Last Updated: November 5, 2026
This page provides additional information for individuals located in the European Economic Area, United Kingdom, and Switzerland regarding how we process your personal data in compliance with the General Data Protection Regulation and related data protection laws.
For the purposes of data protection law, Prism-dawn is the data controller responsible for your personal information. You can contact us at:
Email: [email protected]
Address: 142 Wellington Street West, Suite 1200, Toronto, ON M5J 1H8, Canada
We process your personal data based on the following legal grounds:
We process your personal information to perform our contractual obligations when you engage our services or to take steps at your request before entering into a contract.
We process certain information based on our legitimate business interests, including:
We carefully balance these interests against your rights and freedoms and only process data where our interests are not overridden by your data protection rights.
Where required by law, we process your personal data based on your freely given, specific, informed, and unambiguous consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We may process your personal data to comply with legal obligations to which we are subject.
Under the GDPR, you have the following rights regarding your personal data:
You have the right to obtain confirmation as to whether we are processing your personal data and, if so, to request access to that data along with information about how it is being processed.
You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.
You have the right to request deletion of your personal data in certain circumstances, including where:
You have the right to request restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not engage in automated decision-making of this nature.
To exercise any of your rights under the GDPR, please contact us at [email protected]. We will respond to your request within one month, though we may extend this period by two additional months where necessary, taking into account the complexity and number of requests.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise your other rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
If you believe that our processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority, particularly in the European Union member state where you reside, work, or where the alleged infringement occurred.
As we are based in Canada, your personal data may be transferred outside the European Economic Area. Canada has been recognized by the European Commission as providing adequate protection for personal data under its adequacy decision.
Where we transfer data to other countries not covered by an adequacy decision, we implement appropriate safeguards such as standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, whether we can achieve those purposes through other means, and applicable legal requirements.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically to stay informed about how we protect your personal data.
If you have questions about our GDPR compliance or wish to exercise your rights, please contact us at:
Email: [email protected]
Address: 142 Wellington Street West, Suite 1200, Toronto, ON M5J 1H8, Canada