Our commitment to protecting your personal data under the General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals in the European Union, regardless of where the organization is located.
root-elk is committed to GDPR compliance and ensuring that users from the European Economic Area (EEA) have their data protection rights fully respected.
root-elk acts as the data controller for the personal data we collect through our website and services.
Contact information:
If you are a resident of the European Economic Area, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving your verified request.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
You have the right to request that we limit the processing of your personal data under certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
You have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you. We do not currently engage in automated decision-making that would fall under this provision.
We process personal data on the following legal bases:
As root-elk is based in Canada, personal data collected from EEA residents will be transferred to Canada for processing. The European Commission has recognized Canada as providing an adequate level of data protection under GDPR Article 45.
Where we use service providers located outside jurisdictions with adequacy decisions, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
We implement technical and organizational measures to ensure the security of your personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also notify you directly.
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request." We may need to verify your identity before processing your request.
We will respond to your request within 30 days. If we need additional time, we will inform you of the reason and extension period.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would typically be the data protection authority in your country of residence.
We may update this GDPR compliance information periodically. Any changes will be posted on this page with an updated revision date.