GDPR Compliance

Last Updated: September 7, 2024

Our Commitment to Data Protection

Maple Table Restaurant is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation. This page explains how we comply with GDPR principles when processing personal information of individuals located in the European Economic Area or United Kingdom who interact with our website.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual Necessity: Processing your reservation request requires your name, email, and service selection to fulfill our agreement to provide dining services.
• Legitimate Interest: We have a legitimate interest in maintaining reservation records for operational purposes and improving our service quality.
• Consent: Where required, we obtain explicit consent before processing your data, such as for optional marketing communications.

Data We Collect

When you submit a reservation request, we collect:

• Full name
• Email address
• Selected dining service
• Any additional information you provide in communications with us

We only collect data necessary to process your reservation and provide requested services.

How We Use Your Data

Personal data is used solely for:

• Processing and confirming dining reservations
• Communicating about your reservation details
• Responding to inquiries you send to us
• Maintaining operational records
• Complying with legal obligations

Data Sharing and Transfers

We do not sell or share your personal data with third parties for their marketing purposes. Your information remains confidential and is accessible only to authorized restaurant staff who need it to fulfill your reservation.

Our servers are located in Canada. If you are located in the EEA or UK, this constitutes a transfer of your data outside those regions. We ensure appropriate safeguards are in place for such transfers.

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Restriction: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. Please include sufficient information to identify you and specify which right you wish to exercise. We will respond to your request within one month, though complex requests may require up to three months with advance notification.

We may request additional information to verify your identity before processing certain requests.

Data Retention

We retain personal data only as long as necessary for the purposes outlined above. Reservation data is typically retained for one year after your visit. After this period, data is securely deleted unless longer retention is required by law.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection contact at [email protected].

Right to Lodge a Complaint

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. However, we encourage you to contact us first so we can address your concerns directly.

Changes to This Information

We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.

Contact Information

For any questions about our GDPR compliance or to exercise your data protection rights:

Maple Table Restaurant
285 King Street West
Toronto, Ontario M5V 1J4
Canada
Email: [email protected]