GDPR Compliance
Your data protection rights
Our Commitment to Data Protection
We are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page explains your rights and how we handle your personal information.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: Processing is necessary to fulfill our reservation agreement with you
- Legitimate interests: We have a legitimate business interest in managing reservations and improving our services
- Consent: Where you have given us explicit consent to process your data for specific purposes
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal information we hold about you. This allows you to receive a copy of your data and verify that we are processing it lawfully.
Right to Rectification
You have the right to request correction of any incomplete or inaccurate personal information we hold about you.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used format.
Right to Object
You have the right to object to our processing of your personal data where we are relying on legitimate interests as the legal basis.
Right to Withdraw Consent
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within one month of receipt. In some cases, we may extend this period by two additional months where necessary, taking into account the complexity of your request.
Data Protection Officer
For questions specifically about data protection and GDPR compliance, you may contact our data protection representative at the email address above.
International Data Transfers
Your personal data is processed and stored in Canada. We do not transfer personal data outside of Canada except where necessary to fulfill our services, and only with appropriate safeguards in place.
Automated Decision-Making
We do not use automated decision-making or profiling in any way that produces legal effects concerning you.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority. In Canada, this is the Office of the Privacy Commissioner of Canada.
Updates to This Notice
We may update this GDPR compliance notice from time to time to reflect changes in our practices or legal requirements. The date of the last update will be shown at the top of our Privacy Policy.
Contact Information
For any questions or concerns regarding GDPR compliance or your data protection rights:
Email: [email protected]
Address: 123 Wellington Street, Toronto, ON M5K 1H1, Canada