GDPR Compliance

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals residing in the European Union, regardless of where the organization is located.

At Scaleconte, we are committed to complying with GDPR requirements and protecting the privacy rights of all individuals, including those in the European Union.

Our GDPR Commitments

We are committed to the following principles under GDPR:

Lawfulness, Fairness, and Transparency

We process personal data lawfully, fairly, and in a transparent manner. We clearly communicate how and why we collect and use your data through this policy and our Privacy Policy.

Purpose Limitation

We collect personal data only for specified, explicit, and legitimate purposes. We do not process your data in ways that are incompatible with those purposes.

Data Minimization

We collect only the personal data that is necessary for the purposes for which it is processed. We do not collect excessive or irrelevant data.

Accuracy

We take reasonable steps to ensure that personal data is accurate and kept up to date. We encourage you to contact us to correct any inaccurate information.

Storage Limitation

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. We have established retention policies and procedures to ensure timely deletion of data that is no longer needed.

Integrity and Confidentiality

We implement appropriate technical and organizational measures to ensure the security of personal data, protecting against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights regarding your personal data:

Right of Access

You have the right to request confirmation of whether we process your personal data and, if so, to access that data along with information about how it is processed.

Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the information provided below. We will respond to your request within one month, as required by GDPR. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

We may request additional information to verify your identity before processing your request. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose
• Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests
• Legal Obligation: When processing is necessary for compliance with a legal obligation

International Data Transfers

As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to other countries, we ensure appropriate safeguards are in place to protect your personal data.

Data Protection Officer

While we have not appointed a formal Data Protection Officer, our privacy team is available to address any questions or concerns about our data processing practices. You can reach our privacy team at the contact information provided below.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. If you are in the European Union, you can contact the supervisory authority in your member state of residence, place of work, or place of the alleged violation.

Contact Us

For any questions about our GDPR compliance or to exercise your data protection rights, please contact us at:

Scaleconte
245 Commerce Street, Suite 700
Toronto, Ontario M5V 3C2
Canada
Email: [email protected]