Our Commitment to GDPR
Although inyov-neius.com operates primarily in Canada, we recognize that visitors and clients from the European Economic Area (EEA) may access our website or engage our services. The General Data Protection Regulation (GDPR) establishes important standards for data protection, and we are committed to upholding these principles for all individuals, regardless of location.
This page outlines how we comply with GDPR requirements and explains the specific rights available to you under this regulation.
Lawful Basis for Processing
Under GDPR, we must have a valid legal basis for processing personal data. We rely on the following grounds:
- Consent: Where you have given clear consent for us to process your data for specific purposes, such as receiving communications about our services.
- Contractual Necessity: When processing is required to fulfill a contract with you or to take steps at your request before entering into a contract—for example, when you engage us for a renovation project.
- Legitimate Interests: We may process data where it is necessary for our legitimate business interests, provided those interests do not override your fundamental rights. This includes improving our website and services.
- Legal Obligation: When we are required to process data to comply with applicable laws or regulations.
Your Rights Under GDPR
If you are located in the EEA or if GDPR applies to our processing of your data, you have the following rights:
Right to Access
You may request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request corrections. We will address such requests promptly.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances—for instance, when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
Right to Restrict Processing
You may ask us to limit how we use your data in specific situations, such as while we verify the accuracy of data you have contested or while we assess an objection you have raised.
Right to Data Portability
Where technically feasible, you may request that we transfer your personal data to another service provider in a structured, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Upon receiving an objection, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. Currently, we do not engage in automated decision-making of this nature.
International Data Transfers
As a Canadian company, data you provide may be stored and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. For any transfers to other jurisdictions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Protection Officer
Given the scale of our operations, we have not appointed a dedicated Data Protection Officer. However, our management team is responsible for overseeing data protection compliance. All data-related inquiries should be directed to our primary contact.
Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also inform you directly without undue delay.
Exercising Your Rights
To exercise any of the rights described above, please contact us at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, though this period may be extended by two additional months for complex requests, in which case we will inform you of the extension and the reasons for it.
Complaints
If you believe we have not handled your data in compliance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred. We encourage you to contact us first so we can address your concerns directly.
Updates to This Page
We may revise this GDPR information periodically to reflect changes in our practices or regulatory requirements. Significant changes will be communicated through our website, and the revision date at the top of this page will be updated accordingly.