Our Commitment to Data Protection
hollow-civet Education Inc. is committed to protecting the personal data of all individuals, including those in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and your rights under this regulation.
Data Controller Information
For the purposes of GDPR, the data controller is:
hollow-civet Education Inc.350 Bay Street, Suite 1200
Toronto, Ontario M5H 2S6
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR:
Consent
Where you have provided explicit consent for us to process your data for specific purposes, such as receiving marketing communications.
Contract Performance
Processing necessary to perform a contract with you, such as enrolling you in educational programs and providing course materials.
Legitimate Interests
Processing necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms. This includes improving our services and maintaining security.
Legal Obligation
Processing necessary to comply with legal requirements, such as maintaining financial records.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
International Data Transfers
As we are based in Canada, personal data collected from EEA residents may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. Where data is transferred to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods are determined based on:
- The nature of the data and purposes of processing
- Legal and regulatory requirements
- Legitimate business needs
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at:
Email: [email protected]
We will respond to your request within one month. In complex cases, we may extend this period by an additional two months, and we will inform you of any such extension.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in the EEA member state of your residence, place of work, or where the alleged infringement took place.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.