facebook instagram [#ffffff]Created with Sketch. youtube [#ffffff]Created with Sketch.
Se connecter

Privacy Policy

  1. Data Controller

The website Canada Process is owned and operated by:

Global MA
 Company Registration Number:  206499220

 Registered Address:  Chervena stena str, flat 12, entr. B, Sofia, 1421, Bulgaria.

Global MA acts as the Data Controller within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR), as it determines the purposes and means of processing personal data.

 

  1. Scope of This Policy

This Privacy Policy applies to:

  • Visitors to the website
  • Individuals submitting inquiries or lead forms
  • Clients and prospective clients of immigration-related services
  • Individuals communicating with us via email, telephone, or online platforms

     

 

  1. Categories of Personal Data Processed

We may process the following categories of personal data:

  • Identification Data: full name, nationality, country of residence, and information relating to family members (including spouse and children)
  • Contact Data: email address and telephone number
  • Professional and Background Data: occupation, education, and immigration-related information voluntarily provided
  • Communication Data: emails, call recordings, and chat messages
  • Technical Data: IP address, browser type, device information
  • Marketing and Usage Data: interaction with emails, advertisements, and website content

     

 

  1. Purposes of Processing and Legal Bases

Personal data is processed only where a lawful basis exists in accordance with Article 6 of the GDPR.

Purpose

Data Categories

Legal Basis

Responding to inquiries and lead forms

Identification, Contact

Pre-contractual steps (Art. 6(1)(b))

Providing immigration-related services

Identification, Professional

Performance of a contract

Customer support and communications

Communication

Legitimate interest (Art. 6(1)(f))

Call recording for quality and compliance

Communication

Legitimate interest with notice

Marketing communications

Contact, Usage

Consent (Art. 6(1)(a))

Website analytics and optimization

Technical

Consent (Art. 6(1)(a))

 

  1. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to ensure proper website functionality and to improve user experience.

Non-essential cookies, including analytics and advertising cookies, are activated only after explicit user consent through a cookie management platform.

Users may manage or withdraw consent at any time.

Further information is available in our Cookie Policy.

 

  1. Marketing Communications

Marketing communications are sent only where:

  • Explicit consent has been provided; or
  • Another lawful basis applies and is permitted by applicable law

Recipients may unsubscribe at any time using the link included in each communication or by contacting us directly.

 

  1. Data Sharing and Recipients

Personal data may be shared with the following categories of recipients:

  • Authorized immigration consultants or legal professionals
  • CRM, email, analytics, and IT service providers
  • Payment processing providers
  • Regulatory or public authorities where required by law

All recipients are bound by contractual obligations consistent with GDPR requirements.

 

  1. International Data Transfers

Where personal data is transferred outside the European Union or European Economic Area (EU/EEA), such transfers are safeguarded by appropriate mechanisms, including:

  • Standard Contractual Clauses (SCCs); or
  • Other lawful transfer mechanisms recognized under GDPR

Copies of applicable safeguards may be requested.

 

  1. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it is processed.

Data Type

Retention Period

Unconverted leads

Up to 24 months

Active clients

Duration of the engagement

Legal and accounting records

As required by applicable law

Call recordings

30 to 180 days

Upon expiry of the retention period, data is securely deleted or anonymized.

 

  1. Data Subject Rights

Data subjects have the following rights under the GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to withdraw consent at any time

Requests may be submitted to [email protected]

 

  1. Automated Decision-Making and Profiling

We do not carry out automated decision-making, including profiling, that produces legal effects or similarly significant effects on individuals.

Any marketing profiling activities are subject to explicit consent.

 

  1. Call Recording Notice

Telephone calls may be recorded for quality assurance, compliance, and training purposes.

Callers are informed at the beginning of the call and may object where legally applicable.

 

  1. Security Measures

Appropriate technical and organizational measures are implemented to protect personal data, including access controls, encryption, secure storage, and confidentiality obligations.

 

  1. Supervisory Authority

Data subjects have the right to lodge a complaint with their local supervisory authority or with:

Commission for Personal Data Protection (Bulgaria)
 https://www.cpdp.bg

 

  1. Changes to This Policy

This Privacy Policy may be updated from time to time.
 The most current version will always be published on this website.

 

  1. Contact

Privacy Officer
Global MA OOD
 Email: legal@canadaprocess.org