GDPR Compliance
Last Updated: January 15, 2024
Introduction
While node-marten operates primarily within Canada, we recognize that some website visitors and service participants may reside in the European Union. This statement outlines our commitment to General Data Protection Regulation (GDPR) compliance for EU residents.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you voluntarily provide information through forms or service requests
- Contract Performance: When processing is necessary to fulfill service agreements
- Legitimate Interests: For website analytics and service improvement, where such interests do not override your rights
- Legal Obligations: When required by applicable law
Data Controller
For purposes of GDPR, the data controller is:
node-marten
427 Wellington Street West
Toronto, Ontario M5V 1E7
Canada
[email protected]
Your Rights Under GDPR
If you are an EU resident, you have the following rights regarding your personal data:
Right to Access
You may request confirmation of whether we process your personal data and obtain a copy of such data.
Right to Rectification
You may request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restriction of Processing
You may request that we limit processing of your personal data in specific situations, such as when you contest data accuracy.
Right to Data Portability
You may request personal data you provided to us in a structured, commonly used format and have the right to transmit this data to another controller.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your EU member state if you believe our processing of your personal data violates GDPR.
Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with details of your request. We will respond within one month of receiving your request. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
Data Transfers
Personal data collected from EU residents may be transferred to and processed in Canada. While Canada does not have an adequacy decision from the European Commission, we implement appropriate safeguards to protect your data in accordance with GDPR requirements.
Data Protection Officer
For questions specifically related to data protection and GDPR compliance, you may contact our data protection contact at [email protected]
Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected. Specific retention periods depend on the nature of the data and legal requirements. Upon request, we can provide information about retention periods for specific data categories.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data in transit
- Regular security assessments
- Access controls limiting who can view personal data
- Staff training on data protection obligations
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
Updates to This Statement
We may update this GDPR compliance statement periodically. Changes will be posted on this page with an updated revision date.