GDPR Compliance

Our Commitment to Data Protection

While alpine-marsh operates from Canada, we recognize the rights of European Union residents under the General Data Protection Regulation (GDPR). This page outlines how we honor those rights.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract Performance: Processing necessary to deliver route guides you have purchased
• Legitimate Interest: Improving our services and responding to inquiries
• Consent: For marketing communications, which you can withdraw at any time

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements for business records and accounting purposes.

Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts.

Data Transfers

Your personal information is stored on servers located in Canada. Canada has been recognized by the European Commission as providing adequate data protection. Any third-party service providers we use are required to maintain equivalent protection standards.

Data Retention Periods

• Route purchase information: 7 years for accounting requirements
• Customer correspondence: 3 years from last contact
• Marketing consent records: Retained until withdrawal of consent

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with:

• Your full name and email address used for your reservation
• Specific right you wish to exercise
• Any relevant details to help us locate your information

We will respond to your request within 30 days. If we need additional time, we will inform you of the extension and the reasons.

Right to Lodge a Complaint

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with:

• The Office of the Privacy Commissioner of Canada
• Your local EU supervisory authority

Data Protection Officer

For data protection inquiries, contact our designated representative at [email protected].

Updates to This Notice

We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Material changes will be communicated to affected individuals.