GDPR Compliance

Wreatviell Services is committed to complying with the General Data Protection Regulation (GDPR) for all individuals within the European Economic Area (EEA) who interact with our services. This page outlines how we handle data in accordance with GDPR requirements.

Data Controller

Wreatviell Services acts as the Data Controller for personal information collected through our website and services. Our contact details are:

Wreatviell Services
2847 Queen Street West, Suite 401
Toronto, ON M6J 1G5, Canada
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you explicitly agree to data processing for specific purposes
• Contract: When processing is necessary to fulfill our service agreement with you
• Legal Obligation: When we must comply with regulatory requirements
• Legitimate Interest: When processing benefits our business operations without overriding your rights

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information within 30 days of a verified request.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data where there is no compelling reason for continued processing. Note that certain data may need to be retained for legal or regulatory compliance.

Right to Restrict Processing

You can request that we limit how we use your data while concerns about accuracy or legitimacy are resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transfer it to another controller.

Right to Object

You may object to processing based on legitimate interests or direct marketing at any time.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

International Data Transfers

As a Canadian company, data transferred from the EEA to Canada is protected under the European Commission's adequacy decision recognizing Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) as providing adequate protection.

Data Protection Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Staff training on data protection practices
• Incident response procedures

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a request to [email protected]. We will respond within 30 days. You may also lodge a complaint with your local data protection authority if you believe your rights have been infringed.

Updates to This Notice

We review and update this GDPR compliance information regularly. Any changes will be posted on this page with the revision date.