GDPR Compliance

Overview

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although feral-willow primarily operates in Canada, we are committed to protecting the privacy of all visitors, including those from the European Union. This page outlines our GDPR compliance measures and your rights as a data subject.

Data Controller

feral-willow acts as the data controller for personal information collected through this website. As the data controller, we determine the purposes and means of processing personal data.

Contact Information:
feral-willow
742 Evergreen Terrace
Toronto, ON M5V 2T6
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit a service request form, you consent to us processing your personal data for that purpose.
• Contractual Necessity: Processing necessary to fulfill service agreements and respond to inquiries.
• Legitimate Interests: Processing for purposes such as improving our services and ensuring website security, where our interests do not override your fundamental rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to obtain confirmation as to whether we process your personal data and, if so, access to that data along with information about how it is processed.

Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or processing based on legitimate interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided above. We will respond to your request within one month. In certain circumstances, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for it.

To verify your identity, we may ask you to provide additional information. This is to ensure that personal data is not disclosed to unauthorized persons.

Data Transfers

As we are based in Canada, any personal data collected from EU residents may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. We also implement appropriate safeguards to protect transferred data.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our specific retention periods are outlined in our Privacy Policy.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, unless exceptions apply under GDPR.

Complaints

If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or place of the alleged infringement.

Updates

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.

Additional Information

For more details about our data practices, please refer to our Privacy Policy and Cookie Policy.