Your data protection rights
Last updated: January 2024
Jinni Petals is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines your rights and how we ensure compliance.
Jinni Petals acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 156 Wellington Street West, Toronto, ON M5V 3E7, Canada
We process your personal data based on one or more of the following legal grounds:
Under the GDPR, you have the following rights regarding your personal data:
Right to Access: You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
Right to Erasure: Also known as the "right to be forgotten," you can request the deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
Right to Restrict Processing: You can request that we limit how we use your data while a complaint is being investigated.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object: You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
To exercise any of these rights, please contact us at:
We will respond to your request within one month. If your request is complex, we may extend this period by two months, but we will inform you of this extension within the first month.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses or adequacy decisions.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.
We may update this GDPR information from time to time. We will notify you of any significant changes through our website or by email where appropriate.