GDPR Compliance

Our Commitment to GDPR

Hazy Fjord is committed to complying with the General Data Protection Regulation (GDPR) for visitors and customers from the European Economic Area. This page outlines your rights and our obligations under GDPR.

Data Controller

Hazy Fjord acts as the data controller for personal data collected through this website. Our contact details are:

Email: [email protected]
Address: 742 Trailhead Avenue, Suite 205, Boulder, CO 80302, United States

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data that we hold. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly where we are processing data for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

Lawful Basis for Processing

We process personal data based on the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Where processing is necessary for us to comply with the law
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, unless your rights override those interests

Data Transfers

As we are based in the United States, data you provide may be transferred outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Our standard retention period for contact and inquiry data is three years from your last interaction with us, unless a longer retention period is required by law.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two months, in which case we will inform you of the extension and the reasons for it.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the opportunity to address your concerns directly before you approach a supervisory authority.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated date.

Last updated: September 2026