Effective date: August 26, 2026
While stellar-geyser operates primarily in Canada, we recognize that some of our clients are residents of the European Union. We are committed to respecting the data protection rights established under the General Data Protection Regulation (GDPR) for all our customers, regardless of location.
We process personal data under the following legal grounds:
If you are an EU resident, you have the following rights regarding your personal data:
You may request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. Contact us with the updated information, and we will make the necessary changes promptly.
You may request deletion of your personal data, subject to certain exceptions. We must retain some information for legal and safety reasons, including booking records, liability waivers, and financial transactions. Where no legal obligation exists, we will delete your data upon request.
You may ask us to limit how we use your data while we verify its accuracy or assess whether we have legitimate grounds for processing it.
You may request that we transfer your personal data to another service provider in a machine-readable format, where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing that occurred before withdrawal.
Personal data collected from EU residents is transferred to and stored in Canada. While Canada is not currently recognized by the EU as providing adequate data protection, we implement appropriate safeguards including:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach. Notification will include the nature of the breach, likely consequences, and measures we are taking to address it.
For questions about GDPR compliance or to exercise your rights, contact our data protection coordinator:
Email: [email protected]
Postal address: 847 Wilderness Trail, Canmore, Alberta T1W 2R9, Canada
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority in the EU.
We do not knowingly process personal data of children under 16 without parental consent. Expedition bookings involving minors require a parent or legal guardian to provide consent and complete all forms on the child's behalf.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
Personal data is retained for the following periods:
After these periods, data is securely deleted or anonymized.
We review this GDPR compliance statement annually and update it as necessary to reflect changes in our practices or legal obligations. Material changes will be communicated to affected individuals via email.