Our Commitment to Data Protection
verdant-sparrow is committed to protecting the privacy and personal data of all individuals, including those residing in the European Union and European Economic Area. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Legal Basis for Processing
We process personal data under the following legal bases as defined by the GDPR:
- Consent: When you have given clear consent for us to process your personal data for a specific purpose.
- Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: When processing is necessary for compliance with a legal obligation.
- Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.
Your Rights Under GDPR
If you are located in the EU/EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions. This right is not absolute and only applies in certain circumstances.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data, under certain conditions, particularly where we are processing data for direct marketing purposes.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
How to Exercise Your Rights
To exercise any of your rights, please contact us using the information below. We will respond to your request within one month. If your request is complex or you have made numerous requests, we may extend this period by two further months, but we will inform you of any such extension.
Data Transfers
If we transfer personal data outside the EU/EEA, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include:
- Standard contractual clauses approved by the European Commission
- Transfers to countries with adequate data protection laws as determined by the European Commission
- Binding corporate rules for transfers within a corporate group
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing, and applicable legal requirements.
Data Security
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of security measures
- Staff training on data protection
- Access controls to limit who can view personal data
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state where you live, work, or where the alleged infringement took place.
Contact Information
For any questions regarding our GDPR compliance or to exercise your rights, please contact us at:
verdant-sparrow
456 Innovation Drive, Suite 302
Toronto, ON M5V 2K4
Canada
[email protected]