plateau-space

General Data Protection Regulation Compliance

Although plateau-space operates primarily in Canada, we recognize the importance of protecting the personal data of all individuals, including visitors from the European Union. This page outlines how we comply with GDPR principles.

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: When you submit a booking form, you provide explicit consent for us to process your personal information
Contractual necessity: Processing is necessary to fulfill our service obligations when you book a tour
Legitimate interests: We may process data for legitimate business purposes such as improving our services, provided this does not override your rights
Legal obligation: We may process data to comply with applicable laws and regulations

Data Subject Rights

Under GDPR, you have comprehensive rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when you object to processing.

Right to Restriction of Processing

You may request that we limit how we use your data in certain circumstances.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format and have it transmitted to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Processing Details

What Data We Collect

We collect only data necessary for providing our services:

Name and email address for booking confirmation
Tour preferences and selected routes
Number of participants
Technical data such as IP address and browser information

How We Use Your Data

Your data is used exclusively for:

Processing and confirming tour bookings
Communicating about scheduled tours
Improving our website and services
Complying with legal obligations

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. Booking information is typically retained for two years after tour completion.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

Encryption of data in transit and at rest
Access controls limiting who can view personal data
Regular security assessments and updates
Staff training on data protection practices
Secure backup procedures

Third-Party Data Sharing

We do not sell or rent personal data to third parties. Data may be shared only with:

Tour guides assigned to your booking, limited to information necessary for service delivery
Service providers operating under strict data processing agreements
Authorities when legally required

Any third-party processors we engage are required to provide equivalent data protection standards.

International Data Transfers

Our servers and data storage are located in Canada. If you are located in the EU and provide personal data, please be aware that your data will be transferred to and processed in Canada. We ensure appropriate safeguards are in place for such transfers.

Automated Decision-Making

We do not use automated decision-making or profiling that would have legal or similarly significant effects on individuals.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your data protection rights, contact us at:

Email: [email protected]
Address: 127 Clarence Street, Ottawa, ON K1N 5P8, Canada

We will respond to all requests within one month of receipt.

Updates to This Information

We may update our GDPR compliance practices as regulations evolve or our business practices change. Material changes will be communicated through our website with an updated revision date.