Information for European Union residents
Last Updated: January 2024
Myth-isle is committed to complying with the General Data Protection Regulation (GDPR) when processing personal data of individuals located in the European Economic Area (EEA). This page provides additional information about how we handle personal data in accordance with GDPR requirements.
For the purposes of GDPR, Myth-isle acts as the data controller for personal data collected through our website and direct communications. Our contact details are:
Myth-isle
147 Queen Street West, Suite 302
Toronto, ON M5H 3M5
Canada
Email: [email protected]
We process personal data under the following legal bases:
When you submit information through our contact forms or subscribe to communications, you provide consent to process that information for the stated purposes. You may withdraw consent at any time by contacting us.
When you engage us for consulting services, we process personal data as necessary to perform our contractual obligations to you.
We may process personal data based on our legitimate business interests, such as improving our services and website functionality, provided such interests do not override your fundamental rights and freedoms.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you, along with information about how we use it.
You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We will inform you of any such extension within one month of receiving your request.
We may request specific information from you to help us confirm your identity and ensure your right to access the personal data or exercise any of your other rights.
As we are based in Canada, personal data transferred from the EEA to us is transferred to a country that the European Commission has recognized as providing adequate data protection. Where we transfer personal data to other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary for the purposes for which it was collected. Our retention periods are determined based on:
If you are located in the EEA and believe that we have not complied with data protection laws, you have the right to lodge a complaint with your local supervisory authority. We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us in the first instance.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.