GDPR Compliance

Last Updated: October 2026

Introduction

Loonbitca recognizes the importance of the General Data Protection Regulation (GDPR) and is committed to protecting the personal data of individuals in the European Economic Area (EEA) and the United Kingdom. This page outlines our GDPR compliance measures and your rights as a data subject.

Data Controller Information

Loonbitca acts as the data controller for personal data collected through this website. Our contact details are:

Loonbitca
450 Maple Avenue, Suite 302
Toronto, ON M5V 2N8
Canada
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by GDPR Article 6:

• Consent (Article 6(1)(a)): When you voluntarily provide information through our contact forms, you consent to the processing of that data for the stated purposes.
• Contract Performance (Article 6(1)(b)): When you engage our services, we process data necessary to fulfill our contractual obligations.
• Legitimate Interests (Article 6(1)(f)): We may process data for legitimate business purposes such as improving our services, provided these interests do not override your fundamental rights.
• Legal Obligation (Article 6(1)(c)): We may process data when required to comply with legal obligations.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation as to whether we process your personal data and to request a copy of that data.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restriction (Article 18)

You have the right to request restriction of processing in certain situations, such as when you contest the accuracy of your data.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests, including profiling. You also have the right to object to direct marketing at any time.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not engage in such automated decision-making.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR. This period may be extended by two additional months for complex requests, in which case we will inform you of the extension and reasons within the initial one-month period.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit
• Access controls limiting data access to authorized personnel
• Regular review and assessment of security measures
• Staff training on data protection principles
• Incident response procedures for data breaches

International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we transfer to countries with an adequacy decision.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach poses a high risk, we will also notify affected individuals without undue delay.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority. For residents of EEA countries, this would typically be the data protection authority in your country of residence.

Changes to This Information

We may update this GDPR compliance information periodically. Material changes will be communicated through our website.

Contact for Data Protection Matters

For any questions or concerns regarding our data protection practices or to exercise your rights, please contact us at [email protected]