Privacy Policy
How Exupery Camp collects, uses and protects personal data, in line with the EU General Data Protection Regulation (GDPR) and Latvian law.
Last updated: 1 August 2026
1. Who we are
SIA "EISF" (registration number 40203181401), operating as Exupery International Camp, part of Exupery International School (the "Camp", "we", "us"). Registered address: Jaunā iela 8, Piņķi, Babītes pag., Mārupes nov., LV-2107, Latvia. We are the data controller for the personal data described in this policy.
Contact for privacy questions and data-subject requests: summer@exupery.lv. As a small organisation, we haven't appointed a dedicated Data Protection Officer — privacy questions and requests go directly to the email above.
2. What data we collect, and why
| When | Data | Purpose |
|---|---|---|
| Contact form / email / WhatsApp | Name, email, phone number, and whatever you write to us | Answering enquiries about the camp |
| Application form (JotForm) | Parent/guardian name and contact details; child's name, age/date of birth; camp session chosen; and any information you choose to provide about medical needs, allergies or similar | Processing camp enrolment, arranging care for your child during the session, billing |
| Camp Photos page login | The shared access password (not linked to your identity) and a login cookie | Restricting the family photo gallery to camp families only |
| Photos and video during camp sessions | Photographs/video of children and staff during activities | Sharing memories with camp families via a password-protected gallery; occasional use in camp marketing material — only where a parent/guardian has separately agreed to that, see Section 4 |
3. Legal basis for processing
- Contract / pre-contract (Art. 6(1)(b) GDPR) — for processing your enquiry or camp application, and delivering the camp place you've booked.
- Consent (Art. 6(1)(a) GDPR) — for photo/video publication in the family gallery and any marketing use (see Section 4), for non-essential cookies, and for any newsletter/marketing emails, all of which you can withdraw at any time.
- Legitimate interest (Art. 6(1)(f) GDPR) — for basic site security and keeping records needed to run the camp safely and resolve any post-camp queries.
4. Children's data and camp photos
Camp participants are children, and we treat their data with extra care. Application data about a child is provided and controlled by their parent or legal guardian, not collected directly from the child.
Photos and videos taken during camp sessions are only published to the password-protected Camp Photos gallery, or used in public marketing (website, social media), where a parent/guardian has given specific, opt-in consent as part of the enrolment process — these are treated as two separate choices, not one blanket tick-box, because they carry different levels of exposure. Consent can be withdrawn at any time by emailing summer@exupery.lv; withdrawal stops future use but can't undo publication that already lawfully happened before the request.
Parents can ask us not to photograph their child, or to have specific photos removed, at any time.
5. Who we share data with
- JotForm — hosts our camp application form.
- Google Photos — hosts the family photo albums linked from the password-protected Camp Photos page.
- Cloudflare — hosts this website.
- WhatsApp (Meta) — if you choose to contact us via the WhatsApp link in our footer.
- YouTube (Google) — only if you choose to load an embedded video on a Studio or Archive page; see our Cookie Policy.
We do not sell personal data, and we don't share it with anyone for their own marketing purposes.
6. International data transfers
JotForm, Google and Meta (WhatsApp) are US-headquartered. Where personal data is transferred to the US, we rely on the EU-US Data Privacy Framework adequacy decision and/or the providers' Standard Contractual Clauses, as applicable to each provider's current certification status.
7. How long we keep data
- Enquiry/contact-form messages: kept only as long as needed to handle your enquiry, then deleted within a reasonable period of inactivity.
- Camp application/enrolment records: kept for the season plus the period required for accounting, insurance and legal purposes under Latvian law.
- Camp photos in the family gallery: kept for a limited number of seasons, after which older galleries are removed.
8. Your rights
Under GDPR you have the right to: access the personal data we hold about you or your child; request correction of inaccurate data; request erasure; request restriction of processing; object to processing based on legitimate interest; request data portability; and withdraw consent at any time (without affecting the lawfulness of processing before the withdrawal). To exercise any of these, email summer@exupery.lv.
9. Cookies
See our separate Cookie Policy for details on the cookies and local storage this site uses, and how to manage your choice.
10. Contact & complaints
Questions about this policy: summer@exupery.lv.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with Latvia's data protection authority, the Data State Inspectorate (Datu valsts inspekcija): www.dvi.gov.lv.