GDPR Compliance

About the GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.

Although we are based in Canada, we are committed to providing GDPR-compliant practices for visitors from the EU and EEA who access our website and services.

Data Controller

Rarest Vireos acts as the data controller for personal information collected through our website. Our contact details are:

Rarest Vireos
247 Wellington Street West
Toronto, ON M5V 3C7
Canada

Email: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: Processing is necessary for us to comply with the law.
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Your Rights Under GDPR

If you are a resident of the EU or EEA, you have the following data protection rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service if the request is excessive or repetitive.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly where we are processing data for direct marketing purposes.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of your rights under the GDPR, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, but we will inform you of any such extension within one month of receiving your request.

Data Transfers

As we are based in Canada, any personal data you provide to us may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We take appropriate measures to ensure your personal data is treated securely and in accordance with this policy.

Complaints

If you believe we have not handled your personal data properly or have concerns about our data processing practices, you have the right to lodge a complaint with a supervisory authority. In the EU, this is typically the data protection authority in your country of residence, place of work, or place of the alleged infringement.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.