Last Updated: January 15, 2024
Introduction
Tundra Peak is committed to complying with the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA). This page outlines our practices and your rights under GDPR.
Data Controller
Tundra Peak acts as the data controller for personal data collected through our website tundra-peak.com. Our contact details are:
Tundra Peak
742 Wilderness Way
Calgary, AB T2P 3M9
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose
- Contract: Processing is necessary to fulfill a contract with you or to take steps at your request before entering a contract
- Legal Obligation: Processing is necessary for compliance with a legal obligation
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two additional months for complex requests, in which case we will inform you.
We may request verification of your identity before processing your request.
Data Transfers
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. When data is no longer needed, it is securely deleted or anonymized.
Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication measures
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk, we will also notify you directly.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in your country of residence within the EEA.
Updates
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
Contact
For any questions about GDPR or to exercise your data rights, please contact us at:
Email: [email protected]
Address: 742 Wilderness Way, Calgary, AB T2P 3M9, Canada