1. Controller

InterGest Canada Inc.
120 Adelaide Street West, Suite 2500, Toronto ON M5H 1T1, Canada
privacy@intergestcanada.com

‍

Under the GDPR we are the “controller”; under the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) we are the “organization.”

‍

2. EU Representative (Art. 27 GDPR)

InterGest Germany GmbH
Strassenbahnring 13, 20251 Hamburg, Germany
eu-privacy@intergestgermany.com

‍

3. Privacy Officer

Because fewer than 20 employees regularly process personal data and we do not process sensitive data on a large scale, we are not obliged to appoint a Data-Protection Officer (Art. 37 GDPR / § 38 BDSG).To satisfy Canadian requirements we have nevertheless designated a Privacy Officer who can be reached at the address in § 1.

‍

4. Cookies, Tracking and Consent Management

• Technically necessary cookies ensure site operation and IT security.
  
  • EU legal basis: Art. 6 (1)(f) GDPR (legitimate interests)
  • Canadian legal basis: legitimate interests (PIPEDA, s. 4.3)
  • Retention: session-based or up to 12 months.
• Optional cookies and trackers (analytics / marketing) are set only after you give consent.
  
  • EU legal basis: Art. 6 (1)(a) GDPR
  • Canadian legal basis: express or implied consent (PIPEDA) and, for e-mail, Canada’s Anti-Spam Legislation (CASL)
  • Retention: until you withdraw consent.
• Consent is managed via a banner delivered by Usercentrics GmbH. You can change your preferences at any time through the “Cookie settings” link in the site footer.
• The optional tools we may load after consent are:
  
  • Google Analytics (IP anonymised) – Google LLC, USA (EU-US Data Privacy Framework DPF + Standard Contractual Clauses SCC)
  • Meta Pixel – Meta Platforms Inc., USA (DPF + SCC)
  • HubSpot Tracking – HubSpot Inc., USA (DPF + SCC)

‍

5. Categories of Data, Purposes, Legal Bases and Retention

• Server log files (IP address, browser information, timestamp):
  
  • Purpose – IT security and error diagnosis.
  • Legal bases – Art. 6 (1)(f) GDPR / legitimate interests under PIPEDA.
  • Retention – 14 days.
• Contact and company details you supply (name, address, e-mail, phone):
  
  • Purpose – responding to enquiries and initiating contracts.
  • Legal bases – Art. 6 (1)(b) and (f) GDPR / contract performance or legitimate interests.
  • Retention – three years after the end of the calendar year of our last interaction.
• Newsletter data (name, e-mail, marketing preferences):
  
  • Purpose – direct e-mail marketing.
  • Legal bases – Art. 6 (1)(a) GDPR / express consent under CASL.
  • Retention – until you withdraw consent.
• KYC / AML documents (identity, corporate records, beneficial-ownership data):
  
  • Purpose – compliance with anti-money-laundering and counter-terrorism-financing laws.
  • Legal bases – Art. 6 (1)(c) GDPR / statutory obligations, e.g. PCMLTFA (Canada).
  • Retention – five years.
• Cookies and tracking identifiers:
  
  • Purpose – analytics and remarketing.
  • Legal basis – Art. 6 (1)(a) GDPR / consent under PIPEDA.
  • Retention – until you withdraw consent.

‍

6. International Data Transfers

• Amazon Web Services (hosting) – USA and Canada
  
  • EU transfer mechanism: EU-US Data Privacy Framework + SCC.
  • Canadian processing governed by PIPEDA-compliant sub-processor agreements.
• HubSpot Inc. (CRM / newsletter) – USA
  
  • Transfer mechanism: DPF + SCC.
• Google LLC and Meta Platforms Inc. (analytics / ads) – USA
  
  • Transfer mechanism: DPF + SCC.
• Licensed InterGest partners (e.g., law firms, financial institutions) in the EU or Canada receive data only when necessary to perform a contract.
  
  • Transfers from the EU to Canada rely on the European Commission’s adequacy decision for organisations subject to PIPEDA.

We never disclose your data to third parties for their own advertising without your consent.

‍

7. Your Rights

Under the GDPR (EU/EEA)

• access (Art. 15)
• rectification (Art. 16)
• erasure (“right to be forgotten”, Art. 17)
• restriction (Art. 18)
• data portability (Art. 20)
• objection (Art. 21)
• withdraw consent at any time

Under PIPEDA (Canada)

• access to your personal information
• correction of incomplete or inaccurate data
• withdraw consent at any time
• complain to the Office of the Privacy Commissioner of Canada (OPC)

Supervisory contacts

• EU lead authority: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany – poststelle@lda.bayern.de
• Canada: Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau QC K1A 1H3 – info@priv.gc.ca

‍

8. Changes

We review this policy at least monthly and update it when legal, technical or organisational changes require. The latest version is always available on our website.

‍

9. Condition of Use

By using our websites or services you accept the terms of this Privacy Policy.

‍

‍

© 2025 InterGest Canada Inc. – All rights reserved.