GDPR Compliance
Information for European Union visitors
Introduction
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although Calm-prairie is based in Canada, we are committed to protecting the privacy rights of all our website visitors, including those from the European Union.
Data Controller
For the purposes of GDPR, the data controller is:
Calm-prairie
1847 Woodworker Lane
Vancouver, BC V6B 2T4
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: When you submit a contact form or subscribe to communications, you provide consent for us to process your data for the stated purposes.
- Legitimate Interest: We may process data to improve our services and website experience, where such processing does not override your fundamental rights.
- Contract: When you engage our services, we process data necessary to fulfill our contractual obligations.
- Legal Obligation: We may process data when required by law.
Your Rights Under GDPR
If you are a resident of the European Union, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Right to Withdraw Consent
Where we rely on consent to process your data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by an additional two months, in which case we will inform you.
Data Transfers
As we are based in Canada, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. This means that data transfers to Canada do not require additional safeguards.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Our retention periods are based on:
- The nature of the data and the purposes of processing
- Legal, regulatory, and contractual requirements
- Industry guidelines and best practices
Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Secure data storage
- Access controls
- Regular security assessments
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.
Contact Information
For any questions or concerns regarding this GDPR notice or our data practices, please contact us at:
Calm-prairie
1847 Woodworker Lane
Vancouver, BC V6B 2T4
Canada
Email: [email protected]