GDPR Compliance

Last Updated: January 15, 2024

General Data Protection Regulation

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. witty-bamboo is committed to complying with the GDPR when processing personal data of individuals located in the EEA.

Data Controller

For the purposes of the GDPR, witty-bamboo acts as the data controller for personal information collected through our website. Our contact details are:

witty-bamboo
742 Wilderness Trail
Banff, Alberta T1L 1B3
Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you submit a booking inquiry or contact form, you consent to the processing of your personal data for the purpose of responding to your request.
• Legitimate Interests: We may process your data when it is in our legitimate business interests to do so, such as improving our services or preventing fraud.
• Legal Obligation: We may process your data when required to comply with applicable laws.

Your Rights Under GDPR

If you are a resident of the European Economic Area, you have the following data protection rights:

Right of Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This right is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two months, in which case we will inform you of the extension and the reasons for it.

International Data Transfers

As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection under Article 45 of the GDPR. This means that personal data can flow from the EEA to Canada without any further safeguard being necessary.

Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in our Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

Complaints

If you believe that we have violated your rights under the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

Changes to This Notice

We may update this GDPR notice from time to time. We will notify you of any changes by posting the new notice on this page and updating the "Last Updated" date.

Contact Us

For any questions regarding this GDPR notice or our data protection practices, please contact us at [email protected].