GDPR Compliance
Information for visitors from the European Economic Area
Our Commitment to GDPR
meta-stoat is committed to protecting the personal data of all visitors, including those from the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) and this page explains your rights under this regulation.
Data Controller
For the purposes of GDPR, meta-stoat acts as the data controller for personal information collected through this website. Our contact details are:
meta-stoat
147 Waterfront Drive, Suite 302
Halifax, Nova Scotia B3J 1T2
Canada
Email: [email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing necessary for the performance of a contract with you, such as processing bookings for our heritage experiences.
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
- Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, provided your rights do not override those interests.
- Legal Obligation: Processing necessary for compliance with legal obligations.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects. We do not currently use automated decision-making processes.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive many requests, we may extend this period by two months, and we will notify you of any extension.
International Data Transfers
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. When transferring data to other jurisdictions, we ensure appropriate safeguards are in place.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include:
- Booking records: 7 years (legal and accounting requirements)
- Marketing consent records: Duration of consent plus 3 years
- Website analytics data: 26 months
- Inquiry correspondence: 3 years from last contact
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For visitors from the EEA, this would typically be the data protection authority in your country of residence.
Updates to This Information
We may update this GDPR compliance information periodically. We encourage you to review this page regularly for the latest information about our data protection practices.