GDPR Compliance

Your rights under the General Data Protection Regulation

Last updated: September 2024

Our Commitment to GDPR

forest-kit is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights as a data subject.

Data Controller

forest-kit acts as the data controller for personal information collected through this website. Our contact details are:

Address: 180 University Avenue, Suite 1400, Toronto, ON M5H 0A2, Canada
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Consent: When you voluntarily submit information through our forms
  • Contractual necessity: When processing is necessary to fulfill enrollment requests
  • Legitimate interests: For website analytics and service improvement
  • Legal obligation: When required by applicable laws

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

Right to Access

You have the right to request copies of your personal data that we hold.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization or directly to you under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

International Data Transfers

As we are based in Canada, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. When data is no longer needed, it is securely deleted or anonymized.

Data Protection Officer

For any questions regarding our GDPR compliance or data protection practices, please contact us at [email protected].

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence.