1. General Data Protection Regulation (GDPR) Compliance
Premier Food Value is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR).
2. Lawful Basis for Processing
We process your personal data based on the following lawful bases:
- Contract: Processing necessary to fulfill our service contract with you
- Legitimate Interest: For business operations, fraud prevention, and service improvement
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with applicable laws and regulations
3. Your Rights Under GDPR
Right of Access (Article 15)
You have the right to obtain confirmation that we process your personal data and access that data.
Right to Rectification (Article 16)
You have the right to correct inaccurate or incomplete personal data.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data under certain circumstances.
Right to Restrict Processing (Article 18)
You have the right to limit how we process your personal data in specific situations.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used format.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing.
Rights Related to Automated Decision-making (Article 22)
You have rights regarding automated decision-making, including profiling.
4. Data Protection Officer
Our Data Protection Officer oversees GDPR compliance:
Email: [email protected]
Phone: +1 (212) 555-0187
Address: 425 Park Avenue, New York, NY 10022
5. International Data Transfers
When we transfer personal data outside the EEA, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (BCRs)
- Certification schemes
6. Data Retention Periods
- Account Data: Retained for the duration of your account plus 3 years
- Transaction Data: Retained for 7 years for legal compliance
- Marketing Data: Retained until consent is withdrawn
- Website Analytics: Anonymized after 26 months
7. Data Breach Procedures
In case of a personal data breach, we will:
- Notify supervisory authorities within 72 hours
- Inform affected individuals if high risk to rights and freedoms
- Document the breach and our response
- Implement measures to prevent future breaches
8. Privacy by Design and Default
We implement privacy by design principles by:
- Data minimization - collecting only necessary data
- Purpose limitation - using data only for specified purposes
- Storage limitation - retaining data only as long as necessary
- Security safeguards - implementing appropriate technical measures
9. Exercising Your Rights
To exercise your GDPR rights, contact us at:
Email: [email protected]
Phone: +1 (212) 555-0187
We will respond within 30 days of receiving your request.
10. Supervisory Authority
You have the right to lodge a complaint with your local supervisory authority if you believe we have violated GDPR requirements.
