Our commitment to protecting your data under European regulations
cozy-basin is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR). This page outlines how we handle data for individuals located in the European Economic Area (EEA) and United Kingdom.
cozy-basin acts as the data controller for personal information collected through this website. Our contact details are:
cozy-basin
350 Bay Street, Suite 1200
Toronto, Ontario M5H 2S6
Canada
Email: [email protected]
We process personal data under the following lawful bases:
Under the GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and to verify that we are lawfully processing it.
You have the right to request correction of any incomplete or inaccurate personal data we hold about you.
You have the right to request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and may be subject to certain conditions.
You have the right to request that we suspend the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to request transfer of your personal data to another party in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing, and where processing is for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
As cozy-basin is based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Different retention periods apply to different types of data based on the nature of the data and the purposes for which it was collected.
We have implemented appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include:
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
For any inquiries regarding our data protection practices or to exercise your rights, you may contact our designated data protection representative at:
Email: [email protected]
We may update this GDPR compliance information from time to time. Any significant changes will be communicated through our website or by direct notification where appropriate.