GDPR Compliance

Our Commitment to GDPR

brisk-shelter is committed to complying with the General Data Protection Regulation (GDPR) for all users in the European Economic Area (EEA) and the United Kingdom. This page outlines how we handle your data in accordance with GDPR requirements.

Data Controller Information

brisk-shelter acts as the data controller for personal data collected through our website and services. Our contact details are:

brisk-shelter
245 Wellington Street West
Toronto, ON M5V 3C7
Canada

Data Protection Contact: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you (such as booking an expedition)
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request, free of charge.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of your data.

Right to Erasure

You have the right to request deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction

You may request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use such automated decision-making processes.

International Data Transfers

As a Canadian company, data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where we use service providers outside of adequate jurisdictions, we ensure appropriate safeguards are in place.

Data Retention

We retain personal data only as long as necessary for the purposes collected:

• Booking and transaction records: 7 years (legal/accounting requirements)
• Marketing preferences: Until you unsubscribe
• Website analytics: 26 months
• Inquiry correspondence: 3 years after last contact

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

• Email: [email protected]
• Subject line: "GDPR Request - [Your Right]"

We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

Updates to This Information

We may update this GDPR information page periodically. Any changes will be posted here with an updated effective date.

Last updated: January 15, 2024