Legal notice

Who is responsible

For your account and how this portal works, the provider named above is the controller. For camper registrations, bunk assignments, health records, and family ledgers, the camp organization is the controller and we process data to facilitate camp session participation and safety.

What is processed, and why

• Your account — name, email address, and a password hash. Needed to let you in and to know what you may see.
• Camper & family profiles — camper names, birthdates, guardians, cabin bunk assignments, and session enrollment details. Processed to deliver camp programs and care.
• Health & emergency records — dietary needs, allergies, emergency contacts, and medical authorizations. Processed solely to safeguard camper wellbeing during attendance.
• Security records — sign-in times, IP addresses, and an audit log of privileged actions. Kept to detect misuse and to answer “who changed this”.

How long

Security and audit records are kept for two years. Camper attendance and health records are maintained for the duration required by applicable youth camp accreditation and licensing standards, and then securely removed.

Where it is held

The database and the file storage for this portal are created with an EU jurisdiction restriction, so their contents stay in the European Union. Email necessarily leaves it — a message goes where the recipient is. Everyone involved is listed below.

Your rights

You may ask for a copy of your data, have it corrected, have it erased, restrict or object to its processing, and take it elsewhere in a machine-readable form. You may also complain to a supervisory authority.

Two of those you can do yourself, immediately, from your account: download everything held about you, and ask for your account to be removed. For anything else, write to TODO: contact address.

Who else touches it