Our Commitment to GDPR
zen tundra is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR). This page provides information about how we handle personal data of individuals located in the European Economic Area (EEA) and the United Kingdom.
Data Controller
For the purposes of the GDPR, zen tundra is the data controller responsible for your personal data. Our contact details are:
zen tundra
147 Spadina Avenue, Suite 302
Toronto, Ontario M5V 2L7
Canada
Email: [email protected]
Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to our newsletter or marketing communications.
- Contract: Where processing is necessary for the performance of a contract with you, such as providing our travel planning services.
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms. This includes improving our services and ensuring the security of our website.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
Your Rights Under GDPR
If you are located in the EEA or UK, you have the following rights regarding your personal data:
- Right of Access: You have the right to request copies of your personal data. We may charge a small fee for this service.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
How to Exercise Your Rights
If you wish to exercise any of the rights set out above, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two further months, in which case we will inform you accordingly.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
International Data Transfers
As we are based in Canada, your personal data may be transferred to, stored, and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection.
Where we transfer your personal data to other countries that have not been recognized as providing adequate protection, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means.
Right to Lodge a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with a supervisory authority. In particular, you may lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.