Your data protection rights under EU regulation
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although Tundra-heron is based in Canada, we are committed to protecting the privacy of all our visitors, including those from the EU.
This page explains how we comply with GDPR requirements and outlines the rights you have regarding your personal data.
Tundra-heron acts as the data controller for personal information collected through this website. As the data controller, we determine the purposes and means of processing your personal data.
Contact details for data protection inquiries:
Email: [email protected]
Address: 147 Artisan Lane, Toronto, ON M5V 2T6, Canada
Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
If you are located in the EU or EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected or when you withdraw consent.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR. In certain circumstances, we may extend this period by two additional months if necessary, in which case we will inform you of the extension and reasons for it.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
As we are based in Canada, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where we transfer data to other countries, we ensure appropriate safeguards are in place.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
For any questions about GDPR compliance or to exercise your rights, please contact us at:
Email: [email protected]
Address: 147 Artisan Lane, Toronto, ON M5V 2T6, Canada