GDPR Compliance Statement

Last updated: June 19, 2026

General Data Protection Regulation (GDPR) Compliance

fjord-trek.com is committed to ensuring compliance with the General Data Protection Regulation (GDPR). This statement outlines how we process personal data in accordance with GDPR requirements.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for us to process your personal data, such as when registering for our training programmes.
• Contractual Necessity: When processing is necessary to fulfil our contractual obligations to you.
• Legitimate Interest: When we have a legitimate interest in processing your data, such as improving our services.
• Legal Obligation: When we are required by law to process your data.

Data Controller

fjord-trek.com acts as the data controller for the personal information collected through this website. Our contact information is available on the Contact page.

Your GDPR Rights

Under GDPR, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to certain types of processing.
• Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month of receipt.

Data Transfers

We do not transfer your personal data outside the European Economic Area (EEA). If such transfers become necessary, we will ensure appropriate safeguards are in place.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO).

Children's Data

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.

Updates to This Statement

We may update this GDPR Compliance Statement to reflect changes in our data processing practices or legal requirements. Any updates will be posted on this page.

Contact Information

For questions about our GDPR compliance or to exercise your rights, please contact us at [email protected].