Our commitment to protecting your personal data under European regulations
Last Updated: November 2024
Forest-otter is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page explains how we comply with GDPR requirements when processing personal data of individuals in the European Economic Area (EEA).
For the purposes of GDPR, Forest-otter acts as the data controller for personal data collected through our website and coaching services. Our contact information is:
Forest-otter
250 University Ave, Suite 400
Toronto, ON M5H 3E5
Canada
Email: [email protected]
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
As a data subject under GDPR, you have the following rights:
You have the right to obtain confirmation as to whether your personal data is being processed and to access that personal data along with supplementary information about the processing.
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
You have the right to request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected or when you withdraw consent.
You have the right to restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests, including profiling. You also have the right to object to direct marketing at any time.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently engage in such automated decision-making.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two additional months where necessary, considering the complexity and number of requests.
To verify your identity, we may request specific information from you. This is a security measure to ensure personal data is not disclosed to unauthorized individuals.
As a Canadian organization, we may transfer your personal data outside the EEA. When we do so, we ensure appropriate safeguards are in place, including:
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Our retention periods are based on:
When personal data is no longer required, it will be securely deleted or anonymized.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.
If you are located in the EEA and believe that we have not complied with GDPR, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so we can address your concerns.
We may update this GDPR compliance notice periodically. Any changes will be posted on this page with an updated revision date.
For any questions about our GDPR compliance or to exercise your data protection rights, please contact us at:
Forest-otter
250 University Ave, Suite 400
Toronto, ON M5H 3E5
Canada
Email: [email protected]