lotus-dash - GDPR

Last updated: September 2024

1. Overview

lotus-dash is committed to protecting the privacy and personal data of all visitors, including those from the European Economic Area (EEA). This page supplements our Privacy Policy with specific information relevant to the General Data Protection Regulation (GDPR).

2. Data Controller

lotus-dash acts as the data controller for personal data collected through this website. Our contact details are:

lotus-dash
150 King Street West, Suite 400
Toronto, ON M5H 1J9
Canada
Email: [email protected]

3. Legal Basis for Processing

We process personal data under the following legal bases:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
Contract: Where processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
Legal Obligation: Where processing is necessary for compliance with a legal obligation.

4. Categories of Personal Data

We may collect and process the following categories of personal data:

Identity data: name
Contact data: email address
Technical data: IP address, browser type, device information
Usage data: information about how you use our website
Communication data: content of messages you send to us

5. Your Rights Under GDPR

If you are in the EEA, you have the following rights regarding your personal data:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing: You can request that we limit how we use your data.
Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
Right to Object: You can object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request.

6. International Data Transfers

As we are based in Canada, your personal data will be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection, meaning your personal data receives equivalent protection when transferred to Canada.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are outlined in our Privacy Policy.

8. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects individuals.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and regular security assessments.

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside, work, or where the alleged infringement occurred.

11. Updates to This Notice

We may update this GDPR notice periodically. Changes will be posted on this page with an updated revision date.

12. Contact Us

For any questions regarding GDPR or your personal data rights, please contact: