Hazy Tundra
Home About Experiences Contact This site contains advertising content

GDPR Compliance Statement

Last Updated: September 22, 2026

Our Commitment to Data Protection

Although Hazy Tundra operates primarily in Australia, we recognize that visitors to our website may include residents of the European Union. We are committed to complying with the General Data Protection Regulation (GDPR) principles when handling personal data of EU residents.

Legal Basis for Processing

We process personal information based on the following legal grounds:

  • Consent: When you submit inquiry forms or accept cookies, you provide explicit consent for data processing
  • Contractual Necessity: Processing required to fulfill booking arrangements you have requested
  • Legitimate Interests: Improving our services and website functionality, provided these interests do not override your rights
  • Legal Obligations: Compliance with applicable laws and regulations

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data in a structured, commonly used format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when you object to processing and there are no overriding legitimate grounds.

Right to Restriction of Processing

You may request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request to receive your data in a portable format or have it transmitted to another controller.

Right to Object

You may object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your EU member state if you believe our processing of your personal data violates GDPR.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. Include sufficient information to identify yourself and specify which right you wish to exercise. We will respond to your request within one month, or inform you if additional time is required.

Data Processing Activities

Data Controller

Hazy Tundra acts as the data controller for personal information collected through our website and booking processes.

Data Processors

We engage the following categories of processors who may access personal data:

  • Accommodation partners and tour operators fulfilling bookings
  • Email service providers facilitating communications
  • Website hosting providers maintaining infrastructure

All processors are bound by contractual obligations ensuring appropriate data protection measures.

International Data Transfers

As we operate in Australia, personal data of EU residents is transferred outside the European Economic Area. We ensure appropriate safeguards are in place through:

  • Processing only with explicit consent
  • Implementing security measures consistent with GDPR requirements
  • Ensuring partners handling EU resident data maintain adequate protection standards

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy. Typical retention periods include:

  • Inquiry data: Three years after last contact
  • Booking records: Seven years for financial compliance
  • Marketing consent records: Until consent is withdrawn

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data Breach Notification

In the event of a data breach affecting personal information of EU residents, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, where feasible and required by law.

Children's Data

We do not knowingly process personal data of individuals under 16 years of age without parental consent. If we discover such processing has occurred, we will delete the data promptly.

Contact Our Data Protection Officer

For questions specifically related to GDPR compliance or data protection practices:

Email: [email protected]
Address: 142 Fitzroy Street, St Kilda, Victoria 3182, Australia

Hazy Tundra

Facilitating meaningful encounters with Australian wilderness through accommodation and experiences that prioritize ecological integrity.

Quick Links

About Us Experiences Contact Privacy Policy

Legal

Terms of Use GDPR Compliance Cookies Policy

Contact

[email protected]

Responses within 24 hours

© 2026 Hazy Tundra. All rights reserved.