Privacy Policy

Effective Date: 10/11/2025
Last Updated: 10/11/2025

1. Introduction

Nuevo Campo (“we”, “us”, “our”) is a leisure and sports venue located in Nicosia, Cyprus, offering services including football pitch bookings, children’s birthday-parties, café services and general social/rec leisure activities.
We are committed to protecting and respecting your personal data. This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our venue, use our services, visit our website, or otherwise interact with us.

2. Data Controller

Nuevo Campo
Address: 2 Aristidou Street, Latsia, Nicosia, Cyprus.
Email: infonuevocampo@gmail.com
If you have any questions or concerns about this policy or our privacy practices, please contact us at the email above.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification & contact data: full name, postal address, email address, telephone number.
Booking & service data: details of your booking (e.g., date/time of field hire or party booking), number of participants, age group (for kids parties), any special requests.
Financial & transactional data: payment information (card details, bank details) and invoicing/billing details when relevant.
Communications data: correspondence you send us (e-mail, phone calls, chat) and any notes/actions arising from site contact.
Usage data: data about how you use and access our website (IP address, browser type, device data, pages visited, time & date).
Event/venue data: when on our premises, we may collect CCTV footage or venue access data for security and safety purposes (if applicable).
Marketing and preference data: when you opt in to receive offers, newsletters, promotions from us – your preferences for communications, past bookings.

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

To manage and fulfil your booking of our football fields, kids parties or café services (Legal basis: performance of contract)
To administer payments, invoices and receipts (Legal basis: legal obligation)
To communicate with you regarding your booking, venue rules, safety instructions, changes to schedule or services (Legal basis: legitimate interests)
To maintain our venue & ensure safety, security (including CCTV or access logs) (Legal basis: legitimate interests and legal obligation)
To operate, improve and manage our website, analyse usage, and maintain IT security and anti-fraud measures (Legal basis: legitimate interests)
To send you our marketing offers, newsletters, promotions (only where you have consented) (Legal basis: consent)
To comply with applicable laws and regulations in Cyprus (Legal basis: legal obligation)

5. Disclosures and Third-Party Processing

We may share your personal data with third parties in the following situations:

Service providers and subcontractors acting on our behalf (for example, event caterers, party-planning services, maintenance contractors) who need the data to deliver the service you booked.
Payment processors and banks for the purpose of handling payments.
IT and website hosting providers for maintaining our online presence.
Legal, regulatory or governmental bodies when required under Cyprus or EU law (for example, health & safety inspections, tax authorities).
Security and CCTV data may be shared with law enforcement if required under lawful request.
In the event of a sale or transfer of our business or assets, your personal data may be transferred to the acquiring entity (subject to data-protection assurances).

We will not sell or lease your personal data to unaffiliated third parties for marketing without your explicit consent.

6. International Transfers

Where your data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to ensure your data is afforded an adequate level of protection in accordance with the GDPR and Cyprus law.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out above, including:

Booking, service and payment records: typically up to 10 years (for audit, tax, warranty or liability purposes)
Marketing and preference data: until you withdraw consent or opt out
Website analytics data: aggregated/anonymised when feasible, individual identifiers deleted/reset periodically
CCTV/security footage: retained for a period as required by law or our internal security policy

After the retention period ends, we will securely anonymise or delete your personal data.

8. Your Rights

Under the GDPR and Cyprus Law 125(I)/2018, you have the right to:

Request access to the personal data we hold about you.
Request correction or update of inaccurate/incomplete data.
Request deletion of your personal data (“right to be forgotten”), subject to legal or contractual restrictions.
Request restriction of processing of your personal data.
Object to processing based on legitimate interests.
Request data portability (where processing is based on consent or contract and performed by automated means).
Withdraw your consent at any time (where processing is based on consent).
Lodge a complaint with the supervisory authority: the Office of the Commissioner for Personal Data Protection in Cyprus.
To exercise any of these rights, please contact us using the contact details above. We will respond within the timeframe required by law (typically one month).

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Access to personal data is restricted to authorised personnel who require it to perform their duties. Regular review of our security measures is undertaken to adapt to new threats.

10. Cookies and Website Tracking

Our website may use cookies or similar tracking technologies to collect information about your visit (for example, to remember your preferences or help us analyse site use). You can control cookies via your browser settings; you may accept or decline cookies. If you decline non-essential cookies, you may still use the website though certain features may be limited.

11. Third-Party Links

Our website and venue communications may include links to third-party sites or services (for example, social-media pages). We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of every site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time (for example, as our business evolves or legal requirements change). We will post the updated policy on our website and amend the “Last Updated” date. We encourage you to review it periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Nuevo Campo
2 Aristidou Street, Latsia, Nicosia, Cyprus
Email: infonuevocampo@gmail.com
Phone: +357 99530500

End of Privacy Policy