Last Updated: September 14, 2026
bear-trek is committed to complying with the General Data Protection Regulation (GDPR) and ensuring the protection of personal data for all individuals, regardless of their location. This statement outlines our approach to GDPR compliance and the rights available to data subjects.
We process personal data based on the following legal grounds:
If the GDPR applies to you, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, along with information about how we use it.
You may request that we correct any inaccurate personal data we hold about you and complete any incomplete data.
Under certain circumstances, you have the right to request deletion of your personal data. This right applies when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when there is no overriding legitimate interest for continued processing.
You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects. We do not engage in automated decision-making that produces such effects.
To exercise any of your GDPR rights, please submit a written request to our Data Protection Officer using the contact information provided below. We will respond to your request within one month, though this period may be extended by two additional months in complex cases.
When submitting a request, please provide sufficient information to allow us to verify your identity and locate your data. We may request additional information if necessary to confirm your identity and prevent unauthorized disclosure.
We have appointed a Data Protection Officer to oversee our GDPR compliance efforts. You may contact our DPO with questions or concerns about how we handle your personal data:
Data Protection Officer
bear-trek Energy Solutions
1250 René-Lévesque Blvd West
Montreal, QC H3B 4W8
Canada
Email: [email protected]
We maintain comprehensive records of our data processing activities, including the categories of personal data processed, purposes of processing, data retention periods, and technical and organizational security measures implemented.
When we transfer personal data outside the European Economic Area, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or adequacy decisions confirming that the recipient country provides adequate data protection.
In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
We work with carefully selected third-party service providers who process personal data on our behalf. We ensure that these processors are bound by contractual obligations that meet GDPR requirements, including appropriate technical and organizational security measures.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are determined based on the nature of the data and applicable legal requirements.
We implement privacy by design and by default principles in our systems and processes, ensuring that data protection considerations are integrated into all business activities and that only necessary personal data is processed.
If you believe that our processing of your personal data violates GDPR requirements, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website, and the "Last Updated" date will be revised accordingly.
For more information about how we collect, use, and protect your personal data, please refer to our Privacy Policy.