Data Protection and GDPR Compliance

Our Commitment

vale-sage is committed to protecting your personal data and respecting your privacy rights. While we are based in South Africa, we recognize the importance of international data protection standards and apply GDPR principles to all personal data we process.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit expedition requests or contact forms, you provide explicit consent for us to process your information
• Contractual Necessity: Processing required to fulfill expedition bookings and related services
• Legitimate Interest: Communications regarding safety updates, expedition changes, or operational matters related to booked services
• Legal Obligation: Compliance with applicable laws and regulations regarding outdoor recreation and safety

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

Right to Access

You may request copies of your personal data held by vale-sage. We will provide this information in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data under certain circumstances. Note that some information may be retained where required for legal compliance or legitimate business purposes.

Right to Restrict Processing

You may request limitation of how we process your personal data in specific circumstances.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within 30 days.

Please provide sufficient information to identify yourself and specify which right you wish to exercise. We may request additional verification to protect your personal information.

Data Processing Activities

Categories of Personal Data

• Identity information (name)
• Contact information (email address)
• Expedition preferences and experience level
• Communications and correspondence

Purposes of Processing

• Responding to inquiries and expedition requests
• Coordinating expedition logistics
• Providing safety information and updates
• Maintaining operational records

Data Retention

Personal data is retained only as long as necessary for the purposes outlined. Specific retention periods:

• Inquiry data with no booking: 12 months
• Completed expedition data: 3 years for safety and operational records
• Financial records: As required by South African tax law

International Data Transfers

Personal data is primarily stored and processed in South Africa. If data is transferred internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by relevant authorities
• Selection of service providers with adequate data protection measures
• Ensuring transfers comply with applicable data protection laws

Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Staff training on data protection principles

Data Breach Notification

In the event of a data breach likely to result in risk to your rights and freedoms, we will notify you without undue delay. We will also notify relevant supervisory authorities as required by law.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete such information.

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe our processing of your personal data violates applicable law.

Contact Information

For questions regarding data protection or to exercise your rights:

vale-sage
Email: [email protected]
Address: 127 Buitengracht Street, Cape Town, 8001, South Africa

Updates to This Policy

This data protection notice may be updated periodically. Material changes will be communicated to individuals whose data we hold. The current version is always available on our website.