GDPR Compliance
Last updated: September 2024
This page provides information for individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland regarding their rights under the General Data Protection Regulation (GDPR) and similar data protection laws.
Data Controller
hollow-grouse acts as the data controller for personal information collected through this website. Our contact information:
Email: [email protected]
Address: 417 Wellington Street, Ottawa, ON K1A 0N4, Canada
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit a form or subscribe to communications, you provide consent for us to process your data for the stated purposes.
- Contractual necessity: When processing is necessary to fulfill a service agreement or respond to your inquiry.
- Legitimate interests: For website analytics and improvement, provided these interests do not override your fundamental rights.
- Legal obligation: When we are required to retain or disclose information under applicable law.
Your Rights Under GDPR
If you are located in the EEA, UK, or Switzerland, you have the following rights:
Right of Access
You may request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification
You may request that we correct any inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You may request that we limit how we use your data while a complaint or request is being resolved.
Right to Data Portability
You may request a copy of your data in a structured, machine-readable format for transfer to another service provider.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
International Data Transfers
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. For transfers to other countries, we implement appropriate safeguards such as standard contractual clauses.
Data Retention
We retain personal data only as long as necessary for the purposes described in our Privacy Policy, or as required by law. When data is no longer needed, we securely delete or anonymize it.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
Supervisory Authority
If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your data protection rights.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR. We may need to verify your identity before processing your request.
Updates to This Notice
We may update this GDPR notice periodically to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised date.