GDPR Compliance

Introduction

NIPPRO Elite Recruitment ("we", "our", "us", or the "Business"), a sole proprietorship registered in Alberta, Canada, is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR) when applicable to our operations involving EU data subjects.

While we primarily operate under Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA), we recognize that we may process personal data of individuals located in the European Economic Area (EEA) and therefore comply with GDPR principles where applicable.

Scope of GDPR Compliance

Our GDPR compliance applies when we:

• Offer recruitment services to individuals located in the EEA
• Monitor the behavior of individuals located in the EEA
• Process personal data of EEA residents as part of our international recruitment services

Data Protection Principles

In accordance with GDPR, we process personal data following these principles:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and transparently.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
• Data minimization: We limit data collection to what is necessary for our purposes.
• Accuracy: We take reasonable steps to ensure personal data is accurate and up-to-date.
• Storage limitation: We retain data only as long as necessary for our stated purposes.
• Integrity and confidentiality: We implement appropriate security measures to protect personal data.
• Accountability: We take responsibility for complying with these principles.

Legal Basis for Processing

We process personal data of EEA residents under one or more of the following legal bases:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose.
• Contract: When processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract.
• Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
• Legal obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

Data Subject Rights

Under GDPR, EEA residents have the following rights regarding their personal data:

• Right to information: You have the right to be informed about how we collect and use your personal data.
• Right of access: You have the right to request copies of your personal data.
• Right to rectification: You have the right to request that we correct inaccurate personal data.
• Right to erasure: You have the right to request that we delete your personal data in certain circumstances.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: You have the right to request that we transfer your personal data to another organization or directly to you.
• Right to object: You have the right to object to the processing of your personal data in certain circumstances.
• Rights related to automated decision-making and profiling: You have rights related to automated decision-making and profiling.

International Data Transfers

As a Canadian sole proprietorship based in Alberta, we primarily store and process data in Canada, which has been recognized by the European Commission as providing adequate protection for personal data. However, when we transfer personal data outside of the EEA to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules where applicable
• Explicit consent from the data subject for the proposed transfer after being informed of the possible risks

Data Protection Officer

While not legally required for our business under GDPR, we have designated a Data Protection Contact to oversee our data protection strategy and implementation to ensure compliance with GDPR requirements.

For any GDPR-related inquiries, please contact:

Data Protection Contact
NIPPRO Elite Recruitment
Email: privacy@nipproelite.com
Phone: +1 (555) 123-4567

Data Breach Notification

In the event of a personal data breach affecting EEA residents, we will:

• Notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.
• Notify affected individuals without undue delay when a breach is likely to result in a high risk to their rights and freedoms.
• Document all breaches, including the facts relating to the breach, its effects, and the remedial action taken.

Compliance with Canadian Privacy Laws

As a sole proprietorship based in Alberta, Canada, we primarily operate under and comply with:

• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Alberta's Personal Information Protection Act (PIPA)
• Other applicable provincial privacy legislation when operating in other Canadian provinces

Our GDPR compliance measures complement our compliance with Canadian privacy laws, and we strive to meet the highest standards of data protection across all jurisdictions in which we operate.

Updates to This Policy

We may update this GDPR Compliance statement from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on our website and, where appropriate, contacting you directly.

Contact Us

If you have any questions about our GDPR compliance or how we handle your personal data, please contact us at:

NIPPRO Elite Recruitment
123 Bay Street, Suite 1500
Toronto, ON M5J 2T3
Canada
Email: privacy@nipproelite.com
Phone: +1 (555) 123-4567