stuck-melody.site is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. This page outlines your rights and how we handle your personal information.
Data Controller
For the purposes of GDPR, the data controller is:
stuck-melody.site
142 Wellington Street
Toronto, ON M5J 2R8
Canada
Email: [email protected]
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary to fulfill our services to you
- Legitimate interests: When we have a legitimate business interest that does not override your rights
- Legal obligation: When we must process data to comply with legal requirements
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it.
Right to Erasure
Also known as the "right to be forgotten," you can request that we delete your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Data Portability
You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights
To exercise any of your rights, please contact us at:
Email: [email protected]
Subject line: GDPR Data Request
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of the extension.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Providing services to you
- Complying with legal obligations
- Resolving disputes
- Enforcing our agreements
When your data is no longer required, we will securely delete or anonymize it.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Canada, you can contact the Office of the Privacy Commissioner of Canada:
Website: www.priv.gc.ca
Toll-free: 1-800-282-1376
Children's Data
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent. If we become aware that we have collected data from a child without proper consent, we will delete it promptly.
Updates to This Policy
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with a revised date.
Contact Us
For any questions about GDPR compliance or to exercise your data protection rights, please contact us at:
Email: [email protected]
Address: 142 Wellington Street, Toronto, ON M5J 2R8, Canada