GDPR Information

Your data protection rights under the General Data Protection Regulation

Our Commitment to Data Protection

Although storm-orbit operates primarily in Canada, we respect the data protection rights of all our users, including those in the European Union. This page outlines your rights under GDPR and how we protect your personal data.

Your Rights Under GDPR

Right to Access

You have the right to request copies of your personal data. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you. You also have the right to request completion of incomplete data.

Right to Erasure

Under certain conditions, you have the right to request deletion of your personal data. We will comply unless we have legitimate grounds to retain the information.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data under certain circumstances.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Legal Basis for Processing

We process your personal data based on:

  • Consent: When you provide information through our forms, you consent to its use for the stated purposes
  • Contractual necessity: To deliver route information and services you request
  • Legitimate interests: To improve our services and communicate with customers
  • Legal obligation: To comply with applicable laws and regulations

Data We Collect

We collect and process the following categories of personal data:

  • Contact information (name, email address)
  • Service preferences and selections
  • Messages and communications you send us
  • Technical data (IP address, browser type, device information)
  • Usage data (pages visited, time on site, navigation patterns)

How We Use Your Data

We use your personal data to:

  • Provide requested route information and services
  • Communicate with you about your inquiries
  • Improve our website and offerings
  • Ensure security and prevent fraud
  • Comply with legal obligations

Data Retention

We retain your personal data only as long as necessary for the purposes outlined above. Specific retention periods:

  • Customer inquiry data: 3 years from last contact
  • Route purchase data: 7 years for financial records
  • Analytics data: 2 years in aggregated form
  • Marketing communications: Until you unsubscribe

Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers who assist with website operations (under strict confidentiality agreements)
  • Legal authorities when required by law
  • Professional advisors (lawyers, accountants) under confidentiality obligations

International Data Transfers

Our servers are located in Canada. If you are accessing our website from outside Canada, your data will be transferred to and processed in Canada. We ensure appropriate safeguards are in place for such transfers.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection
  • Incident response procedures

Exercising Your Rights

To exercise any of your GDPR rights, contact us at:

Email: [email protected]
Subject line: "GDPR Data Request"

Please include:

  • Your full name and email address
  • Specific right you wish to exercise
  • Any relevant details or documentation

We will respond within 30 days. If your request is complex, we may extend this period by two months and will inform you of the extension.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. In the EU, you can find your data protection authority at https://edpb.europa.eu/about-edpb/board/members_en

Updates

We may update this GDPR information from time to time. Significant changes will be communicated through our website. Please review this page periodically.

Contact Information

For questions about GDPR compliance or data protection:

storm-orbit
438 Mountain View Road
Canmore, Alberta T1W 2R7
Canada
[email protected]