About the GDPR
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals located in the European Economic Area (EEA). Although Harvest Side is based in Canada, we are committed to upholding the principles of the GDPR for all visitors, including those from the EEA.
Data Controller
Harvest Side acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact Information:
Harvest Side
742 King Street West
Toronto, ON M5V 1N6
Canada
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you voluntarily submit information through our contact or booking forms
- Legitimate Interests: For website analytics and improving our services, provided such interests do not override your fundamental rights
- Legal Obligation: When we are required to process data to comply with applicable laws
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
Right to Erasure
You have the right to request that we delete your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data under certain conditions.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.
International Data Transfers
As our operations are based in Canada, personal data collected from EEA residents may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection for commercial organizations subject to PIPEDA.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods depend on the nature of the data and processing purposes.
Exercising Your Rights
To exercise any of your rights under the GDPR, please contact us using the information provided above. We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by an additional two months, and we will inform you of any such extension.
Complaints
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside, work, or where the alleged infringement occurred.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.