We are a family business, running since 1985, and in summer we look after your children. This page sets out, briefly, what we do with your data when you use the app. The full details are in the website privacy policy, linked at the end.
Who handles it. Castillo de Layos S.L. (LayosCamp), CIF B-78583366, Calle Garza 11, 28023 Madrid (Spain). Data Protection Officer: dpo@layoscamp.com.
What for.
- To show you your children's summer: their session, the status of the booking, payments (view only: payment is made on the website), travel, and practical information about the location.
- To let you keep their details up to date: travel (including the ticket, if you upload it), their health form and the details of the parents or guardians. What you change reaches our office and the counsellors on their session.
- To let you know about news, if you turn notifications on.
- To email you the link to the session photos.
Your child's health form. It is filled in and updated by you, their parents or legal guardians, with your account. In the app only you can see and change it: no other parent has access to it.
What the app does not do. It has no third-party advertising or analytics and does not sell data.
Why we can do this. Because it is part of the service you booked when you registered your child (Art. 6.1.b GDPR). We process health data to look after your child, under the duty of confidentiality of those who care for them (Art. 9.2.h GDPR), just as when you registered. You turn notifications on or off on your phone.
Who else sees it.
- Our office team and the counsellors on your child's session, only to look after them.
- The app does not pass your data to third parties. What is shared as part of the booking (for example, with the camp's insurer) is explained in the website privacy policy.
- Our servers are in the European Union: Hetzner in Germany, and Microsoft 365 in Ireland for email.
- To deliver notifications we use Google (Firebase) and Apple, in the United States. Notifications do not contain your child's name or any health data. Google takes part in the EU-US Data Privacy Framework; Apple is covered by the European Commission's standard contractual clauses.
How long.
- Your session lasts until you sign out, or for up to 30 days without opening the app.
- The notification permission is deleted when you sign out or turn notifications off.
- We keep your child's data, including health data, for as long as they are of an age to come to camp with us: an allergy does not expire from one summer to the next. If you ask us to delete it sooner, we will. Invoices are kept for 6 years, as the law requires.
Your rights.
- You can ask for access, rectification, erasure, objection, restriction and portability by writing to dpo@layoscamp.com. We reply within one month, which may be extended to two if the request is complex (we would let you know).
- You can delete your account in the app: tap the round button with your initial, top right (Your account), then Delete my account. You can also ask us at dpo@layoscamp.com.
- If you are not happy with our reply, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).
More information.
- Website privacy policy: layoscamp.com/en/data-collection
- Are you a counsellor? Your information is in the counsellor app privacy page.
Last updated: 13 October 2026 · Version 1.0