GDPR Compliance

Last Updated: January 15, 2024

Basin-ware is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements for visitors and customers from the European Economic Area (EEA).

Data Controller

Basin-ware acts as the data controller for personal information collected through our website and services. Our contact details are:

Basin-ware
415 Railway Street
Vancouver, BC V6A 1A7
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract: Processing necessary to perform our services as agreed with you
• Consent: Processing based on your explicit consent, which can be withdrawn at any time
• Legitimate Interest: Processing necessary for our legitimate business interests, balanced against your rights
• Legal Obligation: Processing required to comply with legal requirements

Your Rights Under GDPR

As an individual in the EEA, you have the following rights:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving your request.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller.

Right to Object

You may object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not engage in automated decision-making that affects your rights.

International Data Transfers

As Basin-ware is located in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We implement appropriate safeguards for any transfers of personal data to countries that have not received an adequacy decision.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Project files (including photographs): One year after delivery
• Transaction records: Seven years for legal and accounting purposes
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics: 26 months (anonymized data)

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Secure data backup procedures

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within 30 days, or inform you if additional time is required.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence.

Updates to This Notice

We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.