GDPR Compliance

Last updated: October 2026

Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union. While Vaser Canada is based in Canada, we are committed to protecting the privacy rights of all our website visitors and clients, including those from the European Union.

Data Controller

For the purposes of GDPR, Vaser Canada acts as the data controller for personal information collected through this website. Our contact details are:

Vaser Canada
245 Bay Street, Suite 800
Toronto, ON M5J 2L5
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit information through our contact forms, you consent to our processing of that data for the purposes specified.
• Contract Performance: Processing necessary to provide services you have requested or contracted.
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services and website, provided these do not override your fundamental rights.
• Legal Obligation: Processing necessary to comply with legal requirements.

Your Rights Under GDPR

If you are located in the European Union, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you and to verify that we are processing it lawfully.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests, including profiling and direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

International Data Transfers

As Vaser Canada is located in Canada, personal data collected from EU residents may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We ensure appropriate safeguards are in place for any international data transfers.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary depending on the nature of the data and our legal obligations. When data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit
• Regular security assessments
• Access controls and authentication measures
• Staff training on data protection

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. In complex cases, this period may be extended by two additional months, in which case we will inform you of the extension and the reasons for it.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.