We respect your privacy and are committed to protecting it through our compliance with this privacy policy ("Policy"). This Policy describes the types of information we may collect from you or that you may provide ("Personal Information") on the geminicanadaltd.ca website ("Website" or "Service") and any of its related products and services (collectively, "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that Personal Information. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update it.

This Policy is a legally binding agreement between you ("User", "you" or "your") and Gemini Advertising Ltd. (doing business as "Gemini Advertising Ltd.", "we", "us" or "our"). Suppose you are entering into this agreement on behalf of a business or other legal entity. In that case, you represent that you have the authority to bind such entity to this agreement, in which case the terms "User", "you" or "your" shall refer to such entity. If you do not have such authority, or if you do not agree with the terms of this agreement, you must not accept this agreement and may not access and use the Website and Services. By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies we do not own or control or individuals we do not employ or manage.

Our servers automatically log information sent by your browser as soon as you open the website. This information could include the IP address of your device, the type and version of your browser, the operating system, your preferred language, the webpage you were viewing prior to accessing the Website and Services, the pages you visit on the Website and Services, the duration of time spent on those pages, the information you search for on the Website, access times and dates, and other statistics.

Only potential incidents of misuse and statistical data on the use and traffic of the Website and Services are established using the automatically obtained information. No alternative method of aggregating this statistical data would allow any specific user of the system to be identified.

We do not intentionally gather any Personal Information from minors who are younger than eighteen years old. Please refrain from submitting any personal information through the website and services if you are under the age of 18. Please contact us to request that we remove a child's personal information from our services if you have cause to suspect that a child under the age of 18 has supplied it to us via the website and services.

In addition to helping to enforce this Policy by advising their children never to submit Personal Information through the Website and Services without consent, we encourage parents and legal guardians to keep an eye on their kids' Internet usage.

We further request that all parents and legal guardians responsible for the upbringing of minors adopt the appropriate safety measures to guarantee that their kids understand the importance of never disclosing personal information online without consent.

When handling Personal Information, we operate under the GDPR as both a data controller and a data processor, unless we have a data processing agreement with you, in which case you would be the data controller and we would be the data processor.

Moreover, our involvement may change based on the particular circumstances surrounding the personal information. When we request that you provide your Personal Information, we do so as a data controller to enable your access to and use of the Website and Services. Under such circumstances, we are a data controller since we choose how and why to treat personal data and we abide by the GDPR's requirements for data controllers.

When you provide Personal Information through the Website and Services, we function as a data processor. The given personal information is not our property, nor do we have any influence over it; we merely process it in compliance with your requests. According to the GDPR, the User who provides the Personal Information in these situations is the data controller.

We might need to gather and use specific Personal Information in order to fulfil a legal requirement or to enable you to access the Website and Services. We might not be able to provide you the goods or services you've asked for if you don't provide us the information we ask for. We may use any information we gather from you for the following purposes:

• Provide goods or services.
• Improve products and services.
• Distribute advertisements and marketing materials.
• Provide updates about goods and services.
• Answer questions and assist.
• Ask for user opinions.
• Enhance the experience for users.
• Post endorsements from clients.
• Distribute advertising that is specifically targeted.
• Manage and complete orders.
• Run competitions and prize draws.
• Implement policies and terms and conditions.
• Guard against misuse and malevolent users.
• Attend to court orders and avert injury.
• Manage and oversee the Services and Website.

Your location in the world, how you use the website and services, and whether any of the following scenarios apply will all determine how your personal information is processed. (i) you have provided consent for one or more defined objectives; this does not, however, apply in situations where the processing of personal data is governed by the Canada Consumer Privacy Act; (ii) information must be provided to fulfil any pre-contractual obligations or to carry out an agreement with you; (iii) processing is required in order to comply with a legal requirement that applies to you; (iv) processing is associated with a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) Processing is required to further the legitimate interests that we or a third party are pursuing. Additionally, to provide you with better service and to update and improve our website and services, we might merge or aggregate certain of your personal information.

As stated in the GDPR, we gather and process your Personal Information with the user's consent as our legal basis.

It should be noted that in certain cases, we may not need to rely on consent or any of the aforementioned legal basis to handle information until you object to it by choosing not to have it processed. In any event, we will be pleased to provide more details on the precise legal basis for the processing, including whether or not a contract, statute, or other necessity calls for the disclosure of Personal Information to enter into a relationship.

Our affiliates, contracted companies, and service providers (collectively, "Service Providers") that we rely on to help with the operation of the Website and Services available to you and whose privacy policies are consistent with ours or who agree to abide by our policies concerning Personal Information may receive your information, depending on the Services requested or as necessary to complete any transaction or provide any Service you have requested. We promise not to disclose any personally identifying information to outside parties or to companies with whom we are not involved.

Your information may only be used or disclosed by Service Providers in order to carry out services on our behalf or to meet legal obligations. The information provided to Service Providers is only necessary for them to carry out their assigned tasks; we do not grant them permission to use or disclose any of the data for other reasons, including marketing.

If required or authorised by law, such as to comply with a subpoena or similar legal process, or when we genuinely believe that disclosure is required to defend our rights, safeguard your safety or the safety of others, look into fraud, or answer to a government request, we may also disclose any Personal Information that we gather, use, or receive.

Your Personal Information will probably be one of the assets transferred if we go through a corporate change, such as a merger, acquisition by another company, or sale of all or a portion of its assets.

Your Personal Information will be kept and used by us for as long as is required to complete legal requirements, until we, our affiliates, and our partners fulfill our duties, enforce our agreements, settle disputes, and until a longer retention period is mandated or authorised by law.

After you update or remove your personal information, we may use any aggregated data derived from or including it, but not in a way that would allow us to personally identify you. Personal Information will be destroyed after the retention period has passed. Consequently, once the retention term has passed, it is not possible to enforce the rights to access, erasure, correction, and data portability.

Data transfers may require moving and keeping your information in a nation other than your own, such as Canada, depending on where you are. Only with your express consent or in the circumstances allowed by the GDPR will your personal information be transferred to nations outside the European Union and handled in your best interest.

You have a right to be informed about the legal foundation for information transfers to nations outside of the European Union, to any international organisation established by two or more nations, or governed by public international law, as well as the security precautions we have taken to protect your data. If a transfer of this kind occurs, you can learn more about it by reading the pertinent portions of this Policy or contacting us using the details listed in the contact section.

We strive to take reasonable measures to enable you to correct, modify, delete, or limit the use of your Personal Information if you are a resident of the European Economic Area ("EEA"). Please get in touch with us if you would want to know what Personal Information we have about you and if you would like it deleted from our systems. You may be entitled to the following data protection rights under specific conditions:

• If you have previously consented to the processing of your personal information, you have the option to revoke such permission. You have the right to revoke your consent at any time if it is the legal basis for our processing of your personal information. The legality of the processing done prior to the withdrawal is unaffected by the withdrawal.
• You are entitled to know whether we are processing your personal information, to be notified of specific processing activities, and to get a copy of the personal information that is being processed.
• You are entitled to request updates or corrections to your information and to confirm that it is accurate. Additionally, you have the right to ask that any deficient Personal Information be filled in by us.
• If the processing of your information is done for a reason other than permission, you have the right to object to the processing. You may object to the processing of your personal information when it is done for the public interest, to further our legitimate interests, or to exercise official authority that has been granted to us. To support your objection, please provide specific details about your situation.

You should be aware that, in the event that your data is used for direct marketing, you have the right to object to such processing at any moment and without having to give a reason. You can review the pertinent portions of this Policy to find out if we are using your personal information for direct marketing.

• In some cases, you have the option to limit how your personal information is processed. These situations include: you contest the accuracy of your personal information, in which case we must confirm its accuracy; the processing is illegal, but you refuse to have your personal information deleted and instead ask that its use be restricted; You have objected to processing while we investigate whether our legitimate grounds outweigh yours. We no longer need your Personal Information for processing purposes, but you need it to establish, exercise, or defend your legal claims. When the processing of Personal Information has been restricted, such information will be marked as such. Processing of such information will only occur with your consent, for the establishment, defense, or exercise of legal claims, for the preservation of the rights of another natural or legal person, or for purposes of significant public interest, except storage.
• In some situations, you have the right to request that we delete your personal information. These situations include the following: the processing is for direct marketing purposes; the personal data has been processed unlawfully; you have objected to the processing under certain provisions of applicable data protection law; the personal information is no longer necessary for the purposes for which it was collected or otherwise processed; and you have withdrawn consent to consent-based processing. The right to be erased is not unlimited, though, and there are some situations in which processing is required. These include situations in which processing is required to fulfill legal obligations, exercise the right to freedom of expression and information, or establish, pursue, or defend legal claims.
• You have the right to obtain your personally identifiable information from us in an organised, widely used, and machine-readable format. You also have the right, if technically possible, to have your information transferred to another controller without our intervention, so long as doing so does not negatively impact the rights and liberties of others.
• Concerning our acquisition and use of your personal information, you have the right to file a complaint with a data protection body. You have the right to file a complaint with your local data protection authority if you're not happy with how your complaint was handled by us directly. Please get in touch with your local EEA data protection authorities for additional details. This clause will apply if your Personal Information is processed automatically and is done so under your agreement, a contract you are a party to or pre-contractual requirements.

Please use the contact information in this document to send us any requests to exercise your rights. Please be aware that before answering such enquiries, we can ask you to prove your identity. In order for us to confirm that you are who you say you are or that you are the legitimate representative of the person you are claiming to be, your request must contain enough information. If an authorised representative submits a request on your behalf, we may ask for proof that you have given the representative a power of attorney or that the representative has other legal right to make requests on your behalf.

You must provide enough information so that we can comprehend the request and reply to it appropriately. If we don't first confirm that the Personal Information belongs to you and that you have the right to make such a request, we won't be able to comply with your request or give you the Personal Information.