When we share your personal data
Depending on your location and where data is collected, we store your personal data on secure servers located in Canada and Ireland and hosted by Amazon Web Services (AWS). **The laws of the jurisdiction where the information is stored will apply to your personal data. We ensure that your information is stored in accordance with requirements under applicable data protection legislation.
Where we store your personal data
When we share your personal data, we ensure that your personal data is protected in accordance with applicable data protection laws and this policy.
We may share with third-party service providers when necessary to fulfil the services they provide to us, such as cloud hosting, software, system and website support, or data analytics. The third-party service providers are contractually obligated to use the personal data we share with them only to perform services on our behalf and to protect and treat your personal data as strictly confidential.
We may also share your personal data with our other offices, affiliates, agents or appointed representatives. These entities are required to use your information only for the purposes for which it was originally collected and in a manner consistent with all applicable data protection laws and our contractual obligations.
If we enter into a corporate transaction involving the sale of substantially all of our assets or in a bankruptcy or reorganisation proceeding brought by or against us we may share or transfer your personal data if it is considered an asset and part of the transaction. You will be notified of such transfer in accordance with applicable legislation.
We may also share your personal data in order to protect our rights or where required by law, or by regulatory or government authorities.
We will ensure that your privacy rights are protected and that the information is transferred in accordance applicable data protection laws.
How long we retain your personal data
We retain personal data only as long as necessary for the purposes for which it was collected, or as permitted by applicable law. When we no longer need personal data, we securely delete or destroy it.
How we protect your personal data
Altrio is committed to safeguarding and protecting personal data. We have implemented and are maintaining technical, administrative and organisational measures to ensure an adequate level of security appropriate to the sensitivity of personal data collected. For example, we only allow access to personal data on a need-to-know basis and personal data we collect is encrypted both in storage and on transmission. We employ these measures to protect your personal data from accidental or unlawful, destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed.
Your rights with respect to your personal data
Depending on where you reside, you may have the following rights with respect to your personal data:to withdraw your consent to us collecting, using or disclosing your personal data at any time;
to request access to and obtain a copy of your personal data that we may hold;
to request correction of any inaccurate personal data relating to you;
to receive personal data that you have provided us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible;
to object to or restrict our processing of your personal data under specific circumstances. Where your personal data is subject to restriction we will only process it with your consent or for the establishment, exercise or defense of legal claims;
to lodge a complaint with us and with the applicable supervisory authority if you consider that the processing of your personal data infringes applicable law;
to object to processing of your personal data where we are relying upon legitimate interests to process personal data, in which case we must stop unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or we need to process the personal data for the establishment, exercise or defense of legal claims;
to object to processing of your personal data where we are relying upon legitimate interests to process personal data, in which case we must stop unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or we need to process the personal data for the establishment, exercise or defense of legal claims;to object to our use of your personal data for direct marketing purposes, such as when we use your personal data to invite you to our promotional events that we believe may be of interest to you.
These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement or contractual obligation to process your personal data. In some instances, this may mean that we are able to retain your personal data even if you withdraw your consent. In such a case, we will apply appropriate measures and safeguards to protect your personal data.
We will respond to your request within 30 days.
