GDPR Compliance Statement

Our Commitment to Data Protection

While jolly-iris.com is based in Canada, we recognize that some of our website visitors and clients may be located in the European Union. We are committed to respecting the data protection principles established by the General Data Protection Regulation (GDPR) for all individuals, regardless of location.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you submit forms or contact us, you provide explicit consent for us to process your information for the stated purposes.
• Legitimate Interests: We may process data to improve our website functionality and user experience, provided this does not override your fundamental rights.
• Contractual Necessity: Processing may be necessary to fulfill service agreements or respond to inquiries about our training programs.

Your GDPR Rights

If you are a resident of the European Union, you have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You may request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Transfers

Your personal data is primarily stored and processed in Canada. Canada has been recognized by the European Commission as providing adequate data protection. If we transfer data to other jurisdictions, we ensure appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, it is securely deleted or anonymized.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities in accordance with GDPR requirements.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 1247 Granville Street, Suite 820, Vancouver, BC V6Z 1M4, Canada

We will respond to your request within one month. In complex cases, we may extend this period by an additional two months and will inform you of any such extension.

Supervisory Authority

If you are located in the EU and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Contact Our Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our designated representative at [email protected].