Privacy Policy
Last updated: 27 February 2026
This Privacy Policy sets out the rules for the processing and protection of the personal data of users of the CampMap.app service, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
1. Personal data controller
The personal data is jointly controlled by:
Axperts Dariusz Zalewski
ul. Pelikana 1/3, 71-698 Szczecin, Poland
VAT ID: 851 319 2109, REGON: 363785540
Email: [email protected]
Phone: +48 789 072 764
Website: campmap.app
Second joint controller:
EMS Magdalena Stasiak
ul. Wolności 14, 73-222 Rzecko, Poland · VAT ID: 5941491642 · REGON: 365235217
Holder of the economic copyright to the service. Jointly with Axperts determines the purposes and means of processing, under a joint controller arrangement (Art. 26 GDPR). You may exercise your rights against either joint controller.
2. Scope of data collected
Depending on how you use the service, we may collect the following categories of data:
Data provided voluntarily
- First and last name (upon registration)
- Email address (registration, bookings, contact)
- Phone number (optional, for property owners)
- Content of reviews and ratings
- Campsite details (for owners)
Data collected automatically
- IP address and approximate location (for language matching)
- Browser type, operating system, screen resolution
- Pages visited, time of visit, traffic source
- Cookie and session file identifiers
3. Purposes of data processing
We process your data for the following purposes:
- 1Providing the service (registration, login, bookings)
- 2Displaying and publishing reviews of campsites
- 3Communicating with users (responding to inquiries, notifications)
- 4Matching language and currency to the user's location
- 5Analytics and improving service quality (Google Analytics)
- 6Ensuring the security of the service and protection against abuse
- 7Marketing of our own services (with the user's consent)
- 8Fulfilling legal obligations (e.g. tax settlements)
4. Legal bases for processing
We process data on the basis of:
- Art. 6(1)(a) GDPR - the user's consent (analytics cookies, newsletter)
- Art. 6(1)(b) GDPR - performance of a contract (registration, bookings, account management)
- Art. 6(1)(c) GDPR - a legal obligation (retention of accounting data)
- Art. 6(1)(f) GDPR - a legitimate interest (analytics, security, direct marketing)
5. Data recipients
Your data may be shared with the following categories of recipients:
- Property owners - to the extent necessary to fulfil a booking (name, email, stay dates)
- IT service providers - hosting (DigitalOcean), analytics (Google Analytics), email (Resend/Amazon SES)
- Payment providers - in the event of online payments being implemented
- Public authorities - at the request of authorised authorities, in accordance with applicable law
We do not sell personal data to third parties. We do not transfer data outside the European Economic Area (EEA), except for Google services (EU standard contractual clauses).
7. Analytics and marketing tools
We use the following tools:
Google Analytics 4
Identifier: G-PH30NJJX8Q. Collects anonymous data about site traffic. The IP address is anonymised. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
ipinfo.io
Used one time to detect the user's country (language matching). We do not store geolocation data on our servers.
8. Your rights
Under the GDPR, you have the following rights:
You can obtain information about what data of yours we process.
You can correct inaccurate or incomplete data.
You can request the deletion of your data ("right to be forgotten").
You can request the restriction of data processing.
You can receive your data in a machine-readable format.
You can object to processing for marketing purposes.
To exercise the above rights, write to: [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Data retention period
- Account data - until the account is deleted by the user
- Booking data - 5 years from the date of fulfilment (tax obligations)
- Reviews and ratings - until deleted by the author or administrator
- Analytics data - 26 months (Google Analytics)
- Server logs - 90 days
10. Data security
We apply appropriate technical and organisational measures to protect data:
- Encryption of data transmission (SSL/TLS)
- Password hashing (bcrypt with 14 rounds)
- Restricted access to data (principle of least privilege)
- Regular software updates and security monitoring
- Protection against attacks (rate limiting, CORS, CSRF)
- Compliance and security provided by Meewco
11. Children's data
The CampMap.app service is not intended for persons under 16 years of age. We do not knowingly collect the personal data of children. If you become aware that your child has provided us with data without your consent, please contact us and we will delete it promptly.
12. Changes to the privacy policy
We reserve the right to change this Privacy Policy. We will inform users of any significant changes by email or through a clear notice on the service. Continued use of the service after changes have been introduced constitutes acceptance of them.
13. Contact regarding personal data
For matters relating to the protection of personal data:
Email: [email protected]
Subject: "Personal data protection"
We respond to GDPR-related inquiries within 30 calendar days.