Information for European Union residents
lush-star.com is committed to compliance with the General Data Protection Regulation (GDPR) for all individuals located in the European Economic Area (EEA). This page supplements our Privacy Policy and provides additional information specific to GDPR requirements.
For the purposes of GDPR, lush-star.com acts as the data controller for personal information collected through our website and in connection with our translation services. Our contact information is:
lush-star.com
401 Bay Street, Suite 1600
Toronto, Ontario M5H 2Y4
Canada
Email: [email protected]
We process your personal data under the following legal bases as defined by GDPR:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a verifiable request.
You have the right to request correction of any inaccurate personal data we hold about you, or completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently use automated decision-making in our services.
As a Canadian company, we may transfer personal data from the EEA to Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. For transfers to other countries, we implement appropriate safeguards such as standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include:
While not required under GDPR given our processing activities, we have designated a privacy contact person responsible for overseeing data protection matters. You may reach this contact at [email protected].
If you are located in the EEA and believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within 30 days. We may request verification of your identity before processing your request to ensure the security of your personal data.
We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.