Last updated: September 2024
At Beige-sky, we are committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements for visitors from the European Economic Area (EEA).
Beige-sky acts as the data controller for personal information collected through our website. As the data controller, we determine the purposes and means of processing your personal data.
For any GDPR-related enquiries, you may contact us at:
We process your personal data based on the following legal grounds:
As a data subject under GDPR, you have the following rights:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will address such requests promptly.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You may request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
As a Canadian business, we may transfer personal data outside the EEA. Canada has been recognized by the European Commission as providing an adequate level of data protection. For any transfers to other countries, we ensure appropriate safeguards are in place.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. Project-related data is retained for the duration of the project plus a reasonable period for follow-up support and warranty purposes.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated as necessary.
To exercise any of your rights under GDPR, please contact us using the information provided above. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, in which case we will inform you of the extension.
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR compliance notice periodically. Any significant changes will be communicated through our website.