Our Commitment to GDPR
Frosty Ibis Barber Shop is committed to protecting the privacy and personal data of all individuals, including those protected by the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights under this regulation.
Data Controller
Frosty Ibis Barber Shop acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 245 Queen Street West, Toronto, ON M5V 1Z4, Canada
Lawful Basis for Processing
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
- Consent: When you submit a form or agree to cookies, you provide explicit consent for us to process your data for the stated purpose.
- Legitimate Interests: We may process data when it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.
- Legal Obligation: We may process data when required to comply with legal requirements.
Your Rights Under GDPR
If you are an individual in the European Economic Area (EEA), you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you.
Right to Erasure
Also known as the "right to be forgotten," you can request that we delete your personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request. We will respond within one month, or inform you if we need additional time (up to two additional months for complex requests).
Data Transfers
As we are based in Canada, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing adequate protection for personal data. We ensure appropriate safeguards are in place for any international data transfers.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary based on the type of data and our legal obligations. When data is no longer needed, it is securely deleted or anonymized.
Data Breach Notification
In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and will inform the relevant supervisory authority within 72 hours where feasible.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
Changes to This Policy
We may update this GDPR information from time to time. Any changes will be posted on this page with a revised date.