where you are the contracting party; Art. 6(1)(f) for contact persons of a client company | Contract term plus the limitation period for claims (4 years) |
| Accounting and tax | Name, business details, invoice and payment data | Art. 6(1)(c) GDPR: legal obligation | 10 years following the year the document relates to |
| Contacting businesses and clubs about our services | Name, business email and phone published by the organisation or the person (website, register, professional profile), organisation, role, source of the data, notes on our contact with you | Art. 6(1)(f) GDPR: our legitimate interest in offering B2B services to organisations whose work matches ours. Email only to published business contact details | 24 months after the last contact, or until you object. After an objection we keep only your email in a suppression list so we never contact you again |
| Running and securing the website (server logs at our host) | IP address, date and time, requested page, browser and device data | Art. 6(1)(f) GDPR: our legitimate interest in a secure, working website | A short period set by our host |
| Legal claims | Data from the rows above that is relevant to the claim | Art. 6(1)(f) GDPR | Until the claim is finally resolved |
Where prospect data comes from (Art. 14 GDPR): from public sources, namely the organisation's website, public registers and professional profiles. Every first message we send tells you where we found your details and how to opt out.
Is providing data required? No. Without your contact details we cannot answer you or work with you. Accounting data is required by law once we contract.
Automated decisions: we make no decisions based solely on automated processing that produce legal or similarly significant effects for you (Art. 22 GDPR).
AI tools: we use AI assistants to help draft replies and manage our inbox and CRM. A person at Campo Nord checks every decision about you.
3. Your right to object
You can object at any time to processing based on our legitimate interest, for reasons relating to your particular situation (Art. 21(1) GDPR). You can object to direct marketing at any time and without giving reasons (Art. 21(2)), after which we stop. Write to hello@camponord.eu or reply "stop" to any of our emails.
4. Who receives your data
We share data only with service providers who process it on our behalf under a data processing agreement (Art. 28 GDPR), and with recipients the law requires.
| Recipient | Role and purpose | Location and transfer |
|---|---|---|
| Google Ireland Limited / Google LLC (Google Workspace) | Processor: email, calendar, booking page, Google Meet and document storage | EU/EEA and USA. EU-US Data Privacy Framework, plus Standard Contractual Clauses |
| Cloudflare, Inc. | Processor: website hosting, domain name service and server logs | Global network, USA. EU-US Data Privacy Framework, plus Standard Contractual Clauses |
| Notion Labs, Inc. | Processor: CRM for client and prospect contacts | USA. Data processing agreement with Standard Contractual Clauses |
| Anthropic (Claude) | Processor: AI assistant for email drafting and CRM work | USA. Data processing agreement with Standard Contractual Clauses |
| Public authorities (tax office, courts, supervisory authorities) | Independent controllers, only where the law requires it | Slovakia |
Transfers outside the EU/EEA: where a provider is in the USA, the transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework for certified providers, and otherwise on Standard Contractual Clauses (Art. 46(2)(c)). You can ask us for a copy of the relevant safeguards.
We do not sell personal data and do not share it for advertising.
5. Your rights
You have the right to access your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21, see section 3). To exercise your rights, write to hello@camponord.eu. We reply within one month.
Complaints: you can lodge a complaint with the Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27 (dataprotection.gov.sk), or with the supervisory authority where you live or work.
6. Cookies and similar technologies
This website stores nothing on your device and reads nothing from it: no cookies, no local storage, no analytics, no tracking pixels, no third-party embeds. Fonts and video are served from our own domain. That is why there is no cookie banner. The booking page is run by Google on google.com and is subject to Google's own cookie notice.
7. Changes
We update this notice when our processing changes. The date at the top shows the current version.