glen-port is committed to compliance with the General Data Protection Regulation (GDPR) for all users who are residents of the European Union or European Economic Area. This page outlines how we comply with GDPR requirements and explains your rights under this regulation.
Data Controller
glen-port acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 425 University Avenue, Suite 1200, Toronto, ON M5G 1T6, Canada
Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR:
Consent
When you provide explicit consent for specific processing activities, such as subscribing to our communications or accepting non-essential cookies.
Contract Performance
When processing is necessary to fulfill a contract with you, such as providing coaching services you have registered for.
Legitimate Interests
When processing serves our legitimate business interests, such as improving our services or website security, provided these interests do not override your fundamental rights.
Legal Obligation
When processing is necessary to comply with legal requirements applicable to our business.
Your Rights Under GDPR
As an EU or EEA resident, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
Right to Erasure
Also known as the "right to be forgotten," you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You can request that we limit how we use your personal data in certain situations, such as while we verify the accuracy of data you have contested.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
Right to Object
You can object to the processing of your personal data when processing is based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.
International Data Transfers
As we are located in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. We ensure that any data transfers comply with GDPR requirements.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data and the purpose of processing.
Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.
Supervisory Authority
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.
Updates to This Information
We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. We encourage you to review this page regularly for the latest information about our data protection practices.