Your rights under the General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a European Union regulation that governs the processing of personal data of individuals within the EU. Although elm-oryx is based in Canada, we respect the rights of all visitors and apply GDPR principles to our data handling practices.
elm-oryx acts as the data controller for personal information collected through this website. As data controller, we determine the purposes and means of processing personal data.
Contact information for data protection inquiries:
elm-oryx
250 Front Street West, Suite 1400
Toronto, ON M5V 3G5
Canada
Email: [email protected]
We process personal data based on one or more of the following legal grounds:
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right to Access: You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure: You have the right to request that we erase your personal data under certain conditions. This right is also known as the "right to be forgotten."
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object: You have the right to object to our processing of your personal data under certain conditions, including processing for direct marketing purposes.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or you have made numerous requests, we may extend this period by two additional months, in which case we will inform you.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights.
Your personal data may be processed and stored in Canada, where our servers are located. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to other jurisdictions, we ensure appropriate safeguards are in place.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. When personal data is no longer needed, we securely delete or anonymize it.
We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged violation occurred.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.