Information for visitors from the European Economic Area
Last updated: September 2026
iris-whale is committed to protecting the personal data of all our visitors, including those from the European Economic Area (EEA). This page provides information about how we comply with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.
iris-whale acts as the data controller for personal information collected through our website. Our contact details are:
iris-whale
1847 Wharf Street
Victoria, BC V8W 1T2
Canada
[email protected]
We process personal data under the following legal bases as defined by GDPR:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we limit how we use your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, particularly when we process data based on legitimate interests.
Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, and we will inform you if this is necessary.
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We implement appropriate safeguards to ensure your data is protected during any transfer.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include:
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
For any questions or concerns about our data protection practices, please contact us at [email protected].
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority in your country of residence. For EEA residents, you can find your local supervisory authority through the European Data Protection Board website.
We may update this GDPR information from time to time. We will notify you of significant changes by posting a notice on our website.