GDPR Compliance
Last updated: January 2024
Our Commitment to GDPR
copper-gorge is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the United Kingdom.
Data Controller
For the purposes of GDPR, copper-gorge acts as the data controller for personal data collected through this website. Our contact details are:
copper-gorge
147 Queen Street West, Suite 820
Toronto, Ontario M5H 3M9
Canada
[email protected]
Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: When you submit inquiry forms or accept cookies, you provide explicit consent for us to process your data for the stated purposes.
- Legitimate Interests: We may process data where it is in our legitimate business interests, provided such interests do not override your fundamental rights and freedoms.
- Contractual Necessity: When you engage our services, processing your data is necessary for the performance of our contract with you.
Your Rights Under GDPR
If you are located in the EEA or UK, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.
International Data Transfers
As copper-gorge is based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate data protection. Where data is transferred to other countries, we ensure appropriate safeguards are in place.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for processing, and legal requirements.
Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls limiting who can view personal data
- Staff training on data protection
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first so we can address your concerns.
Updates to This Notice
We may update this GDPR compliance information from time to time. We will notify you of significant changes by posting a notice on our website.