Data Controller
Forest-heron acts as the data controller for personal information collected through this website. We determine how and why your personal data is processed.
Contact details:
Forest-heron
427 Rue Saint-Jean
Quebec City, QC G1R 1P3
Canada
Email: [email protected]
Legal Basis for Processing
We process your personal data under the following legal bases:
Contract Performance: When you book an experience, we process your information to fulfill that service contract.
Legitimate Interest: We process certain data to improve our services, prevent fraud, and maintain website security.
Consent: For cookies and certain marketing communications, we rely on your explicit consent, which you can withdraw at any time.
Your Rights Under GDPR
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete personal information.
Right to Erasure: You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing: You can ask us to limit how we use your data in specific situations.
Right to Data Portability: You can request your data in a structured, machine-readable format.
Right to Object: You can object to processing based on legitimate interests or for direct marketing.
Rights Related to Automated Decision Making: You have rights regarding automated processing and profiling, though we do not currently engage in such activities.
How to Exercise Your Rights
To exercise any of these rights, contact us at [email protected] with your request. Please include sufficient details to help us locate your information and verify your identity.
We will respond to your request within one month, though this may be extended by two additional months for complex requests. You will be informed of any such extension.
International Data Transfers
Your personal information may be transferred to and processed in countries outside the European Economic Area, including Canada. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Booking records are typically maintained for five years.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. Contact details for EU supervisory authorities can be found at the European Data Protection Board website.
Data Security
We implement technical and organizational measures designed to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures are regularly reviewed and updated as needed.
Updates to This Information
We may update this GDPR information to reflect changes in our practices or legal obligations. Significant changes will be communicated through our website.
Last updated: September 16, 2026