GDPR Compliance
Information for users in the European Economic Area
Our Commitment to GDPR
Although stellar-vine is based in Canada, we are committed to protecting the privacy rights of individuals in the European Economic Area (EEA) in accordance with the General Data Protection Regulation (GDPR). This page supplements our main Privacy Policy with specific information relevant to GDPR compliance.
Data Controller
stellar-vine acts as the data controller for personal information collected through this website. Our contact details are:
stellar-vine
350 Bay Street, Suite 700
Toronto, ON M5H 2S6
Canada
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications.
- Contract Performance: Where processing is necessary to fulfill our contractual obligations, such as processing course enrollments.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services and website security, provided these interests do not override your fundamental rights.
- Legal Obligations: Where we are required to process data to comply with applicable laws.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving your request.
Right to Rectification
You have the right to request correction of any inaccurate personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data where there is no compelling reason for its continued processing. This right is subject to certain exceptions, such as where we need to retain data for legal compliance.
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.
International Data Transfers
As we are based in Canada, personal data collected from EEA residents is transferred to Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where we engage third-party service providers outside of adequacy jurisdictions, we implement appropriate safeguards such as Standard Contractual Clauses.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods depend on the nature of the data and the purposes for processing. You may request deletion of your data at any time, subject to our legal obligations.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at:
We will respond to your request within 30 days. We may request verification of your identity before processing your request.
Right to Lodge a Complaint
If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you live, work, or where the alleged infringement took place.
Updates to This Notice
We may update this GDPR notice periodically to reflect changes in our practices or applicable law. The date of the most recent revision will be indicated at the top of this page.