Our Commitment to GDPR
gorge-myth is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines your rights as a data subject and our practices regarding the collection, processing, and storage of personal data.
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose
- Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
- Legal Obligation: Processing is necessary for us to comply with the law
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests
Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have certain data protection rights:
Right of Access: You have the right to request copies of your personal data. We may charge a small fee for this service.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Data Protection Officer
While we do not have a designated Data Protection Officer as we fall below the GDPR threshold requirements, our management team is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us using the details below.
International Transfers
We are based in Canada, which has been recognized by the European Commission as providing an adequate level of data protection. For any transfers of data outside of adequacy-decision countries, we implement appropriate safeguards in accordance with GDPR requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.
Security Measures
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
Breach Notification
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and where feasible, within 72 hours of becoming aware of the breach.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at:
gorge-myth
582 Adventure Lane
Banff, Alberta T1L 1A1
Canada
Email: [email protected]
We will respond to your request within one month of receiving it. If your request is complex or you have made multiple requests, we may extend this period by a further two months, but we will notify you of any extension within one month of receiving your initial request.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with your local supervisory authority. We would, however, appreciate the chance to address your concerns before you approach the supervisory authority, so please contact us in the first instance.