GDPR Compliance Information

Last updated: August 17, 2026

Data Controller

grand-crane is the data controller responsible for your personal information. We are committed to protecting your privacy and complying with applicable data protection regulations.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: to provide the services you request
• Legitimate interests: to improve our services and communicate with you
• Consent: where you have explicitly agreed to data processing

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access: request copies of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data
• Right to restrict processing: request limitation of data processing
• Right to data portability: receive your data in a structured format
• Right to object: object to processing of your personal data
• Rights related to automated decision-making: we do not use automated decision-making

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

International Data Transfers

Your personal data is processed and stored within Canada. We do not transfer personal data outside of Canada without appropriate safeguards in place.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.