3. WHAT LEGAL BASES DO WE RELY ON TO PROCESSYOUR INFORMATION?In Short: We only process your personal information when we believe it is necessaryand we have a valid legal reason (i.e., legal basis) to do so under applicable law, likewith your consent, to comply with laws, to provide you with services to enter into orfulfill our contractual obligations, to protect your rights, or to fulfill our legitimatebusiness interests.If you are located in the EU or UK, this section applies to you.The General Data Protection Regulation (GDPR) and UK GDPR require us to explainthe valid legal bases we rely on in order to process your personal information. Assuch, we may rely on the following legal bases to process your personal information:
Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You canwithdraw your consent at any time. Learn more about withdrawing yourconsent.
Legal Obligations. We may process your information where we believe it isnecessary for compliance with our legal obligations, such as to cooperate witha law enforcement body or regulatory agency, exercise or defend our legalrights, or disclose your information as evidence in litigation in which we areinvolved.
Vital Interests. We may process your information where we believe it isnecessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
If you are located in Canada, this section applies to you.We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or insituations where your permission can be inferred (i.e., implied consent). Youcan withdraw your consent at any time.In some exceptional cases, we may be legally permitted under applicable law toprocess your information without your consent, including, for example:
- If collection is clearly in the interests of an individual and consent cannot beobtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary toassess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with nextof kin
- If we have reasonable grounds to believe an individual has been, is, or may bevictim of financial abuse
- If it is reasonable to expect collection and use with consent would compromisethe availability or the accuracy of the information and the collection isreasonable for purposes related to investigating a breach of an agreement or acontravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, orrules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which theinformation was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations