Introduction
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union and European Economic Area. Even though feral-spring is based in Canada, we respect and uphold GDPR principles for all our users.
Data Controller
feral-spring is the data controller responsible for your personal information. Our contact details are:
feral-spring
1247 Granville Street, Suite 302
Vancouver, BC V6Z 1M4
Canada
Email: [email protected]
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: You have given explicit consent for us to process your personal data for specific purposes (e.g., recording interviews)
- Contract: Processing is necessary for the performance of a contract with you
- Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our services)
- Legal Obligation: Processing is necessary to comply with legal requirements
Your Rights Under GDPR
Right to Access
You have the right to request confirmation of whether we are processing your personal data and to obtain a copy of that data.
Right to Rectification
You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data when:
- The data is no longer necessary for the purposes for which it was collected
- You withdraw consent and there is no other legal ground for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data when:
- You contest the accuracy of the data
- Processing is unlawful but you do not want the data erased
- We no longer need the data but you need it for legal claims
- You have objected to processing pending verification of legitimate grounds
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request." Please include:
- Your full name
- Email address associated with our services
- Specific right you wish to exercise
- Any relevant details to help us locate your information
We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days and will inform you of such extension.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Service provision: Duration of our service relationship plus 2 years
- Interview recordings and transcripts: Retained indefinitely unless you request deletion
- Website usage data: 24 months
- Legal and accounting records: As required by applicable law (typically 7 years)
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
International Data Transfers
Your data may be transferred to and processed in Canada, which may not have the same level of data protection as the EU. We ensure appropriate safeguards are in place for such transfers.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.
Children's Data
We do not knowingly process personal data of children under 16 years of age without parental consent. If we become aware of such processing, we will delete the data promptly.
Updates to This Information
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes.
Contact Us
For questions about GDPR or our data practices, please contact us at [email protected].