Privacy rights in other jurisdictions

The EU, UK, US, Latin American and Asian regimes each have their own page. This one covers four further countries whose laws grant rights that do not map exactly onto the GDPR.

Wherever you are, the same underlying commitments apply: data is stored in the European Union, we sell nothing, and we run no advertising or analytics trackers.

The Personal Information Protection and Electronic Documents Act applies to personal information handled in the course of commercial activity. Under it you may ask for:

• Access to the personal information we hold about you, and an account of how it has been used and to whom it has been disclosed.
• Correction of information that is inaccurate or incomplete.
• Withdrawal of consent, subject to legal and contractual restrictions.
• An explanation of the purposes for which information was collected.

Complaints go to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Where a breach creates a real risk of significant harm, PIPEDA requires us to report it to the Commissioner and notify affected individuals.

If you are in Quebec, Law 25 gives you additional rights, including data portability and the right not to be subject to a decision based exclusively on automated processing. We make no such decisions.

The revised Federal Act on Data Protection has applied since 1 September 2023. It grants you:

• The right to information about the personal data processed about you (Art. 25).
• The right to have inaccurate data corrected (Art. 32).
• The right to the release or transfer of your data in a commonly used electronic format (Art. 28).
• The right to object to processing and to request deletion.

The supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch. Switzerland and the European Union recognise one another as providing adequate protection, so storing Swiss data in Ireland requires no additional safeguard.

The Australian Privacy Principles govern how personal information is handled. The ones you are most likely to rely on are:

• APP 12 — access to the personal information we hold about you.
• APP 13 — correction of that information where it is inaccurate, out of date or misleading.
• APP 8 — conditions on disclosing personal information to overseas recipients.
• APP 1 — an openly available policy describing how information is managed.

Complaints go to the Office of the Australian Information Commissioner at oaic.gov.au. Eligible data breaches are reportable to the OAIC and to affected individuals under the Notifiable Data Breaches scheme.

Information Privacy Principle 6 gives you the right to access personal information we hold about you, and IPP 7 the right to request correction. Complaints go to the Office of the Privacy Commissioner at privacy.org.nz. Principle 12 governs disclosure outside New Zealand, which our storage in the European Union is subject to.

Data is stored in the European Union (Ireland). For anyone outside the EEA that is a cross-border transfer, and the full list of who processes what, and where, is on the Sub-processors page.

Submit a request from the Privacy and data screen in your account, or write to privacy@buildinghost.eu. Exercising these rights is free, and we may need to verify your identity first.