Last Updated: October 2026
This page provides information about how rustic-nebula complies with the General Data Protection Regulation (GDPR) for visitors and customers from the European Union and European Economic Area.
Data Controller
rustic-nebula acts as the data controller for personal data collected through our website and services. Our contact details are:
rustic-nebula
350 Rue Saint-Paul Ouest
Montreal, Quebec H2Y 2A6
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Contract Performance: Processing necessary to fulfill tour bookings and service agreements
- Legitimate Interests: Processing for business purposes such as improving our services and communicating relevant information
- Consent: Processing based on your explicit consent, such as marketing communications
- Legal Obligation: Processing required to comply with applicable laws
Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data under certain circumstances.
Right to Restrict Processing: You may request that we limit how we use your data.
Right to Data Portability: You may request to receive your data in a structured, machine-readable format.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
International Data Transfers
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate data protection. Where necessary, we implement appropriate safeguards such as Standard Contractual Clauses.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary based on the type of data and applicable legal requirements. You may request information about specific retention periods by contacting us.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two months, and we will inform you if this is necessary.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with your local data protection supervisory authority.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated effective date.