Your data protection rights under EU regulation
glen-nest is committed to protecting the personal data of all individuals, including those located in the European Union (EU) and European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR).
glen-nest acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.
Contact Information:
glen-nest
245 King Street West, Suite 1200
Toronto, ON M5V 1J2, Canada
Email: [email protected]
We process personal data under the following legal bases:
If you are located in the EU/EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request correction of inaccurate personal data or completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we limit the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or significant effects concerning you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receiving it. If your request is complex, we may extend this period by two additional months, in which case we will inform you of the extension.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, except in cases of manifestly unfounded or excessive requests.
When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods vary based on the type of data and purpose of processing.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.
For any questions about our GDPR compliance or to exercise your rights, please contact:
Email: [email protected]
Address: 245 King Street West, Suite 1200, Toronto, ON M5V 1J2, Canada