GDPR Compliance

Our Commitment to GDPR

Orbit Network Restaurant & Lounge is committed to protecting the privacy and personal data of all visitors to our website, including those located in the European Economic Area (EEA). This page outlines your rights under the General Data Protection Regulation (GDPR) and how we comply with this regulation.

Data Controller

For the purposes of the GDPR, Orbit Network Restaurant & Lounge is the data controller responsible for processing your personal data. Our contact details are:

Orbit Network Restaurant & Lounge
245 King Street West
Toronto, ON M5V 1J5
Canada
Email: [email protected]

Lawful Basis for Processing

We process personal data based on the following lawful grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving communications about your reservation.
• Contract: Where processing is necessary for the performance of a contract with you, such as processing a reservation request.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request that we delete your personal data, subject to certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In certain cases, we may extend this period by two months, in which case we will inform you of the extension and the reasons for it.

We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise any of your other rights.

International Data Transfers

As we are located in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to third parties outside of Canada or the EEA, we ensure appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary depending on the context of the processing and our legal obligations. Reservation-related data is typically retained for two years unless longer retention is required by law.

Automated Decision-Making

We do not use automated decision-making, including profiling, in a way that produces legal effects concerning you or similarly significantly affects you.

Supervisory Authority

If you are located in the EEA and believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so that we may address your concerns directly.

Changes to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.