GDPR Compliance

General Data Protection Regulation

This document outlines how willow-stoat complies with the General Data Protection Regulation (GDPR) and protects the rights of individuals in the European Economic Area.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to deliver services you have requested
• Legitimate Interest: When processing is necessary for our legitimate business interests, balanced against your rights
• Legal Obligation: When processing is required to comply with legal requirements

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, including when data is no longer necessary for the purpose it was collected.

Right to Restriction of Processing

You may request that we limit processing of your personal data in specific situations.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. In some cases, we may require additional information to verify your identity before processing your request.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection representative at the address provided in the Contact section below.

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Contact Information

For GDPR-related inquiries or to exercise your rights:

willow-stoat
427 Granville Street, Suite 820
Vancouver, BC V6C 1T2
Canada
Email: [email protected]