GDPR Compliance Statement

Last Updated: January 15, 2024

This page provides additional information for individuals located in the European Economic Area (EEA) and United Kingdom regarding how Swift-station Inc. processes personal data in accordance with the General Data Protection Regulation (GDPR).

Data Controller

Swift-station Inc. acts as the data controller for the personal information collected through this website. Our contact details are:

Swift-station Inc.
1247 Granville Street, Suite 400
Vancouver, BC V6Z 1M4
Canada
Email: [email protected]

Lawful Basis for Processing

Under the GDPR, we must have a valid legal basis for each processing activity. We rely on the following grounds:

Contractual Necessity

We process data necessary to perform services you have requested or to take steps at your request prior to entering into a contract. This includes responding to quote requests, scheduling consultations, and managing active renovation projects.

Legitimate Interests

We process certain data based on our legitimate business interests, provided these do not override your fundamental rights. Our legitimate interests include:

Operating and improving our website
Understanding how visitors use our services
Protecting our business against fraud and legal claims
Administering our customer relationships

Consent

Where required, we obtain your explicit consent before processing. This applies primarily to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Legal Obligation

Some processing is required to comply with legal requirements, such as tax regulations or responding to lawful requests from authorities.

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request, unless the request is manifestly unfounded or excessive.

Right to Rectification

You have the right to ask us to correct personal data that is inaccurate or complete data that is incomplete. We will respond to such requests promptly.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restrict Processing

You may ask us to limit how we use your data while we address concerns you have raised about accuracy or our use of the data.

Right to Data Portability

Where we process data based on consent or contract, you can request a copy of that data in a structured, commonly used, machine-readable format to transfer to another service provider.

Right to Object

You may object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Rights Related to Automated Decision-Making

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. To verify your identity, we may ask you to provide additional information. We will respond to all valid requests within one month, though this period may be extended for complex requests in accordance with GDPR provisions.

International Data Transfers

As we are located in Canada, data may be transferred outside the EEA. Canada has received an adequacy decision from the European Commission, recognizing that Canadian law provides an adequate level of data protection. Where we use service providers located in countries without an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When determining retention periods, we consider the amount and sensitivity of the data, potential risks from unauthorized use or disclosure, and applicable legal requirements.

Data Protection Officer

Given our current scale and processing activities, we have not appointed a dedicated Data Protection Officer. For privacy-related inquiries, please contact us using the details provided above.

Supervisory Authority

If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority. We would appreciate the opportunity to address your concerns directly before you approach the supervisory authority.

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. We encourage you to review this page regularly for the latest information on our data protection practices.