GDPR Compliance

Last Updated: November 2024

Dune-solar is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This page provides information about how we comply with GDPR requirements.

Data Controller

Dune-solar acts as the data controller for personal information collected through our website and services. Our contact details are:

Dune-solar
220 Bay Street, Suite 1500
Toronto, Ontario M5J 2W4
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: When you have given clear consent for us to process your personal data for specific purposes.
Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: When processing is necessary for compliance with a legal obligation.
Legitimate Interests: When processing is necessary for our legitimate interests and does not override your rights and freedoms.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You have the right to request correction of any information you believe is inaccurate or incomplete.
Right to Erasure: You have the right to request that we erase your personal data under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability: You have the right to request that we transfer your data to another organization or directly to you under certain conditions.
Right to Object: You have the right to object to our processing of your personal data under certain conditions.
Right to Withdraw Consent: Where we rely on consent for processing, you have the right to withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex or if you have made multiple requests, we may extend this period by a further two months, informing you of this extension within the first month.

Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your information, including:

Standard contractual clauses approved by the European Commission
Binding corporate rules
Transfers to countries deemed adequate by the European Commission

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

Data Security

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data where appropriate
Regular testing and evaluation of security measures
Staff training on data protection
Access controls and authentication procedures

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. If you are in the EEA, you can contact your local data protection authority.

Contact Us

For any questions or concerns about our GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Address: 220 Bay Street, Suite 1500, Toronto, Ontario M5J 2W4, Canada