GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

Cascade Cypress is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR). This page outlines how we handle personal data for individuals located in the European Economic Area (EEA).

Data Controller

Cascade Cypress acts as the data controller for personal data collected through our website and services. Our contact information is:

Cascade Cypress
742 NW Everett Street, Suite 205
Portland, OR 97209, United States
Email: [email protected]

Lawful Basis for Processing

We process personal data under one or more of the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legitimate Interest: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests
• Legal Obligation: Processing is necessary for us to comply with the law

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request that we correct inaccurate or incomplete data
• Right to Erasure: You can request that we delete your personal data in certain circumstances
• Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances
• Right to Data Portability: You can request that we transfer your data to another organization or directly to you
• Right to Object: You can object to our processing of your personal data in certain circumstances
• Rights Related to Automated Decision-Making: You have rights related to automated decision-making and profiling

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

International Data Transfers

Your personal data may be transferred to and processed in the United States, where our servers are located. When we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your personal data.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for processing, and legal requirements.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit and at rest, regular security assessments, and access controls.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, will inform affected individuals without undue delay.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.