GDPR Information

This page provides additional information for individuals located in the European Economic Area (EEA), United Kingdom, or Switzerland regarding the processing of their personal data under the General Data Protection Regulation (GDPR) and equivalent legislation.

Data Controller

Prime-storm is the data controller for personal information collected through this website. Our contact details are:

Prime-storm
45 Wellington Street West, Suite 1200
Toronto, Ontario M5J 2H7
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have provided consent for us to process your data for specific purposes, such as receiving marketing communications
• Contract: Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving our services, provided these interests do not override your fundamental rights
• Legal Obligation: Where processing is necessary to comply with legal requirements

Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you
• Right to Rectification: You may request that we correct inaccurate or incomplete data
• Right to Erasure: You may request that we delete your personal data in certain circumstances
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances
• Right to Data Portability: You may request to receive your data in a structured, commonly used format
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time

International Data Transfers

As we are based in Canada, personal data may be transferred to and processed in Canada. The European Commission has recognized Canada as providing adequate protection for personal data under PIPEDA for commercial organizations. Where we transfer data to jurisdictions without an adequacy decision, we implement appropriate safeguards such as standard contractual clauses.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods vary depending on the nature of the data and the purpose of processing.

Automated Decision Making

We do not engage in automated decision-making, including profiling, that produces legal effects or similarly significantly affects individuals without human involvement.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month, though this period may be extended by two further months where necessary, taking into account the complexity and number of requests.

We may need to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it.

Supervisory Authority

If you are located in the EEA, UK, or Switzerland and believe that your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. You may also contact the Office of the Privacy Commissioner of Canada, which serves as the supervisory authority for Canadian organizations subject to PIPEDA.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.