Privacy Policy
Effective from 15 October 2026
1. Who we are
MReport OÜ, registration No. 17383034, Pärnu mnt. 105, 11312 Tallinn, Estonia ("we", "us") is the controller of the personal data described in this policy. We organise the COMM CAMP masterclass and operate www.commcamp.com.
For any question about your data, write to chris@commcamp.com.
2. What data we collect
When you book a masterclass: your name, e-mail address, phone number, job title, company name, VAT number, billing address, the masterclass venue, the number of participants, and any information you add in the booking form.
When you pay: payment details are entered directly with our payment provider, Stripe. We receive confirmation of the payment and limited details such as the card type and the last four digits, but never the full card number.
When you attend: the names and e-mail addresses of participants, so that we can deliver the masterclass, the online support and the SlideTree™ licences.
When you contact us: the content of your e-mails and messages.
When you visit the website: our hosting provider records technical data such as IP address, browser type and the pages requested, in standard server logs used for security and troubleshooting.
3. Why we use your data and on what legal basis
To handle your booking and deliver the masterclass, including online support, licences and invoicing. Legal basis: performance of a contract with your organisation, or steps taken at its request before entering into a contract (GDPR Article 6(1)(b)), and our legitimate interest in communicating with the people who represent our clients and participate in the masterclass (Article 6(1)(f)).
To keep accounting records and meet tax obligations. Legal basis: compliance with a legal obligation (Article 6(1)(c)).
To answer your questions and stay in touch with our business clients, for example about future masterclasses. Legal basis: our legitimate interest in running and developing our business (Article 6(1)(f)). You can object at any time and we will stop.
To keep the website secure. Legal basis: our legitimate interest in protecting our systems (Article 6(1)(f)).
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who receives your data
We share data only with service providers who help us run COMM CAMP, and only as far as they need it:
Calendly (booking system) and Stripe (payments), which process data under their own terms and privacy policies; our hosting provider; our e-mail and cloud storage providers; and our accountant. We may also disclose data where required by law.
5. Transfers outside the European Economic Area
Some of our service providers, including Calendly and Stripe, may process data in the United States or other countries outside the EEA. Where this happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, for certified companies) or by the European Commission's Standard Contractual Clauses.
6. How long we keep your data
Booking and client correspondence: for as long as the business relationship lasts and up to three (3) years after the last masterclass, unless a longer period is needed to resolve a dispute.
Accounting documents (invoices and payment records): for the period required by Estonian accounting law, currently seven (7) years.
Server logs: for a short period, normally no longer than 90 days.
7. Cookies and the booking window
The COMM CAMP website itself does not use cookies, analytics or advertising trackers, and its fonts are served from our own server. When you click "Book a date", the Calendly booking window is loaded, and Calendly may set cookies needed for the booking to work. This is governed by Calendly's own cookie and privacy policies.
8. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict its processing, to object to processing based on legitimate interests, and to receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time.
To exercise your rights, write to chris@commcamp.com. We will reply within one month.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the supervisory authority in your own EU country.
9. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with its effective date shown at the top.