Privacy / Sub-processors

Effective date: 2 February 2022
Last reviewed: 6 May 2026

1. About CampMap

CampMap d.o.o. is a company incorporated under the laws of the Republic of Croatia, with its registered office at Šupijan 1, Čavle, Croatia (“CampMap”, “we”, “us”).

CampMap provides software solutions for outdoor hospitality and guests with the goal of improving the camping experience and simplifying camp operations.

CampMap processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Croatian data protection laws. We are committed to protecting the confidentiality, integrity, and availability of personal data and apply appropriate technical and organizational measures to ensure compliance.

2. Our Role Under GDPR

Depending on the context, CampMap acts as:

• Data Processor – when processing personal data on behalf of our clients (for example, guest enquiries and reservations submitted through CampMap services).
• Data Controller – when processing personal data for our own business purposes (such as recruitment, client communication, or marketing activities).

3. CampMap Services

3.1 Interactive Map Service

CampMap creates, hosts, and maintains premium interactive digital maps for outdoor hospitality and other businesses. These maps contain spatial and attribute data and can be displayed via web browsers and mobile applications, enabling user interaction such as zooming, navigation, and feature selection.

3.2 Subscription Services

Additional subscription‑based services may include features such as:

• Enquiry and reservation systems
• Map editing and updates
• Search and navigation
• Push notifications
• SEO optimization
• Camp branding and iFrame integrations

4. Personal Data We Collect

Depending on the service and context, we may process the following categories of personal data:

• Name and surname
• Email address
• Telephone number (optional)
• Country

No special categories of personal data (as defined by GDPR Article 9) are processed.

5. Purposes and Legal Basis for Processing

We process personal data only when a valid legal basis exists, including consent, contractual necessity, or legal obligation.

Personal data is processed for the following purposes:

• Providing CampMap services
• Operating enquiry and reservation features on behalf of our customers
• Client and technical support
• Diagnostics and service improvement
• Issuing invoices
• Recruitment and hiring
• Marketing activities (with explicit consent, where applicable)

6. Data Collection Scenarios

6.1 Guests (Processor Role)

When guest data is submitted through CampMap services (e.g. enquiry or reservation forms), CampMap acts as a Data Processor on behalf of its client (the outdoor hospitality business). Data is processed solely for providing the requested service, and only with the guest’s consent.

6.2 Recruitment (Controller Role)

When candidates apply for roles at CampMap, we process identification and contact data as a Data Controller, based on consent provided by the candidate.

6.3 Feedback and Marketing (Controller Role)

Guest or staff interviews conducted for service feedback are anonymous. If feedback is later used for marketing purposes, personal data (such as name, country, photo or video) is collected only with explicit consent.

7. Cookies

Our website uses:

• Functional (strictly necessary) cookies required for website operation
• Performance cookies via Google Analytics

Google Analytics provides aggregated usage statistics and may process IP address data. CampMap does not collect or transfer personal data to Google for profiling or advertising purposes. Consent for performance cookies can be declined or withdrawn at any time.

Google’s Privacy Policy:
https://policies.google.com/privacy

8. Sub‑processors

8.1 Overview

To deliver our services, CampMap uses a limited number of trusted third‑party sub‑processors that process personal data on our behalf. All sub‑processors are subject to contractual safeguards consistent with GDPR requirements.

8.2 List of Sub‑processors

1. Microsoft Ireland Operations Limited (Azure)
   1. Purpose - Cloud infrastructure hosting for application and databases
   2. Data Processed - Name, email address, phone number
   3. Data Location - Microsoft Azure data centers (EU region)

CampMap’s application runs on Azure App Services, and personal data is stored in Azure Database services.

Microsoft security and compliance information:
https://www.microsoft.com/trust-center

8.3 Sub‑processors Not Used

CampMap does not use third‑party services that process personal data for:

• Advertising
• Behavioral tracking
• Payment processing
• Email marketing
• Customer support ticketing systems

9. Data Security

CampMap implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Security measures include:

• Controlled and limited system access
• Physical security of offices
• Secure cloud infrastructure

For data hosted on Microsoft Azure, security controls are applied in accordance with Microsoft’s compliance frameworks:
https://docs.microsoft.com/azure/compliance/offerings

10. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected or for the duration of consent provided. Once consent is withdrawn or data is no longer required, it is securely deleted.

11. Your Rights

You have the following rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to object to processing
• Right to restriction of processing

To exercise your rights, please contact us using the details below.

You also have the right to lodge a complaint with the Croatian supervisory authority:
Agencija za zaštitu osobnih podataka (AZOP)
https://www.azop.hr

12. Contact Information

CampMap d.o.o.
Email: support@campmap.com
Postal address: Radmile Matejčić 10, 51000 Rijeka, Croatia

13. Updates to This Policy

We keep this Privacy Policy under regular review and may update it to reflect changes in legal requirements or our services. Any updates will be published on this page.