Your GDPR Rights

Know your data protection rights and how to use them.

Last Updated: January 2025

1. What is GDPR?

GDPR stands for General Data Protection Regulation. It is a European Union law that protects personal data. Even though we are based in Canada, we respect GDPR rights for all our visitors.

GDPR gives you control over your personal information. It sets rules for how companies can collect, store, and use your data.

2. Data Controller Information

The data controller for this website is:

zarnyxys.com
184 Dundas Street
Fredericton, New Brunswick
Canada E3B 1C3

As the data controller, we decide how and why your personal data is processed. We are responsible for keeping your data safe.

Contact for Data Matters: support@zarnyxys.com

3. Your GDPR Rights Explained

Under GDPR, you have several important rights. Here is a detailed look at each one:

3.1 Right of Access (Article 15)

You can ask us what personal data we hold about you. We will tell you:

  • What data we have collected
  • Why we collected it
  • Who we share it with
  • How long we keep it
  • Where we got the data from

We will provide this information free of charge. You will receive a copy of your data in a common electronic format.

3.2 Right to Correction (Article 16)

If any of your personal data is wrong, you can ask us to fix it. This includes:

  • Correcting errors in your information
  • Completing incomplete data
  • Updating outdated information

We will make corrections without undue delay.

3.3 Right to Deletion (Article 17)

Also called the "right to be forgotten." You can ask us to delete your data when:

  • We no longer need it for its original purpose
  • You withdraw your consent
  • You object to processing and we have no overriding reason to continue
  • We processed your data unlawfully
  • We must delete it to follow the law

Some data may be kept for legal reasons, like tax records or dispute resolution.

3.4 Right to Restriction (Article 18)

You can ask us to limit how we use your data. This applies when:

  • You question the accuracy of your data (while we verify it)
  • Processing is unlawful but you prefer restriction over deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing (while we consider your objection)

When restricted, we can only store your data. We cannot use it for other purposes without your consent.

3.5 Right to Data Portability (Article 20)

You can ask for your data in a format that is:

  • Structured and commonly used
  • Machine-readable (like CSV or JSON)
  • Easy to transfer to another service

This right applies to data you provided to us and that we process based on consent or contract.

3.6 Right to Object (Article 21)

You can object to us processing your data for:

  • Direct marketing (we will always stop)
  • Processing based on legitimate interests
  • Research or statistical purposes

For direct marketing, we must stop immediately. For other objections, we must stop unless we have compelling legitimate grounds.

3.7 Right to Withdraw Consent

If we process your data based on your consent, you can withdraw that consent at any time. This includes:

  • Email subscriptions
  • Cookie consent
  • Marketing communications

Withdrawing consent does not affect the lawfulness of processing done before you withdrew.

4. How to Exercise Your Rights

To use any of your GDPR rights, follow these steps:

  1. Send an email to support@zarnyxys.com
  2. Use the subject line: "GDPR Request - [Your Right]"
  3. Include your name and email address
  4. Explain which right you want to exercise
  5. Provide any details that help us find your data

We may ask for proof of identity to protect your data from unauthorized access.

5. Response Times

We will respond to your request within:

  • 30 days for most requests
  • Up to 90 days for complex requests (we will tell you why)

If we cannot fulfill your request, we will explain why within the same timeframe.

6. Managing Cookies

Cookies are a form of data collection. Here is how to manage them:

6.1 Our Cookie Consent Tool

When you first visit our site, you see a cookie banner. You can:

  • Accept all cookies
  • Reject non-essential cookies
  • Read more in our Privacy Policy

6.2 Browser Settings

You can also control cookies through your browser:

  • Chrome: Settings, Privacy and Security, Cookies
  • Firefox: Options, Privacy and Security, Cookies
  • Safari: Preferences, Privacy, Cookies
  • Edge: Settings, Cookies and Site Permissions

Blocking all cookies may affect how our website works.

6.3 Withdrawing Cookie Consent

To withdraw cookie consent:

  1. Clear your browser cookies for our site
  2. Visit our site again
  3. Choose your new cookie preferences

You can also email us at support@zarnyxys.com to request we delete your cookie data.

7. Data We Process

For GDPR purposes, here is what data we may process:

  • Contact information: Name, email address
  • Technical data: IP address, browser type, device info
  • Usage data: Pages visited, time on site, clicks
  • Communication data: Messages you send us

We do not process sensitive personal data like health information, political views, or biometric data.

8. Legal Basis for Processing

Under GDPR, we need a legal basis to process your data. We rely on:

  • Consent: For newsletters and non-essential cookies
  • Legitimate interests: For website security and improvement
  • Legal obligation: When required by law

9. International Data Transfers

We are based in Canada. The European Commission has recognized Canada as providing adequate data protection. This means your data is protected when transferred to us.

If we use services that transfer data elsewhere, we ensure proper safeguards are in place.

10. Data Retention

We keep your data only as long as needed:

  • Contact form messages: 2 years
  • Newsletter subscriptions: Until you unsubscribe
  • Website analytics: 26 months
  • Cookie consent records: 1 year

11. Data Security

We protect your data with:

  • SSL/TLS encryption
  • Secure server infrastructure
  • Regular security updates
  • Access controls and authentication
  • Regular data backups

12. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects on you. All significant decisions about your data involve human review.

13. Children's Data

We do not knowingly collect data from children under 16 without parental consent. If you believe we have such data, contact us immediately.

14. Making a Complaint

If you are unhappy with how we handle your data, you can:

  1. Contact us first at support@zarnyxys.com
  2. Complain to the Office of the Privacy Commissioner of Canada
  3. Complain to your local EU data protection authority (if you are in the EU)

We take all complaints seriously and will work to resolve any issues.

15. Contact Us

For any GDPR-related questions or requests:

  • Email: support@zarnyxys.com
  • Subject line: GDPR Inquiry
  • Address: 184 Dundas Street, Fredericton, New Brunswick, Canada E3B 1C3

We aim to respond to all GDPR inquiries within 5 business days.

16. Updates to This Page

We may update this GDPR information as laws or our practices change. Check the "Last Updated" date at the top for the most recent version.