Our commitment to data protection for EU residents
Last Updated: January 2024
Summit-Roam is committed to protecting the personal data of all users, including those in the European Union (EU) and European Economic Area (EEA). This page explains how we comply with the General Data Protection Regulation (GDPR) and outlines your rights under this regulation.
For the purposes of the GDPR, Summit-Roam acts as the data controller for personal data collected through our website summit-roam.com and related services. This means we determine the purposes and means of processing your personal data.
Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications or accepting non-essential cookies.
Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract, such as when you inquire about our services.
Where processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights. Examples include improving our website and services, and ensuring network security.
Where processing is necessary for compliance with a legal obligation to which we are subject.
If you are an EU or EEA resident, you have the following rights regarding your personal data:
You have the right to request access to the personal data we hold about you. This includes information about what data we process, why we process it, and who we share it with.
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
Also known as the "right to be forgotten," you have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller without hindrance.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, although this period may be extended by two further months where necessary, taking into account the complexity and number of requests.
We may need to verify your identity before fulfilling your request. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where we transfer data to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. When determining retention periods, we consider:
For any questions or concerns about our data protection practices or to exercise your GDPR rights, please contact our data protection representative at:
Email: [email protected]
Address: 2850 Bloor Street West, Suite 410, Toronto, ON M8X 1B1, Canada
If you are an EU or EEA resident and believe that we have not adequately addressed your concerns about our data processing practices, you have the right to lodge a complaint with your local supervisory authority. You can find the contact details of EU data protection authorities at: https://edpb.europa.eu/about-edpb/board/members_en
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated "Last Updated" date.