GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
Canadian Barber House is committed to compliance with the General Data Protection Regulation (GDPR) for all individuals located within the European Economic Area. This page outlines how we protect your rights under this regulation.
Data Controller
Canadian Barber House acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection laws.
Lawful Basis for Processing
We process your personal data based on the following lawful grounds:
- Consent: When you have given explicit consent for specific purposes, such as receiving communications.
- Contract: When processing is necessary for the performance of a contract with you, such as providing our services.
- Legal Obligation: When we must process data to comply with legal requirements.
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights.
Your Rights Under GDPR
Under the GDPR, you have the following rights:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
International Data Transfers
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in high risk to your rights, we will also notify you directly.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this period by two additional months, but we will inform you of any such extension.
Contact Information
For GDPR-related inquiries or to exercise your rights:
Email: [email protected]
Address: 742 King Street West, Toronto, ON M5V 1N6, Canada
Supervisory Authority
If you are not satisfied with how we handle your data or your request, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.