Privacy policy
Who is the data controller?
CityCamp Copenhagen is the data controller for personal data processed through this website and in connection with booking requests.
Privacy
Your information should be handled responsibly.
Here you can read what information CityCamp processes, why it is used, who may receive it and what rights you have.
Last updated: 11 September 2026
Privacy policy
What information do we process?
We process only information that is relevant to handling your stay and operating the website securely.
- Contact details such as name, email address and telephone number.
- Booking details such as arrival, departure, number of people, vehicle type, message, booking reference and status.
- Limited technical security information, including an irreversible hash of the IP address used for rate limiting and abuse prevention.
- Your selected language so booking communication can be sent in the right language.
Where does the information come from?
Booking information is provided directly by you when you complete the form. Technical security information is generated automatically when the website is used.
Privacy policy
Why do we use the information?
Booking information is used to receive, process, confirm and communicate about your booking request and stay.
Limited technical information is used to protect booking and admin functions against spam, abuse and unauthorised access.
Legal basis
Booking information is processed under GDPR Article 6(1)(b) because the processing is necessary to handle your request and any resulting stay. Security, spam prevention and stable operation are based on Article 6(1)(f) and CityCamp’s legitimate interest in protecting the website and service. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) applies. Google Maps is loaded only after your choice; where consent is the legal basis, Article 6(1)(a) applies.
Privacy policy
When you send a booking request
To handle a booking request, CityCamp needs the information marked as required in the form.
- Required information includes dates, number of people, vehicle type, name and email. Confirming that you have read the privacy policy only documents that the information was made available; it is not the legal basis for processing the booking itself.
- Phone number and message are optional. If provided, they are used only in connection with the request and stay.
- If required information is not provided, CityCamp cannot process the booking request.
Automated decisions
CityCamp does not make decisions about your booking solely by automated processing or profiling. A booking becomes final only after CityCamp has reviewed and confirmed it.
Privacy policy
How long do we keep information?
Identifiable customer data from a booking is retained for 2 years after the recorded departure date. The guest name, email address, phone number and any personal message are then removed automatically from the booking.
The booking reference, dates, number of people, vehicle type, language and booking status may continue to be retained for history and statistics without the guest’s name, email address, phone number or personal message.
The system automatically reviews old bookings and removes identifiable customer data once 2 years have passed from the departure date. Booking history without the removed contact details may be retained longer for operations, statistics and historical records.
Privacy policy
Who may receive information?
Information is shared with service providers only when necessary to operate the website and handle bookings.
- Website/database hosting provider that hosts the website and booking system.
- Email provider used for booking confirmations and communication.
- Google Ireland Limited/Google group when Google Fonts is loaded, when you allow Google Maps, or when you choose to open Google directions.
- jsDelivr, which supplies the country-code and flag library used by the booking form phone field.
External providers may process technical information under their own terms. CityCamp should continuously ensure that relevant data-processing agreements and transfer safeguards are in place where required.
Privacy policy
Providers and processing outside the EU/EEA
Some technical providers may process information outside the EU/EEA. Where relevant, such processing must rely on a valid transfer mechanism and appropriate safeguards.
- Google is used for DM Sans and, after your choice, Google Maps. Google Ireland Limited provides services to users in the EEA, and technical information may be processed within the Google group.
- Email and hosting providers may process information necessary for operation, booking communication and storage. CityCamp must have appropriate data-processing agreements in place where required.
Privacy policy
Cookies and external content
The website uses necessary cookies for sessions, form security and remembering cookie choices. Google Maps is loaded only after your choice. See the cookie policy for details and to change your choice.
CookiesPrivacy policy
Your rights
Depending on the circumstances, you may have the following rights under data protection law:
- Right of access to personal data processed about you.
- Right to have inaccurate information corrected.
- Right to erasure when the legal conditions are met.
- Right to request restriction of processing.
- Right to data portability where applicable.
- Right to object to certain processing.
If you exercise one of your rights, CityCamp will respond without undue delay and normally within one month.
You may lodge a complaint about personal-data processing with Datatilsynet.
Data questions
Contact CityCamp about your information.
If you want access, correction, deletion or have questions about this privacy policy, you can contact CityCamp directly.
contact@citycamp.dk