GDPR Compliance

Last Updated: January 15, 2024

Overview

silent-bear is committed to complying with the General Data Protection Regulation (GDPR) for all individuals in the European Economic Area (EEA). This page explains how we handle your personal data in accordance with GDPR requirements.

Data Controller

silent-bear acts as the data controller for personal information collected through our website and services. Our contact details are:

silent-bear
1247 Wilderness Trail
Whistler, BC V8E 0A3
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit inquiry forms or sign up for communications
• Contract: When processing is necessary for tour bookings and service delivery
• Legitimate Interests: For website analytics and service improvement, where our interests do not override your rights
• Legal Obligation: When required to comply with applicable laws

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right of Access

You may request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a valid request.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

You may object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

International Data Transfers

As we are based in Canada, personal data from the EEA may be transferred to Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. For any transfers to other countries, we implement appropriate safeguards such as Standard Contractual Clauses.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include:

• Inquiry data: 36 months from submission
• Booking records: 7 years for legal compliance
• Marketing preferences: Until consent is withdrawn

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to valid requests within 30 days.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.

Changes to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.