Our commitment to data protection for European visitors
At spire-heron, we are committed to protecting the privacy and personal data of all our website visitors and clients, including those located in the European Union and European Economic Area. This page outlines our compliance with the General Data Protection Regulation (GDPR).
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that governs how organizations collect, use, store, and protect personal data of individuals in the European Union. We have implemented appropriate measures to ensure compliance with GDPR requirements.
We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:
You have the right to request copies of your personal data that we hold. We may charge a small fee for this service in certain circumstances.
You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
You have the right to object to our processing of your personal data under certain conditions, particularly where we are processing data based on legitimate interests.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include:
As a Canadian company, personal data collected from European visitors may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of protection for personal data, which means that personal data can be transferred from the EU to Canada without additional safeguards.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
To exercise any of your rights under GDPR, please contact us using the information provided below. We will respond to your request within one month of receipt. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you of any such extension.
If you are located in the EU and believe that we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.
For any questions about our GDPR compliance or to exercise your data protection rights, please contact us at:
spire-heron
245 Commerce Boulevard, Suite 400
Toronto, ON M5V 3C7
Canada
Email: [email protected]