GDPR Compliance

Last updated: August 26, 2026

Our Commitment to GDPR

lunar-hub.com is committed to protecting the privacy rights of individuals in the European Union under the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights as a data subject.

Data Controller

For the purposes of GDPR, the data controller is:

lunar-hub.com
427 Mountain View Road
Canmore, Alberta T1W 2R8
Canada
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Consent: You have given explicit consent for processing your data for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations when you book an expedition
• Legal obligation: Processing is required to comply with legal requirements
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. We will make corrections within 30 days of receiving your request.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller where processing is based on consent or contract.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your EU member state if you believe our processing of your personal data violates GDPR.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]

Please include the following in your request:

• Your full name and contact information
• Specific right you wish to exercise
• Clear description of your request
• Proof of identity (to protect your data from unauthorized access)

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days and will inform you of any such extension.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection principles
• Data minimization practices

International Data Transfers

As a Canadian company, we may transfer your data outside the EU. When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Data

We do not knowingly collect or process personal data of children under 16 without parental consent. If you believe we have inadvertently collected such data, please contact us immediately.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated to affected individuals.

Contact Us

For any questions or concerns regarding GDPR compliance or data protection, please contact us at [email protected]