Your GDPR Rights

1. Introduction

The General Data Protection Regulation (GDPR) is a European Union regulation that protects the personal data and privacy of individuals. Even though we are based in Canada, we respect and uphold GDPR principles for all our visitors, regardless of location.

This page explains your rights under the GDPR and how you can exercise them when using our website.

2. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

2.1 Right to Access (Article 15)

You have the right to request a copy of the personal data we hold about you. This includes:

• The categories of personal data we process
• The purposes of the processing
• The recipients or categories of recipients of your data
• The retention period or criteria used to determine it
• The source of the data if not collected from you directly
• Whether automated decision-making, including profiling, is used

We will provide this information free of charge within 30 days of your request.

2.2 Right to Rectification (Article 16)

You have the right to request that we correct any inaccurate personal data about you. You also have the right to have incomplete data completed. We will respond to rectification requests within 30 days.

2.3 Right to Erasure - Right to be Forgotten (Article 17)

You have the right to request that we delete your personal data when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to the processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

We may not be able to delete your data if processing is necessary for legal claims, compliance with legal obligations, or public interest reasons.

2.4 Right to Restrict Processing (Article 18)

You have the right to request that we restrict the processing of your personal data when:

• You contest the accuracy of the data (for a period allowing us to verify accuracy)
• The processing is unlawful and you prefer restriction over erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

When processing is restricted, we will only store your data and will not process it without your consent, except for legal claims or protection of rights.

2.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller when:

• The processing is based on your consent or a contract
• The processing is carried out by automated means

We will provide your data in a common format such as CSV or JSON.

2.6 Right to Object (Article 21)

You have the right to object to the processing of your personal data when:

• Processing is based on legitimate interests or public interest
• Processing is for direct marketing purposes (including profiling)
• Processing is for scientific, historical research, or statistical purposes

For direct marketing objections, we will stop processing immediately. For other objections, we will stop unless we can demonstrate compelling legitimate grounds.

2.7 Right Not to be Subject to Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you. Exceptions apply when the decision is:

• Necessary for a contract between you and us
• Authorized by law
• Based on your explicit consent

We do not currently use automated decision-making that produces legal effects on our visitors.

3. How We Process Your Data

We process personal data based on the following legal grounds:

4. How to Withdraw Consent

If we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4.1 Withdrawing Cookie Consent

You can withdraw or modify your cookie consent at any time by:

• Clicking the cookie settings option in our cookie banner
• Clearing your browser cookies and revisiting our site
• Using your browser settings to block or delete cookies
• Contacting us at support@pulsegyf.com

4.2 Withdrawing Newsletter Consent

You can unsubscribe from our newsletter at any time by:

• Clicking the unsubscribe link in any newsletter email
• Contacting us at support@pulsegyf.com

4.3 Withdrawing Other Consent

For any other consent you have provided, contact us at support@pulsegyf.com with your request.

5. How to Manage Cookies

We use cookies on our website. You can manage your cookie preferences in several ways:

5.1 Through Our Cookie Banner

When you first visit our website, you will see a cookie consent banner. You can:

• Accept all cookies
• Reject non-essential cookies
• Manage your preferences to select specific cookie categories

5.2 Through Browser Settings

Most web browsers allow you to control cookies through their settings. You can:

• View cookies stored on your device
• Delete all or specific cookies
• Block all or third-party cookies
• Set preferences for specific websites

Please note that blocking all cookies may affect website functionality.

5.3 Cookie Types We Use

• Essential Cookies: Required for basic website functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site. Require your consent.
• Marketing Cookies: Used for advertising and tracking. Require your consent.

6. How to Exercise Your Rights

To exercise any of your GDPR rights, you can contact us using the following methods:

6.1 Information We Need

To process your request, please provide:

• Your full name
• Your email address (used on our website)
• The specific right you wish to exercise
• Any relevant details to help us locate your data
• Proof of identity (for security purposes)

6.2 Response Time

We will respond to your request within 30 days. If your request is complex or we receive many requests, we may extend this period by up to two additional months. We will inform you of any extension within the initial 30-day period.

6.3 Fees

We provide the first copy of your data free of charge. For additional copies, we may charge a reasonable fee based on administrative costs. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

7. International Data Transfers

As we are based in Canada, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data.

If we transfer data to other countries, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules
• Adequacy decisions by the European Commission

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS
• Secure data storage with access controls
• Regular security assessments
• Staff training on data protection
• Incident response procedures

9. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours
• Notify you without undue delay if the breach is likely to result in a high risk to your rights
• Document the breach, its effects, and remedial actions taken

10. Right to Lodge a Complaint

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. In Canada, you can contact:

If you are in the European Union, you can also contact your local data protection authority.

11. Children's Data

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this GDPR Rights page from time to time. We will notify you of any changes by posting the new page on our website and updating the "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about your GDPR rights or how we handle your personal data, please contact us:

We are committed to protecting your privacy and will respond to all inquiries within 30 days.