GDPR Compliance Statement

Application of GDPR

While keen-river is based in Canada, we recognize that the General Data Protection Regulation (GDPR) may apply when we process personal data of individuals located in the European Economic Area (EEA).

Data Controller Information

For purposes of GDPR compliance, keen-river acts as the data controller for personal information collected through this website.

Contact details:
keen-river
142 Harbour Street
Toronto, ON M5J 2S2
Canada
Email: [email protected]

Legal Basis for Processing Personal Data

When processing personal data of EEA residents, we rely on the following legal bases:

• Consent: You provide explicit consent when submitting the contact form
• Legitimate Interests: Processing necessary for responding to service inquiries and maintaining business communication records
• Contractual Necessity: Processing required to provide requested services

Data Subject Rights Under GDPR

If you are an EEA resident, you have the following rights regarding your personal data:

• Right of Access: Request confirmation of whether we process your data and obtain a copy
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restriction of Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month, as required by GDPR. In complex cases, this period may be extended by two additional months, and we will inform you of such extension.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe our processing of your personal data violates GDPR requirements.

Data Processing and Storage

Personal data collected through this website is processed and stored on servers that may be located outside the EEA. We ensure that appropriate safeguards are in place for international data transfers, including standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Contact form submissions are retained for two years from the date of last interaction, unless an ongoing service relationship exists.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit, access controls, and regular security assessments.

Updates to This Statement

This GDPR compliance statement may be updated periodically. The "Last Updated" date indicates when the most recent changes were made. Continued use of this website after updates constitutes acceptance of the revised statement.