GDPR Compliance
Information for users in the European Economic Area
Our Commitment to GDPR
Although canopy-saga is based in Canada, we are committed to complying with the General Data Protection Regulation (GDPR) for users located in the European Economic Area (EEA). This page outlines your rights under GDPR and how we handle your personal data.
Data Controller
canopy-saga acts as the data controller for personal information collected through our website and services. Our contact details are:
canopy-saga
245 King Street West, Suite 400
Toronto, ON M5V 1J2, Canada
Email: [email protected]
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: Processing required to fulfill our service agreement with you, such as creating your resume or processing payments.
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and website functionality, provided these interests do not override your rights.
- Consent: Processing based on your explicit consent, such as sending marketing communications. You may withdraw consent at any time.
- Legal obligation: Processing required to comply with applicable laws and regulations.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you and information about how we process it.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
- Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
- Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
- Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.
If we are unable to fulfill your request due to legal obligations or legitimate reasons, we will explain the basis for our decision.
International Data Transfers
As a Canadian company, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection under GDPR.
Where we engage service providers located outside of Canada or the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods depend on the type of data and our legal obligations. Upon request, we can provide detailed information about retention periods for different categories of data.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These measures include encryption, access controls, and regular security assessments.
Lodging a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside or work, or where the alleged violation occurred.
Updates to This Information
We may update this GDPR information from time to time. Any significant changes will be communicated through our website or direct notification where appropriate.
Contact Us
For any questions about our GDPR compliance or to exercise your rights, please contact:
Email: [email protected]