Our Commitment to GDPR
spry-studio is committed to complying with the General Data Protection Regulation (GDPR) and ensuring that all personal data is processed lawfully, fairly, and transparently. This page outlines how we meet our obligations under GDPR and explains your rights as a data subject.
Data Controller Information
spry-studio acts as the data controller for personal information collected through our website and services. For questions regarding data processing, please contact:
spry-studio
1200 Bay Street, Suite 3400
Toronto, ON M5R 2A5
Canada
[email protected]
Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR:
Consent
When you voluntarily provide your information through forms or subscribe to communications, you provide consent for us to process your data for the stated purposes.
Legitimate Interests
We may process data for our legitimate business interests, such as improving our services and communicating with potential clients, provided these interests do not override your fundamental rights.
Contractual Necessity
When you engage our services, we process data as necessary to fulfill our contractual obligations to you.
Legal Obligation
We may process data when required to comply with applicable laws and regulations.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restriction of Processing
You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receiving it. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, in which case we will notify you.
We may request verification of your identity before processing your request to ensure the security of your personal data.
Data Transfers
If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of data and purpose of processing.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected individuals without undue delay.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.
Updates to This Information
We may update this GDPR compliance information periodically. Any changes will be posted on this page with an updated date.