GDPR Information

Our Commitment to Data Protection

While primarily operating in Canada, we respect the data protection rights of all individuals, including those protected under the General Data Protection Regulation (GDPR). This page outlines how we honor these principles.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Contract Performance: Processing necessary to fulfill our service agreements with you
• Legitimate Interests: Processing required to operate our business, improve services, and prevent fraud
• Legal Obligation: Processing required to comply with applicable laws
• Consent: Processing based on your explicit permission, which you may withdraw at any time

Your Rights Under Data Protection Law

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when you object to processing.

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant consequences. We do not engage in such automated decision-making.

How to Exercise Your Rights

To exercise any of these rights, contact us using the information below. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

Email: [email protected]

Postal Address: 425 Wellington Street West, Toronto, Ontario M5V 1E3, Canada

Data Transfers

We primarily operate within Canada. If we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Data Security Measures

We implement technical and organizational measures to protect personal data against unauthorized access, loss, or alteration:

• Encrypted data transmission
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection practices
• Secure data storage and backup systems

Data Retention

We retain personal data only for as long as necessary:

• Reservation and booking data: retained for 3 years after the service date
• Marketing communications data: retained until you withdraw consent
• Financial records: retained as required by applicable tax and accounting laws
• Website analytics: retained for 26 months

Third-Party Processors

We work with carefully selected service providers who process data on our behalf. These processors are contractually bound to protect your data and use it only for specified purposes:

• Email service providers
• Payment processors
• Website hosting services
• Analytics providers

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals without undue delay and, where required, report the breach to relevant supervisory authorities.

Children's Data

Our services are not directed to individuals under 18 years of age. We do not knowingly collect or process personal data from children. If you believe we have collected such data, please contact us immediately.

Supervisory Authority

While we operate primarily under Canadian privacy laws, individuals protected by GDPR have the right to lodge a complaint with their local data protection supervisory authority if they believe their data protection rights have been violated.

Updates to This Information

We may update this GDPR information to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or directly to affected individuals.

Contact Our Data Protection Officer

For questions about data protection or to exercise your rights:

Taste of Canada
425 Wellington Street West
Toronto, Ontario M5V 1E3
Canada

Email: [email protected]