GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
quaint-nebula is committed to protecting the privacy and personal data of all individuals, including those residing in the European Union. We comply with the General Data Protection Regulation (GDPR) and ensure that your data is handled responsibly and transparently.
Data Controller
quaint-nebula acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data.
Contact details:
quaint-nebula
145 Glamour Avenue, Suite 300
Toronto, ON M5V 2K7
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: Processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests.
- Legal Obligation: Processing is necessary to comply with a legal obligation.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly where we are processing data based on legitimate interests.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
Data Transfers
When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data. These safeguards may include:
- Standard contractual clauses approved by the European Commission
- Transfers to countries with adequate data protection laws
- Other legally approved transfer mechanisms
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.
Data Security
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data where appropriate
- Regular security assessments
- Access controls and authentication procedures
- Staff training on data protection
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by two additional months, in which case we will inform you of the extension.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Canada, this would be the Office of the Privacy Commissioner of Canada. For EU residents, you may contact your local data protection authority.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.