This section of this policy is specifically for residents/data subjects located in the European Economic Area (EEA) and the UK, and is prepared in accordance with the requirements of the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
Data Controller:
ALBAVENTURERB INC
Email: [email protected]
Website: https://albaventurerb.com
I. Legal Basis for Our Processing of Your Personal Information
Under the GDPR, we only process your personal information where we have a clear legal basis for doing so. For most of our processing activities, the legal basis is as follows:
Performance of a Contract (Article 6(1)(b) GDPR): Processing necessary to enter into or perform a sales contract with you (for example, processing your order, payment, and shipping products).
Legitimate Interests (Article 6(1)(f) GDPR): Processing for the purposes of operating and improving our website, preventing fraud, ensuring network security, and conducting marketing activities, to the extent these interests are not overridden by your data protection rights.
Consent (Article 6(1)(a) GDPR): We will ask for your explicit consent for certain purposes (e.g., subscribing to our marketing emails, using non-essential cookies), and you have the right to withdraw that consent at any time.
Legal Obligation (Article 6(1)(c) GDPR): Processing is necessary for compliance with EU or Member State legal obligations (e.g., tax and accounting requirements).
II. Your Data Protection Rights (GDPR Rights)
Under the GDPR, as an EU resident, you have the following rights. You can exercise these rights by contacting [email protected]. We will respond to your request within one month of receiving it.
Right of Access: You have the right to request confirmation from us as to whether we are processing your personal information and to obtain a copy of that information.
Right of Correction: You have the right to request that we correct inaccurate or incomplete personal information.
Right to Erasure (Right to Be Forgotten): Under certain circumstances (e.g., where the personal data is no longer necessary for the purposes for which it was collected, or you have withdrawn your consent), you have the right to request that we delete your personal information. Right to Restrict Processing: Under certain circumstances (for example, if you dispute the accuracy of the data), you have the right to request that we suspend the processing of your personal information.
Right to Data Portability: You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object:
You have the right to object to processing based on legitimate interests or the public interest, on grounds relating to your particular situation.
You have an absolute right to object to our processing of your data for direct marketing purposes; upon such objection, we will immediately cease processing your data for such purposes.
Rights Related to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
Right to Complain: If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with an EU data protection authority in your place of habitual residence, place of work, or place of the alleged infringement.
III. International Transfers of Data
ALBAVENTURERB INC is a company operating in [Canada]. The European Commission has recognized Canada as providing an adequate level of data protection. This means that transferring your data from the EU to our servers in Canada is permitted because it provides protection equivalent to that provided by the GDPR.
If we need to transfer your data to a third country that has not been deemed "adequate" by the European Commission (for example, where certain third-party service providers are located), we will ensure that GDPR-recognized legal safeguards are in place, such as agreements incorporating the EU Commission's Standard Contractual Clauses (SCCs), to ensure your data continues to be protected.
IV. Retention Period of Personal Data
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, comply with our legal obligations (such as tax regulations requiring the retention of transaction records), resolve disputes, and enforce our agreements.
Order Information: We will retain your information for six years from the date of purchase (or the statutory limitation period in your jurisdiction) to comply with legal obligations.
Marketing Contact Information: If you have subscribed to our newsletter, we will retain your information for as long as you remain subscribed, or until you unsubscribe. After unsubscribing, we will no longer process your data for marketing purposes, but may retain your email address on a suppression list to ensure we do not send you marketing materials.
V. Contact Us
If you have any questions, comments, or requests regarding this Policy, your personal information, or your GDPR rights, please contact our Data Protection Officer at:
ALBAVENTURERB INC
Email: [email protected]