Our Commitment to GDPR
Celtic Feast is committed to compliance with the General Data Protection Regulation (GDPR) and protecting the privacy rights of all individuals whose data we process. This page explains how we meet our obligations under GDPR.
Data Controller Information
Celtic Feast acts as the data controller for personal data collected through this website and our restaurant services.
Contact Details:
Celtic Feast
42 Grafton Street
Dublin 2, D02 VF65
Ireland
Email: [email protected]
Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any personal data that is inaccurate or complete any data that is incomplete.
Right to Erasure
Also known as the "right to be forgotten", you can request the deletion of your personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Erasure is required by law
Right to Restrict Processing
You can request that we limit how we use your personal data while we verify the accuracy of your data, assess an objection you have raised, or where processing is unlawful but you do not want erasure.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently use automated decision-making.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: For marketing communications and newsletter subscriptions
- Contractual Necessity: For processing reservations and service requests
- Legitimate Interests: For improving our services and website functionality
- Legal Obligation: For compliance with applicable laws and regulations
Data Processing Activities
We process personal data for the following purposes:
- Reservation management and confirmation
- Customer service and communication
- Website analytics and improvement
- Marketing (where consent is given)
- Legal and regulatory compliance
Data Retention Periods
We retain personal data only for as long as necessary:
- Reservation data: 24 months after the booking date
- Marketing consent records: Until consent is withdrawn
- Website analytics: 26 months
- Financial records: As required by Irish tax law (typically 6 years)
International Transfers
We primarily process data within the European Economic Area. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Security Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
Data Breach Procedures
In the event of a personal data breach, we will:
- Notify the Data Protection Commission within 72 hours where feasible
- Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms
- Document all breaches and our response
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within one month, though this may be extended by two months for complex requests.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.