GDPR Information
Information for European Union Residents
About the General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that governs the collection, processing, and storage of personal data of individuals located in the European Union and European Economic Area. If you are located in the EU/EEA, this page provides additional information about your rights and our practices.
Data Controller
Threpinoss acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
Threpinoss
350 Bay Street, Suite 700
Toronto, Ontario M5H 2S6
Canada
Lawful Bases for Processing
Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
Consent
When you submit a contact form or sign up for communications, you provide consent for us to process your information for the specified purposes. You may withdraw consent at any time by contacting us.
Contractual Necessity
When you engage our services, processing your information is necessary to perform our contractual obligations to you.
Legitimate Interests
We may process data based on legitimate business interests, such as improving our services and website functionality, provided these interests do not override your fundamental rights and freedoms.
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
Right of Access
You have the right to obtain confirmation of whether we process your personal data and to access that data, along with information about how it is processed.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restriction of Processing
You may request that we limit how we use your data in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
International Data Transfers
As a Canadian organization, we may transfer personal data outside the EEA. Canada has been recognized by the European Commission as providing an adequate level of data protection. For any transfers to jurisdictions without adequacy decisions, we implement appropriate safeguards such as standard contractual clauses.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods depend on the nature of the data and the purposes for processing. Contact data is typically retained for three years following our last interaction.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, with notification.
We may request verification of your identity before processing your request to ensure we are providing information to the correct individual.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. While we encourage you to contact us first so we may address your concerns, you may contact the data protection authority in your country of residence.
Updates to This Information
We may update this GDPR information page to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.