We may source, use and otherwise process your personal data in different ways. In all cases we are committed to protecting your personal data. In each of the sections listed below, we describe how we obtain your personal data and how we treat it.

Section 2.1           Individual Customers
Section 2.2           Representatives of our Existing or Prospective Corporate Customers, Business Partners, and Vendors
Section 2.3           Website Visitors
Section 2.4           Job applicants
Section 2.5           Visitors to our premises
Section 2.6           Users of Wi-Fi

2.1 INDIVIDUAL CUSTOMERS

We collect personal data related to individual customers.
A – Sources of personal data
B – Personal data that we collect and process
C – Why do we collect your personal data and what are our lawful bases for it?
D – How long do we keep your personal data?
 A – Sources of personal data
We may obtain your personal data from the following sources:
a) from you directly (over the phone, email, website or paper forms or in person);
b) from GRR’s affiliates, where we have your permission to access it or are allowed to access it based on lawful grounds (see the list in Annex 1);
c) from third party service providers that are assisting us in providing you with a service (for example, partner organisations, such as websites of OpenTable or Book-A-Table); and/or
d) from our systems, such as Wi-Fi, if you have used our internet connection services at our restaurants.

B – Personal data that we collect and process( some Optional)
We may collect the following categories of personal data relating to our existing or prospective individual customers:
a) name;
b) email
c) title
d) personal and/or business email address;
e) home address;
f) home and/or business telephone number;
g) date of birth;
h) credit card details;
i) details of your request, for example, for booking a table in one of our restaurants this will include the date, time, party size, menu selection, table preferences;
j) dietary preferences,
k) voucher or other discount details, if you provide them to us;
l) social occasion information;
m) details and records of your request, complaint or query;
n) details of orders (amount spent, date, time, table number, vouchers or offers used);
o) categorisation of you as a customer based on the information we have about you from various sources (for example, if this is your first experience with us or you are a regular customer); 
p) any feedback you submitted about your experience with us;
q) your marketing preferences.

C – Why do we collect your personal data and what are our lawful bases for it?
  First timers, business partners, and vendors.
A – Sources of personal data
B – Personal data that we collect and process
C – Why do we collect your personal data and what are our lawful bases for it?
D – How long do we keep your personal data?

A – Sources of personal data
We may obtain your personal data from the following sources:
a) from you directly,
b) from a company that employs you, if you are an employee of our existing or prospective customer, business partner, or vendor,
c) from GRR’s affiliates [see the list in Annex 1];
d) during networking events that we have either hosted, or sponsored, or attended; and/or
e) from publicly available sources (for example, your company website or social media sites, such as LinkedIn)

B – Personal data that we collect and process
 We may collect the following categories of personal data relating to our existing or prospective customers’, business partners’, and vendors’ employees, officers, authorised signatories, and other associated individuals:
 a) name;
b) business address;
c) business email address;
d) business telephone number;
e) job title;
f) details of booking (venue, date, party size, previous functions); and/or
g) any feedback you submitted about your experience.

C – Why do we collect your personal data and what are our lawful bases for it?
  If you object to us using your personal data for these purposes, including direct marketing, please let us know using the email address provided in section 1.
 Where we use your email to communicate marketing information to you we will seek your prior consent where required to do so by law.
 D – How long do we keep your personal data?
We will process your personal data only for as long as is necessary for the purposes for which it was collected in connection with your business relationship with us, unless we have a legal right or obligation to retain the data for a longer period, or the data is necessary for the establishment, exercise or defence of legal claims.

2.3 WEBSITE VISITORS

A – Sources of personal data of personal data
B – Personal data that we collect and process
C – Why do we collect your personal data and what are our lawful bases for it?
D – How long do we keep your personal data?
 A – SOURCES OF PERSONAL DATA
We may obtain your personal data from the following sources:
a) from you directly (for example, at the time of subscribing to any services offered on our website, including but not limited to email mailing lists, interactive services or requesting further goods or services); and/or
b) from your device or browser.
If you contact us, we may keep a record of that correspondence.

B – PERSONAL DATA THAT WE COLLECT AND PROCESS
a) name;
b) title
c) date of birth, and post code, if you are signed up to our e-newsletters;
d) email address;
e) operating system;
f) browser type;
g) information on the use of our website (for example, pages visited, geographical location, time spent on the website, online transactions);
h) cookie data (for more information please see our Cookie Notice
i) preferences regarding online marketing; and/or
j) IP address.

C – Why do we collect your personal data and what are our lawful bases for it?
Website Visitors
    If you object to us using your personal data for the above purposes, including direct marketing, please send us an email using the email address in section 1.
 Where we use cookies or similar technologies we will seek your prior consent where required to do so by law.
 Where we use your email to communicate marketing information to you we will seek your prior consent where required to do so by law.

D – How long do we keep your personal data?
We will keep your personal data only for as long as is necessary for the purposes for which it was collected in connection with your requests via our website or your use of our website.

 2.4 JOB APPLICANTS

We may collect personal data related to job applicants for positions advertised on our website.

A – Sources of personal data
B – Personal data that we collect and process
C – Why do we collect your personal data and what are our lawful bases for it?
D – How long do we keep your personal data?

A – SOURCES OF PERSONAL DATA
We may obtain your personal data from the following sources:
a) from you directly;
b) from a third party, for example, individual referrals or a recruitment agency;
c) from our affiliates [see the list in Annex 1];
d) via web-based application forms;
e) during networking events that we have either hosted, or sponsored, or attended; and/or
f) from publicly available sources (for example, professional networks, such as LinkedIn).

B – PERSONAL DATA THAT WE COLLECT AND PROCESS OPTIONAL
We may collect the following categories of personal data, which may differ, depending on the content of your CV or baseline documents you submit to us:
a) name;
b) residence address;
c) personal email address;
d) telephone number;
e) date of birth;
f) career and education history;
g) skills, experience, and qualifications;
h) personal interests, languages spoken, questionnaire results;
i) gender;
j) names and contact details for references. Please note that it is your responsibility to obtain consent from your references prior to providing us personal information about them;
k) current and historic salary details together with salary expectations;
l) details of your current benefit entitlements; and/or
m) information about your entitlement to work in the country in which the GRR EU affiliate is located.

STAFF

C – WHY DO WE COLLECT YOUR PERSONAL DATA AND WHAT ARE OUR LAWFUL BASES FOR IT?

D – HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will keep and process your Personal Data only for as long as is necessary for the purposes for which it was collected. If you are successful and we hire you, we will keep your CV as part of your employee record for the duration of your employment with us. We will keep CVs and documents submitted by unsuccessful candidates for no longer than six months, unless we obtained their consent to keep it for longer. 

2.5 VISITORS TO OUR PREMISES

A – Sources of personal data
B – Personal data that we collect and process
C – Why do we collect your personal data and what are our lawful bases for it?
D – How long do we keep your personal data?
 A – SOURCES OF PERSONAL DATA
We may obtain your personal data from you directly and from our systems’ records.

B – PERSONAL DATA THAT WE COLLECT AND PROCESS
a) name;
b) business or personal contact details;
c) organisation;
d) role;
e) time and date of your visit; and/or
f) image (for example, from CCTV cameras at our premises).

 C – WHY DO WE COLLECT YOUR PERSONAL DATA AND WHAT ARE OUR LAWFUL BASES FOR IT?
 If you object to us using your personal data for the above purposes, please let us know using the email address provided in section 1.

D – HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We keep your personal data for as long as necessary to ensure security of visitors to our premises and as soon as it is no longer necessary, usually after 90 days for CCTV, we delete it. 

2.6 USERS OF WIFI

A – Sources of personal data
B – Personal data that we collect and process
C – Why do we collect your personal data and what are our lawful bases for it?
D – How long do we keep your personal data?

A – SOURCES OF PERSONAL DATA
We may obtain your personal data from you directly and from our systems’ records.

B – PERSONAL DATA THAT WE COLLECT AND PROCESS
a) name;
b) title
c) email;
d) date of birth;
e) gender;
f) number of times wi-fi used;
g) and/or
h) device used.

C – WHY DO WE COLLECT YOUR PERSONAL DATA AND WHAT ARE OUR LAWFUL BASES FOR IT?
If you object to us using your personal data for the above purposes, please let us know using the email address provided in section 1.

GRR’s Affiliates
We may share your personal data with GRR’s affiliates (see the list in Annex 1) because we share the same guest management and IT systems. Transfers of personal data are to GRR affiliates in the UK only. Such transfers are governed by legally compliant agreements between the affiliates for the integrity and confidentiality of personal data.

D – HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We keep your personal data for as long as necessary for you to use our internet connection. If you submitted other personal data about yourself, we will add it to your profile as a customer and keep it as long as you are our customer.