Last updated: January 2024
Overview
brisk-birch is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA). This page outlines how we comply with GDPR requirements and the rights available to you.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you have given clear consent for us to process your personal data for a specific purpose
- Contract: When processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
- Legal Obligation: When processing is necessary for us to comply with the law
- Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data, under certain conditions.
Data Transfers
As a Canadian company, any transfer of personal data from the EEA to Canada is supported by the European Commission's adequacy decision recognizing Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) as providing adequate protection for personal data.
Data Protection Officer
For any questions regarding our GDPR compliance or to exercise your rights, please contact us at:
Email: [email protected]
Address: 1247 Commerce Boulevard, Toronto, ON M5V 2T3, Canada
Supervisory Authority
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
Response Time
We will respond to any GDPR-related requests within one month of receiving the request. If your request is complex or we receive a high volume of requests, we may extend this period by an additional two months, in which case we will inform you of the extension and the reasons for it.