GDPR Compliance

Last Updated: January 2024

velvet-cliff is committed to complying with the General Data Protection Regulation (GDPR) for all individuals located in the European Economic Area (EEA). This page provides additional information about our data practices as they relate to GDPR requirements.

Data Controller

velvet-cliff acts as the data controller for personal information collected through this website. Our contact information:

velvet-cliff
2847 Technology Drive, Suite 301
Toronto, ON M5V 2T6
Canada

Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

• Consent: When you have given explicit consent for us to process your personal data for specific purposes (e.g., marketing communications)
• Contract Performance: When processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms
• Legal Obligation: When processing is necessary to comply with a legal obligation

Your GDPR Rights

If you are located in the EEA, you have the following rights under GDPR:

Right to Access

You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days. In certain cases, we may need to verify your identity before processing your request.

International Data Transfers

As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. For any transfers to other countries, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. The specific retention period depends on the nature of the data and the purposes for which it is processed. When data is no longer needed, we securely delete or anonymize it.

Data Protection Officer

For GDPR-related inquiries, you may contact our data protection team at [email protected].

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence or place of work, or in the EU member state where the alleged violation occurred.

Updates to This Information

We may update this GDPR information periodically. Any changes will be posted on this page with an updated revision date.