GDPR Statement
This Statement supplements our Privacy Policy for visitors located in the European Economic Area (EEA) and the United Kingdom, and describes how WicWac Inc. — the company behind the Fieldmarch brand — processes personal data under the EU General Data Protection Regulation (“GDPR”) and the UK GDPR. FIELDMARCH is a brand of WicWac Inc.
Controller: WicWac Inc., WicWac Inc., 1420 – 99 Bank Street, Ottawa, Ontario, Canada K1P 1H4. Preferred contact method: contact@fieldmarch.com. Except where EU or UK law mandatorily applies, this Statement is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.
1. What we process and why
Through the Site we process the personal data described in section 2 of the Privacy Policy (briefing-request details, correspondence, technical logs). Our purposes and legal bases are:
- Responding to your briefing request and preparing for discussions you ask for — steps at your request prior to entering into a contract (Art. 6(1)(b));
- Operating and securing the Site, and following up on professional pre-sales contact — our legitimate interests in running and promoting our business (Art. 6(1)(f)), balanced against your rights;
- Any optional communications requiring consent — your consent (Art. 6(1)(a)), which you may withdraw at any time.
We do not process special categories of personal data through the Site, and we do not carry out automated decision-making or profiling within the meaning of Art. 22.
2. International transfers
We are located in Canada, so your personal data is transferred to and processed in Canada. The European Commission has adopted an adequacy decision recognizing that commercial organizations subject to PIPEDA — including WicWac Inc. — provide an adequate level of protection for personal data (Commission Decision 2002/2/EC, as maintained under the GDPR); the United Kingdom maintains equivalent adequacy regulations for Canada. No further transfer mechanism is therefore required for data we receive through the Site. Where we ever engage a processor outside an adequate jurisdiction, we will use Standard Contractual Clauses or another valid transfer mechanism.
3. Retention
We retain personal data for the periods described in the Privacy Policy — only as long as necessary for the purposes above or as law requires — after which it is deleted or anonymized.
4. Your rights
Subject to the conditions in the GDPR, you have the right to:
- Access your personal data and receive a copy (Art. 15);
- Rectification of inaccurate or incomplete data (Art. 16);
- Erasure (“right to be forgotten”) (Art. 17);
- Restriction of processing (Art. 18);
- Data portability (Art. 20);
- Object to processing based on legitimate interests, including direct marketing (Art. 21);
- Withdraw consent at any time, without affecting prior processing (Art. 7(3)).
To exercise any right, email contact@fieldmarch.com. We respond within one month, extendable as the GDPR permits for complex requests. We may ask you to verify your identity before acting on a request.
5. Security
We apply technical and organizational measures appropriate to the risk, as described in the Privacy Policy — encryption in transit, access controls and authentication of the Resources area. Personal-data breaches are handled in accordance with Arts. 33–34 and PIPEDA’s breach-notification requirements.
6. Complaints
If you believe our processing infringes the GDPR, we would welcome the chance to resolve it first — write to contact@fieldmarch.com. You also have the right to lodge a complaint with the supervisory authority in your EEA member state or with the UK Information Commissioner’s Office, and with the Office of the Privacy Commissioner of Canada.
7. Contact
Data protection inquiries: contact@fieldmarch.com. Postal: WicWac Inc., 1420 – 99 Bank Street, Ottawa, Ontario, Canada K1P 1H4.