Our commitment to European data protection standards
Last updated: January 2024
wise-heath is committed to complying with the General Data Protection Regulation (GDPR) for all individuals in the European Economic Area (EEA) and the United Kingdom. This page outlines how we protect your rights under GDPR when processing your personal data.
For the purposes of GDPR, wise-heath acts as the data controller for personal information collected through our website and services. Our contact details are:
wise-heath
1847 Riverside Drive, Suite 402
Ottawa, Ontario K1G 4T3
Canada
Email: [email protected]
We process personal data under the following lawful bases as defined by GDPR:
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
Where processing is necessary for the performance of a contract with you, such as providing translation services you have requested.
Where processing is necessary to comply with legal obligations, such as maintaining business records.
Where processing is necessary for our legitimate interests, provided these do not override your fundamental rights and freedoms. This includes improving our services and website functionality.
If you are located in the EEA or UK, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests, including profiling based on legitimate interests.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases or where multiple requests are made, this may be extended by up to two additional months, and we will notify you of any such extension.
We may request verification of your identity before processing your request to ensure that personal data is not disclosed to unauthorized persons.
As a Canadian organization, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data.
Where we engage service providers located outside of adequacy jurisdictions, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When determining retention periods, we consider the nature and sensitivity of the data, potential risks, and applicable legal requirements.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and security assessments.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Our services are not directed to children under 16 years of age, and we do not knowingly collect personal data from children.
If you are located in the EEA or UK and believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.
For any questions about our GDPR compliance or to exercise your data protection rights, please contact us at:
wise-heath
1847 Riverside Drive, Suite 402
Ottawa, Ontario K1G 4T3
Canada
Email: [email protected]