GDPR Compliance

Last updated: September 2026

geyser-ibis is committed to protecting the privacy and security of personal data. This page outlines how we comply with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union (EU) and European Economic Area (EEA). Although we are based in Canada, we respect the principles of GDPR and extend these protections to all visitors to our website.

Data Controller

geyser-ibis acts as the data controller for personal information collected through our website. As the data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with applicable data protection laws.

Contact details:
geyser-ibis
1847 Riverside Drive, Suite 204
Toronto, Ontario M6S 4A1
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Contract: When processing is necessary for the performance of a contract with you, such as providing requested services.
• Legal Obligation: When processing is necessary for us to comply with legal requirements.
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.

Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receiving it. In certain circumstances, we may extend this period by up to two months, in which case we will inform you of the extension and the reasons for it.

We may ask you to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

Data Transfers

As we are based in Canada, personal data collected through our website may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We also implement appropriate safeguards to protect your data during any international transfers.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary depending on the type of data and the purpose of processing. When personal data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For EU/EEA residents, this would be the data protection authority in the EU member state where you reside, work, or where the alleged infringement occurred.

Changes to This Policy

We may update this GDPR compliance page from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us at:

geyser-ibis
1847 Riverside Drive, Suite 204
Toronto, Ontario M6S 4A1
Canada
Email: [email protected]