Your rights under the General Data Protection Regulation
Last Updated: January 15, 2024
prairie marten is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This page provides information about your rights as a data subject and how we comply with GDPR requirements.
prairie marten acts as the data controller for personal information collected through our website and services. Our contact details are:
prairie marten
145 Wellington Street West, Suite 400
Toronto, ON M5J 1H8
Canada
Email: [email protected]
We process your personal data based on the following legal grounds:
If you are located in the European Economic Area, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you and to verify that we are lawfully processing it.
You have the right to request correction of any incomplete or inaccurate personal information we hold about you.
You have the right to request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal information in certain circumstances.
You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal information in certain circumstances, including processing for direct marketing purposes.
Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.
Your personal information may be transferred to and processed in countries outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data, including measures to protect against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by two additional months, in which case we will inform you of the extension.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in the European Union member state where you reside or work, or where the alleged infringement occurred.
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.