GDPR Compliance

Last Updated: January 15, 2024

Glacier-ocelot is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights under this regulation.

Our Commitment to GDPR

As an organization that may process personal data of individuals in the European Economic Area (EEA), we have implemented comprehensive measures to ensure GDPR compliance. Our commitment includes:

• Processing personal data lawfully, fairly, and transparently
• Collecting data only for specified, explicit, and legitimate purposes
• Limiting data collection to what is necessary for stated purposes
• Ensuring data accuracy and keeping it up to date
• Retaining data only as long as necessary
• Processing data securely with appropriate technical measures

Legal Basis for Processing

We process personal data under one or more of the following legal bases:

• Consent: When you have given clear consent for us to process your personal data for specific purposes.
• Contract: When processing is necessary for performing a contract with you or taking steps at your request before entering into a contract.
• Legal Obligation: When processing is necessary for compliance with legal obligations.
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your rights.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request confirmation of whether we process your personal data and, if so, access to that data along with information about how it is processed.

Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restriction

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest data accuracy or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, which may include:

• Transfers to countries with adequate data protection laws as determined by the European Commission
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for transfers within our corporate group

Data Protection Officer

For questions regarding our GDPR compliance or to exercise your rights, please contact our data protection representative:

Email: [email protected]
Subject Line: GDPR Inquiry

Exercising Your Rights

To exercise any of your rights under GDPR, please submit a request to us at [email protected]. We will respond to your request within one month of receipt. In certain circumstances, we may extend this period by two additional months if necessary, and we will inform you of any such extension.

We may need to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You can file a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.