Your data protection rights under the General Data Protection Regulation
Agile-echo is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights as a data subject.
Agile-echo acts as the data controller for personal information collected through our website and services. Our contact information is:
Agile-echo
180 University Avenue, Suite 1200
Toronto, ON M5H 3C3
Canada
Email: [email protected]
We process your personal data under the following legal bases:
Under the GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any inaccurate personal data we hold about you. We will respond to rectification requests within one month.
You have the right to request deletion of your personal data in certain circumstances, including:
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of data and the purpose of processing.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two months, but we will inform you of any extension within the first month.
You will not be charged a fee for exercising your rights, except in cases of manifestly unfounded or excessive requests.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For residents of the European Union, you can contact the data protection authority in your country of residence.
We may update this GDPR compliance information from time to time. We encourage you to review this page periodically for the latest information about our data protection practices.