Privacy policy

This page explains what we learn about you when you use nordickitecommunity.com, what we use it for, and who else sees it.

The short version is that the site sets no cookies, doesn't track traffic and has no database. Whatever you write in our forms arrives as an email in our inbox.

Who is responsible

Nordic Kite Community is the data controller for the personal data we process through the website.

Nordic Kite Community
CVR (Danish company no.) 46653092
kontakt@nordickitecommunity.com

Write to us if you have questions about how we handle your data.

When you contact us

The contact form on the front page asks for your name, your email and your message. We use them only to reply to you. The form sends them as an email to our inbox, and we don't store them anywhere else.

The legal basis is our legitimate interest in answering enquiries (GDPR article 6(1)(f)). If you ask about a camp, we also process the data to take steps towards an agreement with you (article 6(1)(b)).

When you apply for a camp

The application form gives us:

• your name and email
• your phone number, if you add it
• which camp you're applying for, your level and your gear needs
• your discount code, if you use one
• whatever you write in "Anything else we should know?"
• the language you read the site in, so your confirmation arrives in the same language

We use this to handle your application, put the groups together, plan gear and contact you about the camp. The application is sent as an email to our inbox, and you get a confirmation by email. The legal basis is that we need it to enter into and fulfil an agreement with you (article 6(1)(b)).

When you press "Check code", your browser sends the discount code and the chosen camp to our server, which replies with the price. We don't store the lookup.

Health information

The "Anything else we should know?" field is optional. If you mention an allergy there, that is health information, which counts as sensitive. We use it only to plan the camp, the food for example, and only because you chose to share it. The legal basis is your explicit consent (article 9(2)(a)). You can withdraw it by writing to us, and we will delete the information.

Technical data

When you visit the site, your browser automatically sends technical data to our hosting provider Vercel, such as your IP address, your browser type and the page you ask for. The site can't be delivered to you without it. Vercel also uses it to protect the site against attacks and keeps it in its logs for a short period.

When you submit a form, our server uses your IP address to limit the number of attempts so bots can't flood us with spam. The IP address stays in the server's memory for at most 10 minutes and is never stored.

The legal basis is our legitimate interest in running a secure website (article 6(1)(f)).

Cookies and third parties

The site sets no cookies, and we use no analytics, advertising or tracking tools. That's why we don't ask you to accept cookies.

Our fonts are served from our own server, so your browser doesn't fetch them from Google. Wind data is fetched by our server from Open-Meteo. Your browser never contacts Open-Meteo, and we send it nothing about you.

If you follow our links to Instagram or WhatsApp, you leave the site and Meta's own privacy rules apply from there.

Our editing tool at /keystatic uses login cookies. It's only for the people who edit the site's content.

Who sees your data

We don't sell your data, and we share it only with the two providers that run the site for us. They are data processors and may only use the data on our instructions.

• Vercel Inc., USA, hosts the website and handles all traffic to it, including what you send through the forms.
• Google provides our email through Google Workspace. Your messages and applications sit in our inbox at Google, and your confirmation is sent from there.

Both providers may process data in the USA. Transfers rely on the EU-U.S. Data Privacy Framework, under which both are certified, and the European Commission's standard contractual clauses.

How long we keep it

• Messages are deleted once we've finished replying, and no later than 12 months after our last contact.
• Applications from people who don't join a camp are deleted no later than 12 months after the camp.
• If you join, we keep your details as long as we need them for the camp. What goes into our accounts, such as your name and the price, we keep for 5 years after the end of the financial year, as the Danish Bookkeeping Act requires.
• Health information is deleted when the camp is over, at the latest.
• Technical logs stay with Vercel for a short time. IP addresses used for spam protection are gone after at most 10 minutes.

Your rights

You have the right to

• know what data we hold about you
• have incorrect data corrected
• have your data deleted
• have our processing of it restricted
• object to processing based on our legitimate interest
• receive the data you gave us in a common format
• withdraw a consent. This doesn't affect processing that took place before.

Write to kontakt@nordickitecommunity.com. We reply within one month.

Complaints

If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, datatilsynet.dk. Feel free to write to us first and we'll try to sort it out.

Changes

We update this policy when we change how we handle data. The date at the top shows when that last happened.