A · Who is accountable
The controller
Global Privacy Rights — controller https://globalprivacyrights.org (did:web:globalprivacyrights.org), jurisdiction Canada, represented by the Digital Privacy Officer. The full Controller Identification Record is public: cir.json.
B · What for, and under what authority
Purposes & lawful basis
Rights depend on the lawful basis, so the basis comes first. Overall basis: consent. Per purpose:
| Purpose | Data | Lawful basis |
|---|---|---|
| Maintain session continuity | session_id | Legitimate interest |
| Understand usage patterns | ip_address | Legitimate interest |
C · Your rights
What you can exercise
| Right | Applies under |
|---|---|
| Access | consent + legitimate interest |
| Rectification | consent + legitimate interest |
| Erasure | consent |
| Restriction of processing | consent + legitimate interest |
| Data portability | consent |
| Objectbefore processing, no ID needed | legitimate interest |
| Withdraw consent (as easy as giving it) | consent |
D · How to exercise them
The mechanism
Email rights@globalprivacyrights.org. Include: which right, the relevant context, and how you'd like to receive the response.
We acknowledge within 7 days and respond substantively within 30 days. You do not need to identify yourself to view the notice or CIR, or to object before processing.
E · The evidence layer
Inspect everything
This is evidence-based transparency: the records that back the above are public and machine-readable.