GDPR Compliance

Our Commitment to GDPR

meta-frost is committed to ensuring compliance with the General Data Protection Regulation (GDPR) for all users, particularly those located in the European Economic Area (EEA). This page outlines how we adhere to GDPR requirements and explains your rights under this regulation.

Data Controller Information

meta-frost acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Contact details:
meta-frost
245 Wellington Street West, Suite 1400
Toronto, ON M5V 3E7
Canada
[email protected]

Lawful Basis for Processing

Under GDPR, we process personal data only when we have a lawful basis to do so. The bases we rely upon include:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests
• Legal Obligation: When processing is necessary to comply with a legal obligation

Your GDPR Rights

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request that we correct any inaccurate or incomplete data
• Right to Erasure: You can request that we delete your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request to receive your data in a structured, machine-readable format
• Right to Object: You can object to our processing of your data based on legitimate interests
• Rights Related to Automated Decision-Making: You have rights concerning decisions made solely by automated means

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases or during periods of high volume, this may be extended by up to two additional months, in which case we will inform you.

Data Transfers Outside the EEA

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place. These may include:

• Transfers to countries with adequate data protection laws as determined by the European Commission
• Standard contractual clauses approved by the European Commission
• Other legally recognized transfer mechanisms

Data Protection Officer

While we are not required to appoint a Data Protection Officer under GDPR, we take data protection seriously. For any data protection inquiries, please contact us at [email protected].

Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in high risk to your rights and freedoms, we will also notify you directly.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Significant changes will be communicated through our website or by direct communication where appropriate.