GDPR Compliance

Introduction

While Circerifil Grill & Steakhouse is based in Canada, we respect the data protection rights of all individuals, including those in the European Union under the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR principles when processing personal data of EU residents.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through our forms and agree to be contacted
• Contract Performance: To fulfill reservation requests and service agreements
• Legitimate Interests: To improve our services and maintain business operations
• Legal Obligations: To comply with applicable laws and regulations

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (right to be forgotten)
• Right to Restriction: Request limitation on how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Data Collection and Use

We collect only the personal data necessary to provide our services:

• Contact information for reservation coordination
• Service preferences to fulfill your requests
• Communication history to maintain service quality

We do not process sensitive personal data categories such as health information, racial origin, or political opinions.

Data Storage and Security

Your personal data is stored securely using industry-standard encryption and access controls. We retain data only as long as necessary for the purposes outlined or as required by law. Data is stored on servers located in Canada with appropriate security measures in place.

International Data Transfers

As we are based in Canada, any personal data you provide will be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate data protection. We ensure appropriate safeguards are in place for any further transfers.

Cookies and Tracking

We use cookies in accordance with GDPR requirements. Our cookie banner allows you to accept or reject non-essential cookies. Essential cookies necessary for website functionality may be used without consent. For detailed information, see our Cookies Policy.

Third-Party Data Processors

We work with limited third-party service providers who process data on our behalf under strict data processing agreements that comply with GDPR requirements. These processors are carefully vetted and contractually obligated to protect your data.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours and inform affected individuals without undue delay, as required by GDPR.

Supervisory Authority

EU residents have the right to lodge a complaint with their local data protection authority if they believe their data protection rights have been violated. You can find your local authority through the European Data Protection Board website.

Data Protection Officer

For questions or requests related to your GDPR rights, please contact us at:

Email: [email protected]
Address: 1847 Harborview Lane, Vancouver, British Columbia V6B 2K8, Canada

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the information above. We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated prominently on our website.