glen-flow is committed to protecting your personal data in accordance with applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area.
Our Commitment to Data Protection
We take the protection of your personal data seriously and have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with processing your personal information.
Legal Basis for Processing (GDPR)
For individuals located in the European Economic Area, we process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms
- Legal Obligation: Where processing is necessary for compliance with a legal obligation
Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal data:
Right of Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly where we rely on legitimate interests as our legal basis.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization or directly to you under certain conditions.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided at the end of this document. We will respond to your request within one month. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you of the extension.
Data Transfers
Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
When we transfer personal data outside of Canada or the EEA, we ensure appropriate safeguards are in place to protect your data, including standard contractual clauses approved by relevant authorities.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you
- Whether there is a legal obligation to which we are subject
- Whether retention is advisable in light of our legal position (such as regarding applicable statutes of limitations, litigation, or regulatory investigations)
Data Security
We have implemented appropriate technical and organizational security measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest where appropriate
- Regular security assessments and testing
- Access controls limiting data access to authorized personnel
- Staff training on data protection and security
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada. For individuals in the EEA, you may contact your local data protection authority.
Contact Us
If you have any questions about this Data Protection notice or wish to exercise your data protection rights, please contact us at:
glen-flow
1867 Commerce Street, Suite 402
Toronto, ON M5V 3C9
Canada
Email: [email protected]