Our Commitment to GDPR
Rain Mink is committed to protecting the personal data of individuals in the European Union and European Economic Area in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights under this regulation.
Data Controller
Rain Mink acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing personal data.
Contact information for data protection inquiries:
Rain Mink
847 Greenway Boulevard, Suite 204
Portland, OR 97205
United States
Email: [email protected]
Legal Basis for Processing
We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
Consent
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or accepting cookies.
Contract Performance
Where processing is necessary for the performance of a contract with you, such as fulfilling product orders or responding to service requests.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. Our legitimate interests include improving our services, preventing fraud, and ensuring website security.
Legal Obligation
Where processing is necessary to comply with a legal obligation to which we are subject.
Your Rights Under GDPR
If you are located in the EU or EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the contact information provided above. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will notify you.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise your other rights.
Data Transfers
Rain Mink is based in the United States. When we transfer personal data from the EU or EEA to the United States or other countries, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods are determined based on the nature of the data, the purposes of processing, and applicable legal requirements.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Complaints
If you are not satisfied with how we handle your personal data or believe we have not complied with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.
Changes to This Notice
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.