GDPR Compliance

About GDPR

The General Data Protection Regulation (GDPR) is a European Union regulation that governs the processing of personal data of individuals within the EU and EEA. Although nimble-prairie is based in Canada, we respect the rights of all visitors and extend GDPR protections to those who may be subject to this regulation.

Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.

Right to Erasure

Also known as the "right to be forgotten," you may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significant effects concerning you.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given explicit consent for specific purposes
• Contract: Where processing is necessary to fulfill a contract with you or take steps at your request prior to entering a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where we are required to process data to comply with applicable laws

Data Transfers

As a Canadian organization, personal data collected from EU residents may be transferred to and processed in Canada. Canada has received an adequacy decision from the European Commission, meaning Canadian privacy law is considered to provide an adequate level of protection for personal data.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. When data is no longer needed, it is securely deleted or anonymized.

Data Protection Officer

While not required under GDPR for organizations of our size and nature, we have designated a privacy contact responsible for overseeing data protection matters.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the information below. We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended by two additional months for complex requests.

Complaints

If you believe we have not adequately addressed your concerns regarding personal data processing, you have the right to lodge a complaint with your local data protection supervisory authority.

Contact Information

For GDPR-related inquiries or to exercise your rights, please contact:

nimble-prairie
Data Protection Contact
742 Solar Heights Drive
Calgary, Alberta T2P 1G4
Canada
Email: [email protected]