falcon-wave
Home About Expeditions Contact Advertising Content

GDPR Compliance

Effective Date: January 1, 2026

General Data Protection Regulation Compliance

While falcon-wave operates primarily in Canada, we recognize and respect the data protection rights of individuals in the European Union and European Economic Area. This page outlines our commitments under the General Data Protection Regulation.

Legal Basis for Processing

We process personal data under the following lawful bases:

  • Consent: When you submit inquiry forms, you provide explicit consent for us to process your information for expedition booking purposes.
  • Contractual necessity: Processing is necessary to fulfill booking agreements and provide expedition services.
  • Legitimate interests: We may process data to improve our services, maintain safety records, and comply with industry standards.

Your Rights Under GDPR

If you are located in the EU or EEA, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you, including information about how it is processed.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restriction of Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Retention

We retain personal data for no longer than necessary to fulfill the purposes outlined in our Privacy Policy. Inquiry data is typically retained for two years from initial contact. Booking records are retained for seven years to comply with business record-keeping requirements.

International Data Transfers

Your personal data is stored and processed in Canada. If you are located in the EU or EEA, please be aware that Canada is recognized by the European Commission as providing adequate data protection under GDPR standards.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Subject line: GDPR Data Request

We will respond to verified requests within one month of receipt. In complex cases, we may extend this period by an additional two months and will notify you of the extension.

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority in the EU or EEA.

Contact for GDPR Inquiries

falcon-wave
427 Ponderosa Avenue
Jasper, AB T0E 1E0
Canada
Email: [email protected]

falcon-wave

Guided wilderness expeditions across Canadian backcountry

Resources

  • About
  • Expeditions
  • Contact

Legal

  • Privacy Policy
  • GDPR
  • Cookies Policy
  • Terms of Use

© 2026 falcon-wave.com. All rights reserved.