The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations handling personal data of individuals in the European Union. While glacier-works is based in Canada, we are committed to respecting the data protection rights of all our users, including those protected under GDPR.
Our Commitment
We are committed to ensuring that your personal data is handled in accordance with the highest standards of data protection. This includes implementing appropriate technical and organizational measures to protect your data and respecting your rights under applicable privacy legislation.
Legal Basis for Processing
Under GDPR, we must have a valid legal basis for processing your personal data. The legal bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes
- Contractual Necessity: Where processing is necessary for the performance of a contract with you
- Legitimate Interest: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
- Legal Obligation: Where processing is necessary to comply with legal requirements
Your GDPR Rights
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data, under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Data Transfers
As a Canadian organization, we may transfer your personal data to Canada for processing. Canada has been recognized by the European Commission as providing an adequate level of data protection. Additionally, we implement appropriate safeguards to ensure your data remains protected during any international transfers.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the context of our relationship with you and our legal obligations.
Data Protection Officer
For inquiries regarding data protection or to exercise your GDPR rights, please contact our designated privacy representative:
185 King Street West, Suite 1200
Toronto, ON M5H 3M4, Canada
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the information provided above. We will respond to your request within 30 days. In certain circumstances, we may need to verify your identity before processing your request.
Right to Lodge a Complaint
If you believe that we have not handled your personal data properly or have infringed your rights, you have the right to lodge a complaint with your local data protection supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.