Our Commitment to GDPR
moss-badger is committed to protecting the privacy and security of personal data. Although we are based in Canada, we recognize the importance of the European Union's General Data Protection Regulation (GDPR) and extend its protections to all our clients, regardless of location.
Data Controller
moss-badger acts as the data controller for personal information collected through this website and in connection with our services. We determine the purposes and means of processing your personal data.
Legal Basis for Processing
We process personal data under the following legal bases:
- Contract Performance: Processing necessary to fulfill our service agreement with you
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and marketing
- Consent: Processing based on your explicit consent, which you may withdraw at any time
- Legal Obligation: Processing necessary to comply with applicable laws
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not engage in such automated decision-making.
International Data Transfers
As a Canadian company, we may transfer personal data outside the European Economic Area. Canada has been recognized by the European Commission as providing adequate data protection. When we transfer data to jurisdictions without adequacy decisions, we implement appropriate safeguards such as standard contractual clauses.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are outlined in our Privacy Policy.
Security Measures
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the information below. We may request verification of your identity before processing your request. We will respond to your request within 30 days.
Contact Information
For questions about GDPR compliance or to exercise your rights:
Email: [email protected]
Address: 475 Richmond Street West, Suite 308, Toronto, Ontario M5V 1Y6, Canada
Complaints
If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority in your member state of residence.