GDPR Compliance

Our Commitment to Data Protection

glacier-wolf is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws. This page outlines how we ensure compliance with these regulations.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you submit an inquiry form, you provide explicit consent for us to process your information for commission consultation purposes.
• Legitimate Interest: We have a legitimate business interest in responding to inquiries and managing client relationships.
• Contractual Necessity: Processing is necessary to enter into or fulfill a commission contract with you.

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restrict Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Staff training on data protection obligations

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

Your personal data is stored and processed in Canada. If we transfer data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your information.

Exercising Your Rights

To exercise any of your data subject rights, please contact us at:

Email: [email protected]
Address: 287 Industrial Parkway North, Aurora, Ontario L4G 3V7, Canada

We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of such extension.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.