GDPR Compliance Policy

Last updated: July 31, 2025

1. Introduction

At Disputra, we are committed to protecting the privacy of individuals located in the European Union (EU) and European Economic Area (EEA). This GDPR Policy explains how we process personal data in compliance with the General Data Protection Regulation (EU) 2016/679.

2. Scope

This policy applies to all personal data collected from individuals in the EU/EEA via our website, services, or communications. It supplements our general Privacy Policy.

3. Data Controller

Disputra is the data controller for the personal data you provide.
Company address: 1175 Rue Saint-Antoine O., Montreal, QC H3C 1B3, Canada
Email: support@disputraco.com

4. Types of Data We Process

We may process the following personal data:

• Name, email address, phone number, company (from contact forms)
• Content of communications and inquiries
• IP address, browser type, device information, and cookies
• Details of dispute cases submitted

5. Legal Basis for Processing

We process your data based on:

• Consent – when you submit forms or accept cookies
• Contractual necessity – to provide the services you request
• Legal obligation – to comply with applicable laws
• Legitimate interest – to improve our services and maintain site security

6. Your Rights Under GDPR

You have the following rights:

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (e.g., CNIL, DPC)

7. International Data Transfers

Your data may be transferred to and processed in Canada or other jurisdictions. We ensure such transfers comply with GDPR through standard contractual clauses and secure storage practices.

8. Data Retention

We retain personal data only as long as necessary for the purpose it was collected or as required by law. You may request deletion unless retention is mandated by regulatory obligations.

9. Security Measures

We implement appropriate technical and organizational measures—such as encryption, access controls, and secure servers—to protect personal data against unauthorized access or disclosure.

10. Automated Decision-Making

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

11. Updates to This Policy

We may update this policy periodically. Any changes will be published here with the updated date. Continued use of the site implies acceptance of those changes.

12. Contact for GDPR Inquiries

To exercise your GDPR rights or ask questions, please contact:

Disputra
1175 Rue Saint-Antoine O., Montreal, QC H3C 1B3, Canada
Phone: +1 514 672 34 89
Email: support@disputraco.com