Last updated: October 2024
Our Commitment to GDPR
feral-mountain is committed to protecting the personal data of all our website visitors and customers, including those in the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) and respect the data protection rights it provides.
Data Controller
feral-mountain acts as the data controller for personal information collected through this website. Our contact details are:
feral-mountain
142 Mountain View Road
Canmore, Alberta T1W 1N6
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you (such as booking a photography tour)
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
- Legal obligation: Where processing is necessary to comply with legal requirements
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. In certain circumstances, this period may be extended by an additional two months, in which case we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request. We will not charge a fee for most requests, but may charge a reasonable fee if your request is clearly unfounded or excessive.
International Data Transfers
As a Canadian company, we may transfer personal data outside the EEA. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where we transfer data to other countries, we implement appropriate safeguards to protect your data.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.
Data Security
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Supervisory Authority
If you are located in the EEA and believe we have not adequately addressed your concerns about our data processing practices, you have the right to lodge a complaint with your local data protection supervisory authority.
Updates to This Information
We may update this GDPR information from time to time. We encourage you to review this page periodically for the latest information on our privacy practices and GDPR compliance.
Contact Us
For any questions or concerns about our GDPR compliance or to exercise your data protection rights, please contact us at:
Email: [email protected]