Last updated: August 26, 2024
This document outlines our commitment to complying with the General Data Protection Regulation (GDPR) and explains the rights of individuals whose personal data we process.
We process personal data under the following legal bases:
If you are located in the European Economic Area, you have the following rights:
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies or excessive requests.
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data under certain circumstances, including when:
You have the right to request restriction of processing your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
For questions or concerns regarding data protection practices or to exercise your GDPR rights, contact us at:
To exercise any of your GDPR rights, submit a written request via email. We will respond within one month of receiving your request. This period may be extended by two additional months where necessary, considering the complexity and number of requests.
We may request specific information from you to help us confirm your identity and ensure your right to access personal data or exercise other rights.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary depending on the type of data:
Your personal data may be transferred to and processed in Canada. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission where applicable.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and will notify affected individuals without undue delay.
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. Contact information for your local supervisory authority can be found on the European Data Protection Board website.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will post updated versions on this page with a revised date.