GDPR Compliance
Last updated: January 2024
Divisive Sopranos is committed to complying with the General Data Protection Regulation (GDPR) for users located in the European Economic Area (EEA). This page outlines your rights under GDPR and how we protect your personal data.
Data Controller
Divisive Sopranos acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.
Contact: [email protected]
Address: 247 Wellington Street West, Toronto, ON M5V 3C7, Canada
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given explicit consent for specific purposes
- Contractual Necessity: When processing is necessary to fulfill a contract with you or take steps at your request before entering a contract
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal Obligation: When processing is necessary to comply with applicable laws
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we limit how we use your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. The retention period varies depending on the nature of the data and our legal obligations.
International Transfers
Your personal data may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we implement appropriate safeguards to ensure adequate protection of your personal data.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include encryption, access controls, and regular security assessments.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Right to Lodge a Complaint
If you believe that we have not complied with our data protection obligations, you have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.
Changes to This Notice
We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page.