About GDPR
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Even though velvet-pine is based in Canada, we are committed to upholding the principles of GDPR for all our visitors and customers, regardless of their location.
Our Commitment
We are committed to ensuring that your personal data is processed lawfully, fairly, and transparently. We collect only the data necessary for the purposes we have communicated to you, and we take appropriate measures to keep your data secure.
Data Controller
velvet-pine acts as the data controller for the personal information collected through this website. As the data controller, we determine the purposes and means of processing personal data.
Contact Information:
velvet-pine
145 Art District Lane
Toronto, ON M5V 2T6
Canada
[email protected]
Your Rights Under GDPR
If you are a resident of the European Union, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on our legitimate interests.
Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain cases, we may need to verify your identity before processing your request.
Data Processing Activities
We process personal data for the following purposes:
- To respond to inquiries submitted through our contact forms
- To process orders and provide our canvas print services
- To send marketing communications (with your consent)
- To analyze website usage and improve our services
- To comply with legal obligations
Legal Bases for Processing
We process personal data on the following legal bases:
- Consent: When you have given clear consent for us to process your data for a specific purpose
- Contract: When processing is necessary to fulfill a contract with you
- Legal Obligation: When we must process data to comply with the law
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided those interests do not override your rights
International Data Transfers
As we are based in Canada, data transfers from the EU to Canada are protected under the European Commission's adequacy decision for Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Data Protection Officer
For any questions or concerns about our data protection practices, please contact us at [email protected].
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or place of the alleged violation.