Our commitment to protecting your data rights under European regulation
Last Updated: January 2024
mesa-condor is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights as a data subject.
The General Data Protection Regulation is a comprehensive data protection law that applies to organizations processing personal data of individuals located in the European Union. Even though mesa-condor is based in Canada, we respect and comply with GDPR principles when handling data of EU residents.
We process personal data based on the following legal grounds:
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or using non-essential cookies.
Where processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract, such as providing consulting services you have engaged.
Where processing is necessary for our legitimate interests or those of a third party, provided your rights and interests do not override these interests. This includes improving our services and ensuring website security.
Where we are required to process data to comply with a legal obligation.
If you are located in the European Union, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request correction of inaccurate personal data or completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
To exercise any of your rights under GDPR, please contact us using the information below. We will respond to your request within one month of receipt. If your request is complex or we receive numerous requests, we may extend this period by a further two months, in which case we will inform you.
We may need to verify your identity before processing your request to ensure we are providing personal data to the correct person.
As mesa-condor is based in Canada, personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection for personal data transferred from the EU.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Specific retention periods vary based on the type of data and purpose of processing.
While we are not required to appoint a Data Protection Officer under GDPR, we have designated a privacy contact to handle data protection inquiries. You can reach our privacy contact at the address below.
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
For any questions about our GDPR compliance or to exercise your data protection rights, please contact us at:
mesa-condor
1200 Bay Street, Suite 405
Toronto, ON M5R 2A5
Canada
Email: [email protected]
This GDPR information page is provided for informational purposes and describes our approach to GDPR compliance. It does not constitute legal advice. For specific guidance on your data protection rights, we recommend consulting with a qualified legal professional. Our practices may be updated to reflect changes in applicable regulations and interpretive guidance.