GDPR Compliance

Last Updated: January 2024

Our Commitment to GDPR

gentle-sparrow is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page provides information specifically for visitors from the European Economic Area (EEA) and explains how we handle personal data in compliance with GDPR requirements.

Data Controller

For the purposes of GDPR, the data controller is:

gentle-sparrow
245 Adventure Way, Suite 300
Vancouver, BC V6B 2K8
Canada
[email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose
• Contract: When processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: When processing is necessary for us to comply with the law
• Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests

Your Rights Under GDPR

As an individual in the EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

International Data Transfers

As we are located in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We take appropriate measures to ensure that any international transfers of personal data are made in compliance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or internal policy requirements. When personal data is no longer needed, we securely delete or anonymize it.

Data Protection Officer

For any questions or concerns regarding our data protection practices, or to exercise your rights under GDPR, please contact us at:

[email protected]

Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.