GDPR Compliance
Last Updated: January 15, 2024
This page outlines how maple-echo.com complies with the General Data Protection Regulation (GDPR) and explains your rights as a data subject when interacting with our website and services.
Our Commitment to Data Protection
We are committed to protecting your personal data and respecting your privacy. We process personal data in accordance with applicable data protection laws, including the GDPR for users in the European Economic Area (EEA).
Data Controller
maple-echo.com acts as the data controller for personal data collected through this website. Our contact details are:
Email: [email protected]
Address: 245 Queen Street West, Toronto, ON M5V 1Z4, Canada
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: Where you have given us explicit consent to process your data for specific purposes
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these do not override your rights and freedoms
- Legal Obligation: Where processing is necessary for compliance with a legal obligation
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month, though this period may be extended in certain circumstances.
Data Transfers
As our business is based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period depends on the nature of the data and the purposes for processing.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in your country of residence.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.