Our commitment to protecting your data rights
isle-bear is committed to complying with the General Data Protection Regulation (GDPR) and protecting the personal data of individuals in the European Economic Area (EEA). This page outlines our practices and your rights under GDPR.
isle-bear acts as the data controller for personal information collected through this website. Our contact details are:
isle-bear
250 University Avenue, Suite 800
Toronto, ON M5H 3E5
Canada
Email: [email protected]
Under GDPR, we process personal data based on the following legal grounds:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to obtain confirmation of whether we process your personal data and to access that data along with information about how it is processed.
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when processing is unlawful.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests, direct marketing, or processing for research purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR. This period may be extended by two further months for complex requests, in which case we will inform you of the extension.
As a Canadian organization, data you provide may be transferred outside the EEA. Canada has been recognized by the European Commission as providing an adequate level of data protection. For any transfers to countries without an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses.
We retain personal data only for as long as necessary for the purposes for which it was collected. Contact form submissions are retained for up to two years unless a business relationship is established. Analytics data is aggregated and anonymized after 14 months.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also notify you directly.
Our services are not directed to individuals under 16 years of age, and we do not knowingly collect personal data from children.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR compliance notice from time to time. We will notify you of any material changes through our website or by email if we have your contact information.
For questions about GDPR compliance or to exercise your rights:
Email: [email protected]
Subject Line: GDPR Inquiry