GDPR Information
Last updated: September 22, 2026
Your Rights Under GDPR
If you are located in the European Economic Area, you have specific rights regarding your personal data under the General Data Protection Regulation:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal information we hold about you.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, including:
- The data is no longer necessary for the purposes it was collected
- You withdraw consent and no other legal basis exists for processing
- You object to processing and no overriding legitimate grounds exist
- The data was unlawfully processed
Right to Restrict Processing
You have the right to request restriction of processing your personal data under certain conditions, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis and you believe your rights override those interests.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary to fulfill our service agreement with you
- Legal Obligation: When we must process data to comply with legal requirements
- Legitimate Interests: When processing serves our legitimate business interests and does not override your fundamental rights
Data Controller Information
Plateau Swan is the data controller responsible for your personal information. Contact details:
Email: [email protected]
Address: 2847 Wilderness Ridge Drive, Boulder, CO 80301, United States
International Data Transfers
Your data is primarily stored and processed in the United States. If you are located in the EEA, this constitutes a transfer to a country without an adequacy decision from the European Commission. We implement appropriate safeguards including standard contractual clauses where applicable.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy. Retention periods vary based on:
- Active participant data: Duration of participation plus three years
- Marketing communications: Until you opt out or request deletion
- Financial records: As required by tax and accounting regulations
Security Measures
We implement technical and organizational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments and updates
- Staff training on data protection practices
Data Breach Notification
In the event of a data breach that poses risks to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach.
Exercising Your Rights
To exercise any of your GDPR rights, contact us at:
Email: [email protected]
We will respond to your request within one month. In complex cases, we may extend this by two additional months and will inform you of the extension.
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority in the EEA.
Updates to GDPR Information
We may update this information to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or direct notification.