Privacy policy - English

This is a courtesy translation. The French version of this privacy policy is the only legally binding version and shall prevail in the event of any discrepancy.Last updated: 27 August 2026

1. Definitions2. What is the restaurant’s role in the processing of your personal data?3. How is your personal data collected?4. What data is collected, for what processing purposes, on what legal bases and for how long?5. Who are the recipients of your personal data? How do we share your data?6. What are your rights and how can you exercise them?7. Is your personal data transferred outside the European Union?8. What are the links between the website and the social media pages and third-party websites?9. May this data protection policy be amended?Your privacy is important to us and we pay particular attention to it. We respect confidentiality and undertake to protect the personal data collected about you. The purpose of this personal data protection policy, or privacy policy (hereinafter the “data protection policy”), is to inform you of the characteristics of the processing of your personal data carried out by the restaurant. The collection of this personal data concerning you may take place by means of, or through, in whole or in part, the restaurant’s website www.maisonfakra.com (hereinafter the “website”) and in the context of your dealings with the restaurant.This data protection policy also sets out the rights you hold over your personal data pursuant to the applicable legal and regulatory provisions.If you have any questions, comments or concerns regarding this policy, you may of course send them to the restaurant using the contact details set out below in the paragraph “What are your rights and how can you exercise them?”.The processing of personal data presented and described in this data protection policy concerns the processing carried out by the restaurant in its capacity as controller of its own processing, on its own behalf.This data protection policy also presents and describes the processing of personal data carried out by the restaurant, in its capacity as joint controller with Zenchef, the provider that supplies the restaurant with a software solution enabling the restaurant to manage its relationships with its customers and prospective customers in particular, and to benefit from services useful to its business (such as online booking, pay-at-table, or the collection of reviews). To find out more about Zenchef, click here.To find out more about the broad allocation of roles, obligations and responsibilities in the event of joint controllership, you may contact Zenchef using the contact details referred to in paragraph 6 below.You are also invited to consult Zenchef’s personal data protection policy, available at the following address: https://www.zenchef.com/fr/privacy-policy.

1. Definitions

In addition to the terms defined elsewhere in this policy, the following terms, whether used in the singular or the plural in the said policy, have the following meaning:– “recipient”: means the natural or legal person, public authority, agency or any other body to which personal data is disclosed, whether or not it is a third party.– “personal data”: means any information relating to an identified or identifiable natural person (see “data subject”); an “identifiable natural person” means a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.– “controller”: means the natural or legal person, public authority, agency or other body which determines the purposes and means of the processing. Where the controller determines the purposes and means of the processing jointly with others, it is referred to as a “joint controller”.– “processor”: means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.– “third party”: a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.– “processing”: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2. What is the restaurant’s role in the processing of your personal data?

2.1 Restaurant Fakra (referred to as the “restaurant” in this data protection policy) is a [LEGAL FORM — TO BE COMPLETED], with a share capital of 10,000 euros, registered with the [CITY — TO BE COMPLETED] Trade and Companies Register under number 418457693 (SIRET number 82752092500021), having its registered office at 317 rue du Faubourg Saint-Antoine, VAT number: FR61418457693, telephone: [TO BE COMPLETED], email: [TO BE COMPLETED].To find out more about the restaurant, see the legal notice.2.2 The restaurant publishes this website (see the “website” as defined above), the purpose of which is to make available to any internet user who uses or visits it information enabling them to discover the restaurant’s business, the menus offered, as well as its news, or reviews left by customers of the restaurant.It also offers features and/or information enabling users to contact the restaurant (i.e. a contact request), to book a table at the restaurant and/or to place a takeaway order with the restaurant (“click and collect”) if the restaurant offers such a service, to purchase gift vouchers (also referred to as “gift certificates”) from the restaurant if this is offered on the website, and also to consult information and news relating to the restaurant’s business.The restaurant also administers pages presenting its business and enabling it to publish content on social media and to interact with internet users through these networks (for example, Facebook, Instagram and X (formerly “Twitter”), depending on the social networks actually used by the restaurant and on which the restaurant actually has a page that it administers).Accordingly, processing of personal data concerning you, whether you are a customer, prospective customer, contact, internet user / user, job applicant, supplier, service provider or partner, potential or current (also referred to as “you” or the “data subject(s)”), may be carried out by the restaurant for the purposes set out in paragraph 4 below.

3. How is your personal data collected?

3.1 Your personal data is collected by the restaurant directly from you, or indirectly from third parties.3.1.1 Your personal data is in particular collected or processed in whole or in part:– when you browse the website (for example as a result of cookies, trackers and other similar technologies (hereinafter referred to as “cookies”) used on the website, sharing or redirection plug-ins, or social media features attached to / integrated into the website or to which the website may be attached), from your interactions with the website, and from your entry of information in the data collection forms that may appear on it,– more generally in connection with requests that you may send to the restaurant by any means of your choosing, your relationship and your exchanges with the restaurant, as well as when you share content from the website by means of social media sharing “buttons” that may be offered on the website, or when you browse one of the pages administered by the restaurant on social media.It is specified that your personal data may be collected through the services supplied by Zenchef to the restaurant (for example, when you make a booking request with the restaurant through the booking module supplied by Zenchef to the restaurant).Your personal data is therefore collected by the restaurant from you in the situations referred to above.3.1.2 Furthermore, when you deal directly with the Zenchef group, your personal data is collected through the relevant entity within the Zenchef group.In addition, your personal data may be collected by the restaurant and then transmitted or made accessible to the Zenchef group, or may be collected by the Zenchef group and transmitted or made accessible to the restaurant where applicable.3.1.3 Your personal data may also be collected through third parties.The personal data that the restaurant collects and processes about you may be gathered or enriched by the restaurant, in particular for the purposes of carrying out commercial, communication, solicitation, canvassing or marketing operations, by means of other sources of information (so-called “public” information, social media, third-party / partner websites, professional directories, blogs, press articles, use of file rental operations / provision of files by third parties / partners, use of specialised databases offered by third parties, etc.).Furthermore, with regard more specifically to personal data processed in connection with the restaurant’s recruitment operations, the restaurant may use the information you provide to it (e.g. information mentioned in your CV), which may, under certain conditions, be included in a candidate database (CV database) held by the restaurant.In this context, the restaurant may also contact third parties (for example, recruitment agencies or previous employers) or use other sources of information (in particular professional social networks, recruitment firms or specialist recruitment websites) in order to gather information about you with a view to assessing your application or your profile.3.2 Furthermore, and generally speaking, you are informed that, as a matter of principle:– if the processing of your personal data is necessary for compliance with the controller’s legal or regulatory obligations, the collection of the said data is mandatory;– if the processing of your personal data is subject to your consent, the communication of the said data is entirely optional (it being specified that failure to provide it could nevertheless, at the very least in certain situations, prevent the relevant processing from being carried out);– if the processing of your personal data is necessary for the performance of a contract or of pre-contractual measures taken at your request, the communication of the said data is necessary for the pursuit of this purpose, and the controller could, in the absence of communication of this data, be prevented from performing its contractual obligations or the aforementioned pre-contractual measures;– if the processing of your personal data is based on the pursuit of the legitimate interests of the controller or of a third party, the communication of the said data is necessary for the pursuit of this purpose, and failure to provide your data could prevent or hinder the relevant processing. By way of example, if the information necessary to respond to a request from you (booking request or contact request) is not provided, your request linked to this collection of personal data may not be able to be handled, or its handling may be delayed.Special case: if collection forms (for example, forms integrated into the website) involve the entry of personal data on an optional basis, this will in principle be indicated to you by means of a caption. Failing this, if the collection of certain data is mandatory for the associated processing to be carried out, you will in principle not be able to complete your action (e.g. validate your booking request or send your message via the contact form on the website) and an error message informing you of the fields to be completed will be displayed.3.3 Save in specific situations, or unless stated otherwise in this policy, we do not collect so-called “sensitive” or “special category” personal data, that is to say data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, nor genetic or biometric data for the purpose of uniquely identifying a natural person, nor data concerning health or data concerning a natural person’s sex life or sexual orientation. In this respect, you are informed that you are asked not to provide such “sensitive” or “special category” data in the course of your exchanges with the restaurant.3.4 Personal data of minors or protected adults: generally speaking, use of the website and of the restaurant’s dedicated pages on social media is reserved for adults with legal capacity, the restaurant not being liable under any circumstances for the use of the website or of the restaurant’s social media pages by minors or persons lacking capacity, and therefore for the consequences that may result therefrom, in particular with regard to the processing of their personal data.However, in certain specific cases, the restaurant may process the personal data of minors aged at least fifteen where they contact the restaurant with a view to applying for a job or internship.

4. What data is collected, for what processing purposes, on what legal bases and for how long?

Your personal data is processed for the following purposes:

4.1 Handling and follow-up of information requests and exchanges with users, initiated via or by means of the website or the restaurant’s social media pages or by any other means, and more generally management of relationships with contacts in the broad sense

Purpose of the processing: the restaurant processes your personal data in order to handle, manage and follow up any request (for example, a request for information by means of the contact form on the website) sent by you, by any means and in particular via the website or via interactions on the restaurant’s social media pages (including in particular the management, handling, follow-up and possible moderation of your messages or comments) and the responses to be provided, the management and follow-up of the features offered on or via the website, and more generally for the purposes of managing its relationships with its contacts in the broad sense.Controller: the restaurant.Data processed: identity (title, surname, first name), username or pseudonym / alias, contact details (in particular postal address, telephone number or email address), country, contact request and correspondence exchanged, employing company and job title where applicable.Legal basis for the processing: the processing of your personal data in this context is necessary for the pursuit of the restaurant’s legitimate interests in responding to your requests and, more generally, in managing and following up its relationships with its contacts.Retention period: personal data is retained in the active database for the period necessary to provide you with a response to your request and for a maximum of 3 years from the collection of your personal data or from the end of the relationship with you, or from your last contact with the restaurant.

4.2 Management of the restaurant’s relationships with its customers and prospective customers

Purpose of the processing: the restaurant processes the personal data of its customers and prospective customers for the purposes of managing and following up its relationships with them, including in connection with populating and maintaining its customer database as well as carrying out import or export operations on files containing information relating to its customers or prospective customers, or in connection with handling complaints submitted by its customers or prospective customers.Controller: the restaurant.Data processed: identity (title, first name, surname), contact details (email address, telephone number, etc.), language / country, birthday / date of birth if communicated by the data subject to the restaurant, economic and financial information, comments entered by the restaurant, booking history, and more generally the history of relations between the restaurant and its customers or prospective customers, or data relating to complaints and the responses provided.Legal basis for the processing: such processing of your personal data is in principle necessary for the pursuit of the restaurant’s legitimate interests with a view to ensuring the sound management of relationships with its current or potential customers, and also of complaints and the responses provided to them.Retention period: retained in the active database for a maximum of 3 years from the collection of the personal data or from the end of the relationship with you, or from your last contact with the restaurant.

4.3 Management of bookings and click and collect orders

Purpose of the processing: the restaurant and Zenchef process personal data relating to persons who have made a booking request or a click and collect order, where applicable, with the restaurant via the Zenchef services (e.g. by means of the Zenchef booking request form appearing on the website). The purpose of this processing is the taking, management and follow-up of booking requests and/or click and collect orders. Associated reports, indicators and statistics are also provided to the restaurant in connection with the Zenchef services (occupancy rate, trend in the number of bookings / orders, “no-show” rate, etc.). Where the booking request or the order is made with the restaurant by another means, the restaurant also processes personal data relating to persons who have made such a booking request or such an order for the aforementioned purposes.Controller(s): the restaurant is the controller (possibly jointly with Zenchef where booking requests or orders are made using the Zenchef services) of such processing. N.B.: where bookings or orders are made with the restaurant without visibility for Zenchef (e.g. a booking or order made directly with the restaurant by telephone or via a booking module other than the Zenchef module), the restaurant is the sole controller of such processing.Data processed: identification data (surname, first name), contact details (telephone number, email address), country/language, booking number, date and time of the booking requested, dining room chosen for the booking and/or table booked where applicable, reason for the booking where applicable (birthday, professional event, family event, etc.), number of guests for the booking request, date and time the booking or order was taken, booking status (confirmed, cancelled, waiting list, etc.), source of the booking (walk-in customer, booking by email, website / booking module from which the booking was made, etc.), status indicating whether or not a customer honoured their booking (“no-show” / “arrived” or “cancelled”) and associated time-stamp (date and time), information relating to the click and collect order placed (products / items ordered and associated prices, date and time of collection, etc.), technical information relating to bookings made online, and in particular logs or event journals (technical identifiers, IP, time-stamp, source port, protocol, etc.), gift code where applicable, reason for the booking, comments concerning the booking / order request, information relating to a prepayment or the taking of a card imprint where applicable (it being specified, however, that no payment data (e.g. bank card details) is retained or accessed by means of the Zenchef services — this data is retained solely by the payment service provider), duration of the meal, booking notifications, history of exchanges / missed telephone calls where applicable / bookings / orders, and an alert in the event of a risk of “no-show” (i.e. the risk that a person who has booked does not honour their booking), which is automatic, objective and based on the history of bookings made by the data subject (i.e. in the event of a booking not honoured in the preceding 12 months, or if several bookings are made with several restaurants that are Zenchef customers, by the same person, for the same day and at the same time (or up to 1 hour apart)), it being specified that this alert does not prevent the data subject from making their booking request and does not lead to the automatic cancellation of their booking (the restaurant receiving this alert being free to ignore it or to deploy additional measures to seek to limit this risk (e.g. a request to reconfirm the booking by email/SMS, a request for prepayment or the taking of a card imprint)).Legal basis for the processing: such processing of your personal data is necessary for the pursuit of the legitimate interests of the restaurant (and/or of Zenchef where bookings and orders are made using the Zenchef services) with a view to responding to booking / order requests, ensuring the sound management of bookings and orders and, more generally, of relationships with the restaurant’s customers, or with a view to ensuring their development and assessing the level of performance of the Zenchef services.Retention period: retained in the active database for a maximum of 3 years from the collection of the personal data or from the end of the relationship with you, or from your last contact with the restaurant. By way of exception to the foregoing, technical information relating to bookings made online (in particular logs or event journals) is retained in the active database for a maximum period of 6 months and will then be deleted at the end of that period. As regards payment data, this is not retained by the restaurant or by Zenchef. The determination and application of retention periods for such data is a matter for the payment service providers used, the restaurant and/or Zenchef having no control over these periods.

4.4 Management of gift voucher purchases

Purpose of the processing: the restaurant and Zenchef process personal data relating to persons who have purchased gift vouchers from the restaurant on the website (where the website offers such a feature) and to the beneficiaries of the gift vouchers. The purpose of this processing is the management and follow-up of gift voucher purchases with a view to their use at the restaurant (or at eligible or affiliated restaurants where applicable) during the validity period indicated on the website, the sending by email of gift vouchers and acknowledgements of receipt of gift vouchers ordered through the website, as well as the handling of associated complaints where applicable.Controller(s): the restaurant is the controller (possibly jointly with Zenchef where gift vouchers are purchased and used by means of the Zenchef services) of such processing. N.B.: for purchases and uses of gift vouchers made with the restaurant without visibility for Zenchef (e.g. via a purchase or use process other than via the Zenchef services), the restaurant is the sole controller of such processing. In any event, it is specified that the purchase of gift vouchers is made directly from the restaurant, which acts as “seller”. Zenchef is merely a provider making available to the restaurant a technical service enabling it to offer such gift vouchers for sale. As such, Zenchef does not collect the sums paid in respect of the purchase of gift vouchers on the website.Data processed: identification data of the purchaser (surname, first name), identification data of the beneficiary (surname, first name), contact details of the purchaser (email address and telephone number where applicable, and professional information where the purchaser is acting in a professional capacity (i.e. information relating to the company)), email address of the beneficiary, message entered by the purchaser for the beneficiary, gift voucher and associated information (number / value / amount of the gift voucher, validity period of the gift voucher, method of sending the gift voucher (by email), restaurant(s) at which the gift voucher may be used, code enabling the gift voucher to be used, etc.), acknowledgement of receipt of the purchase of a gift voucher and email sent to the beneficiary, information relating to payment for the gift voucher (it being specified, however, that no payment data (e.g. bank card details) is retained or accessed by means of the Zenchef services — this data is retained solely by the payment service provider), or data relating to complaints connected with the purchase or use of gift vouchers and the responses provided.Legal basis for the processing: such processing of your personal data is necessary for the pursuit of the legitimate interests of the restaurant(s) concerned and/or of Zenchef where the gift voucher is purchased and used through the Zenchef services, with a view to ensuring the sound management of gift voucher purchases and dispatches, and also of complaints and the responses provided to them in connection with the purchase or use of these gift vouchers.Retention period: retained in the active database until the gift voucher is actually used or, failing this, until the end of the validity period of the gift voucher, this period being extended by a maximum of 2 years. As regards payment data, this is not retained by the restaurant or by Zenchef. The determination and application of retention periods for such data is a matter for the payment service providers used, the restaurant and/or Zenchef having no control over these periods.

4.5 Management of bill payments made using the pay-at-table tool supplied by Zenchef

Purpose of the processing: the restaurant and Zenchef process personal data relating to persons who have paid a bill at the restaurant using the pay-at-table tool supplied by Zenchef. The purpose of this processing is the management and follow-up of pay-at-table services via this tool, and in particular payment of the bill, where the personal data concerned has been collected by means of the pay-at-table tool supplied by Zenchef. Associated reports, indicators and statistics are also provided to the restaurant in connection with the Zenchef services supplied to the restaurant (number of payments made using the pay-at-table tool supplied by Zenchef, proportion of payments made using this tool, associated monthly revenue generated by the use of this tool, etc.). Where bills are paid at the restaurant by a means other than the pay-at-table tool supplied by Zenchef, the restaurant also processes personal data relating to persons who have made such a payment for the aforementioned purposes.Controller(s): the restaurant is the controller (possibly jointly with Zenchef where the pay-at-table tool supplied by Zenchef is used) of such processing. N.B.: where bills are paid at the restaurant by a means other than the pay-at-table tool supplied by Zenchef (e.g. payment in cash or by bank card at the restaurant’s till, or using a tool made available by a third party), the restaurant is the sole controller of such processing.Data processed: identification data, information relating to the bill, items paid for and price paid (and the split between guests where applicable), amount of the tip, means of payment, proof of payment and contact details entered in order to obtain a receipt following payment where applicable (it being specified, however, that no payment data (e.g. bank card details) is retained or accessed by means of the Zenchef services — this data is retained solely by the payment service provider).Legal basis for the processing: such processing of your personal data is necessary for the pursuit of the legitimate interests of the restaurant (and/or of Zenchef where the pay-at-table tool supplied by Zenchef is used) with a view to the payment of bills and orders and, more generally, to the proper performance of relationships with the restaurant’s customers and of the catering services provided by the restaurant, or with a view to ensuring its development and assessing the level of performance of the services it provides.Retention period: retained in the active database for a maximum of 3 years from the collection of the personal data or from the end of the relationship with you, or from your last contact with the restaurant. As regards payment data, this is not retained by the restaurant or by Zenchef. The determination and application of retention periods for such data is a matter for the payment service providers used, the restaurant and/or Zenchef having no control over these periods.

4.6 Management of online reviews

Purpose of the processing: the restaurant may process personal data relating to its customers, and more generally to its contacts, who have left an online review. The purpose of this processing is the management and follow-up of online reviews concerning the restaurant (including in particular, where applicable, the moderation and handling of reviews and comments and the responses to be provided to them), as well as the publication of all or part of these reviews on the website or on other media (for example on the Zenchef mobile application). Reports, indicators and statistics associated with online reviews concerning the restaurant may also be produced (average rating obtained by the restaurant, trend in reviews, etc.).Controller(s): the restaurant is the controller of such processing (except as regards the dissemination / publication on the Zenchef mobile application of online reviews collected by means of the services supplied by Zenchef, such processing being carried out jointly by the restaurant and by Zenchef).Data processed: identification data (e.g. surname, first name, pseudonym, etc.), elements relating to online reviews (ratings and associated comment, responses provided by the restaurant where applicable, etc.).Legal basis for the processing: such processing of your personal data is necessary for the pursuit of the legitimate interests of the restaurant (and/or of Zenchef as regards the dissemination / publication of reviews on the Zenchef mobile application) with a view to ensuring the management and follow-up of online reviews concerning the restaurant.Retention period: retained in the active database for three years from the collection of the personal data or from the end of the relationship with you, or from your last contact with the restaurant and/or the Zenchef group, then retained in archived form for 5 years for administrative and/or evidentiary purposes. Where online reviews are published on third-party platforms / websites, the determination of retention and publication periods on those third-party platforms / websites is a matter for the said third parties. Furthermore, online reviews relating to the restaurant left by its customers, through the service supplied by Zenchef, following their visit to the restaurant, may be disseminated / published on the website and/or on the Zenchef mobile application, it being specified that the restaurant configures the maximum age of the reviews it wishes to display on the website.

4.7 Management of relationships with the restaurant’s current or potential partners (also including referrers, service providers and suppliers)

Purpose of the processing: the restaurant may process personal data relating to its current or potential partners and/or contacts at those partners (e.g. members of the partner’s staff, service provider/consultant at the partner, etc.). The purpose of this processing is the search for new partners, the management, follow-up and response to partnership requests, quotations or service proposals, as well as the management of partners and/or the management of the restaurant’s relationships with them, including in particular the management and follow-up of the performance of contracts, of orders/services entrusted, of deliveries, of invoices, of payments and transactions, of the associated accounting, and in particular the management and follow-up of partner accounts, of partner relations in the broad sense and, where applicable, of complaints.Controller: the restaurant.Data processed: identity (title, surname, first name), contact details (email address, postal address, telephone number, etc.), employing company and job title, information relating to your education (studies, qualifications, etc.), your experience and your professional background, your professional skills/references, and any information that may be contained in your CV where applicable, information on partnership requests, quotations and service proposals, details of orders / services / contracts, data relating to payments and means of payment, data relating to transactions, data relating to the follow-up of contracts and of the relationship, data relating to invoices, data relating to complaints.Legal basis for the processing: such processing of your personal data is in principle necessary for the pursuit of the restaurant’s legitimate interests in ensuring the sound management of relationships with its current or potential partners (and more generally contacts at the said partners in the broad sense), in particular in connection with the search for new partners, the monitoring of the proper performance of contracts entered into with partners, or with a view to the organisation and proper performance of the assignments or services entrusted to them.Retention period: retained in the active database for the duration of the pre-contractual relationship (for potential partners), contractual or commercial relationship (for current partners), then retained in archived form for 5 years for administrative and/or evidentiary purposes.

4.8 Carrying out external communication operations

Purpose of the processing: the restaurant may process personal data relating to its current or potential customers, prospective customers, contacts, internet users / users or partners, with a view to carrying out communication operations, including in particular the presentation of the restaurant and of its business and/or its services (testimonials, distribution of presentation brochures, promotion and communication relating to events, information on news, etc.) on external communication media (e.g. on the website and/or on the restaurant’s social media pages), and more generally on any communication media under the restaurant’s control.Controller: the restaurant.Data processed: photograph / video, status (e.g. customer, prospective customer, contact, internet user / user, partner, and any details regarding this status), professional information where applicable (position held / job / profession / function / department / activity / employing company, etc.), feedback and testimonials.Legal basis for the processing: such processing is based on your consent (which is to be obtained specifically by the restaurant, in accordance with the procedures determined by it), with the result that you have the option of not consenting or, if you do consent, of subsequently withdrawing your consent at any time, without having to provide any reason or explanation.Retention period: retained for the period referred to in the authorisation granted to the restaurant.

4.9 Management and follow-up of the restaurant’s accounting and financial position

Purpose of the processing: the restaurant may process the personal data of its contacts (for example contacts at its partners or its customers) for the purposes of managing and following up accounting operations connected with its business, invoicing, payments and unpaid amounts, and its financial and budgetary position.Controller: the restaurant.Data processed: identity (title, surname, first name), contact details (postal address, telephone number, email address, etc.), amount of bills / invoices / payments and associated details, data relating to payments and means of payment, data relating to transactions, data relating to the follow-up of contracts and of relationships with contacts, and data relating to invoices, accounting, financial, budgetary and tax information.Legal basis for the processing: such processing is in principle necessary for compliance with the legal or regulatory obligations incumbent on the restaurant (financial, tax and accounting documents in particular) as regards the issuing, management and follow-up of outgoing invoicing (including any credit notes), the keeping, management and follow-up of general and cost accounting, the representation and monitoring of the representation of assets and the recording of the restaurant’s financial position. Furthermore, as regards the other processing purposes that are not imposed by a legal or regulatory obligation, such processing is necessary for the pursuit of the restaurant’s legitimate interests in connection with the sound management of its accounting and financial position.Retention period: retained in the active database for the duration of the current accounting or tax year, then retained in archived form until expiry of a maximum period of 10 years (except as regards data whose retention is solely intended to take account of the tax limitation period and which is therefore retained in archived form for a period limited to 6 years).

4.10 Canvassing / solicitation by post or by telephone

4.11 Canvassing / solicitation by email

Purpose of the processing: the restaurant may process the personal data of its contacts (for example customers, prospective customers, or contacts at its partners) for the purposes of carrying out commercial, communication, solicitation, canvassing or marketing operations by email or SMS, with a view to sending them information promoting the restaurant’s image or services (e.g. the restaurant’s newsletter).Controller: the restaurant.Data processed: identity (title, first name, surname), contact details (email address, telephone number), job title and employing company where applicable.Legal basis for the processing: if you are a professional, your prior consent to receiving such solicitations is not required if the messages relate to your profession. In this case, such processing is carried out on the basis of the pursuit of the restaurant’s legitimate interests in making itself known, in ensuring its development, in particular commercial development, and/or in carrying out canvassing and solicitation operations in the broad sense, it being specified that you have in any event the right to object to this at any time without having to provide any reason or explanation. In other cases, in particular where you subscribe to the newsletter on the website or make a booking request through the website, such processing is based on your consent, with the result that you have the option of not consenting or, if you do consent, of subsequently withdrawing your consent at any time, without having to provide any reason or explanation.Retention period: retained in the active database for a maximum of 3 years from the collection of the personal data or from the end of your relationship with the restaurant, or from your last contact with the restaurant (for example, from your last booking), then retained in archived form for 6 years for administrative and/or evidentiary purposes.

4.12 Use of cookies for the purposes of recording your preferences, managing and monitoring the proper functioning and security of the website, monitoring and measuring browsing, traffic and website performance, including carrying out and producing tests, studies, analyses, reports and statistics, or evaluating and analysing the way in which you use and interact with our website, adapting the website with the aim of improving website performance and the user experience, and making certain services or certain features available on the website (excluding social media or social-media-related features)

Purpose of the processing: in connection with your use of the website, the restaurant processes personal data concerning you in particular for the purposes of recording your preferences, including carrying out and producing studies, analyses, reports and statistics, managing and monitoring the proper functioning and in particular the security of the website, improving the user experience, making certain services or certain features available on the website, and monitoring and measuring the audience and performance of the website. This personal data is collected by means of cookies or other similar technologies.Data processed: session, connection and internet browsing data, including in particular information about your browser or device and their configuration (e.g. device fingerprinting, unique device identifier, screen resolution, operating system, IP address, internet browser, device type, etc.), history and more generally traffic and browsing information on the website, information relating to the traceability of actions on the website and interactions with the website, and on the number of visitors, the origin of users and the pages visited, “identifier”-type information linked to your device, your hardware or your operating system, or “scoring”-type information (e.g. bot score intended to ensure that the user is not a robot), information relating to your browsing and usage preferences on the website and on third-party websites, location data (IP address and geographical area for example), information relating to the network, to your language, or non-nominative personal data (age, gender, interests, demographic data, family / marital status, professional activity / status, etc.) (that is to say specific to the internet user’s identifier).Controller: the restaurant.Legal basis for the processing: where the processing of your data either has the exclusive purpose of enabling or facilitating communication by electronic means, or is strictly necessary for the provision of an online communication service at your express request, that is to say generally speaking if this processing is strictly necessary to enable you to browse the website and benefit from the features offered, it is based on the restaurant’s legitimate interest in facilitating your browsing on the website. In other cases, such processing is subject to your prior consent to the use of cookies and other similar technologies for the aforementioned purposes, with the result that you have the option of not consenting or, if you do consent, of subsequently withdrawing your consent at any time, without having to provide any reason or explanation.Maximum lifespan of cookies and retention period for the personal data collected by this means: retained in the active database for the lifespan of the cookies and other similar trackers by means of which the personal data is collected, and for a maximum of six months.To find out more about the cookies, trackers and other similar technologies used by the restaurant and by its partners on the website, how to configure them, and their lifespan, please refer to the restaurant’s cookie policy, accessible at the bottom of the pages of the website.

4.13 Use of cookies for the purposes of monitoring and measuring browsing, traffic and performance of the website (in connection with social-media-related features) and of the restaurant’s social media pages, including carrying out and producing tests, studies, analyses, reports and statistics, or evaluating and analysing the way in which you use and interact with the website (in connection with social-media-related features) and the said social media pages, making available and monitoring social media interactivity features, adapting the website and the restaurant’s social media pages with the aim of improving the performance of the website and of the restaurant’s social media pages and the user experience, and displaying advertising, possibly targeted, on third-party websites (social media and social-media-related features)

Purpose of the processing: for the purposes of making available interactivity features between the website and social media, and of monitoring, understanding and studying the use of the website (in connection with social-media-related features) and of the restaurant’s social media pages and the interactions between the website and social media, the restaurant may offer you on the website links or “buttons” to its social media pages, integrate / attach social-media-related features to the website or attach the website to such features, configure the said social media pages in its capacity as administrator, or offer you the opportunity to use on these networks the tools created / offered by these social networks. In this case, the restaurant processes personal data concerning you in particular for the purposes of monitoring and measuring browsing, traffic and performance of the website (in connection with social-media-related features) and of the restaurant’s social media pages, including carrying out and producing tests, studies (for example positioning studies), analyses, reports and statistics, or evaluating and analysing the way in which you use and interact with the website (in connection with social-media-related features) and the said social media pages, making available and monitoring social media interactivity features (for example, a “button” for sharing or accessing social media pages, etc.), adapting the website (in connection with social-media-related features) and the restaurant’s social media pages with the aim of improving the performance of the website (in connection with social-media-related features) and of the said pages and the user experience. Personal data concerning you may also be collected and processed in order to enable the display to you, on the website, on third-party websites or on social media, of advertising, possibly targeted (or behavioural or programmatic advertising) according to your profile, your browsing, your location (i.e. geolocated advertising) and your interactions on social media and also with the website or with the other websites you visit. This personal data is collected by means of cookies or other similar technologies. Please note: the use of these cookies may enable the social networks concerned to track users’ browsing on the restaurant’s website, whether or not they are otherwise users of these third-party social networks (that is to say whether or not they have created an account on these sites).Controller: where the configuration of a social media tool carried out by the restaurant has an impact on the nature of the personal data processed or on the characteristics of this processing, and more specifically where the restaurant may be considered to contribute to jointly determining the purposes and means of the processing of personal data, the restaurant may be a joint controller of the processing of your personal data with the social network concerned. In this case, the social network, which primarily determines the purpose and means of the processing, as well as the nature and methods of depositing cookies, has primary responsibility for the processing, and you are advised to consult the privacy policies and “cookie” policies of these third parties for detailed information on their practices for collecting and processing your personal data. Depending on the social networks on which the restaurant administers a page, the social networks Facebook, Instagram and X (formerly “Twitter”) may be concerned (see below).Data processed: session, connection and internet browsing data, including in particular information about your browser or device and their configuration (e.g. device fingerprinting, unique device identifier, screen resolution, operating system, IP address, internet browser, device type, etc.), history and more generally traffic and browsing information on the website and on our social media pages, information relating to the traceability of actions on and interactions with the website or with the restaurant’s social media pages or between the website and social media, and on the number of visitors, the origin of users and the pages visited, “identifier”-type information linked to your device, your hardware, social media or your operating system, or “scoring”-type information (e.g. bot score intended to ensure that the user is not a robot), information relating to your browsing and usage preferences on the website, on the restaurant’s social media pages, and on third-party websites, location data (IP address and geographical area for example), information relating to the network, to your language, or non-nominative personal data (age, gender, interests, demographic data, family / marital status, professional activity / status, etc.) (that is to say specific to the internet user’s identifier).Legal basis for the processing: such processing is subject to your prior consent to the use of cookies and other similar technologies for the aforementioned purposes, with the result that you have the option of not consenting or, if you do consent, of subsequently withdrawing your consent at any time, without having to provide any reason or explanation.Maximum lifespan of cookies and retention period for the personal data collected by this means: retained in the active database for the lifespan of the cookies and other similar trackers by means of which the personal data is collected, and for a maximum of six months. As regards the retention of personal data by Instagram, Facebook and/or X (formerly “Twitter”), see the privacy policy and the “cookie” policy of those companies (see below).To find out more about the cookies, trackers and other similar technologies used by the restaurant and by its partners on the website, how to configure them, and their lifespan, please refer to the restaurant’s cookie policy, accessible at the bottom of the pages of the website.To find out more about social-media-related cookies, trackers and other similar technologies:

as regards Facebook (Meta) and Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. For more information on how Meta Platforms Ireland Limited processes your personal data, we invite you to refer to Meta Platforms Ireland Limited’s Data Policy for Facebook and to Meta Platforms Ireland Limited’s Data Policy for Instagram, as well as to the Facebook and Instagram “cookie” policies;
as regards X (formerly “Twitter”): Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland. For more information on how Twitter processes your personal data, we invite you to refer to Twitter’s Privacy Policy and “cookie” Policy.

4.14 Management of applications and of the recruitment process

Purpose of the processing: the restaurant may process your personal data for the purposes of managing and following up applications, in response to job or internship offers or sent to it on a speculative basis, and operations relating to the restaurant’s recruitment process, including in particular monitoring and actively searching for professional profiles matching the positions to be filled, receiving and reviewing applications, evaluating and selecting applications and professional profiles, building a candidate database (or CV database), inviting candidates and conducting recruitment interviews, as well as the resulting decision-making (rejection of the application or recruitment of the candidate).Controller(s): the restaurant.Data processed: identity (title, first name, surname), contact details (email address, telephone number, postal address, etc.), language(s) spoken, data relating to your professional life, information relating to your education (studies, qualifications, etc.), your experience and your professional background, your professional skills/references and the job you hold, economic and financial information, and any information contained in your CV (in particular your interests where applicable), and more generally in your application (in particular cover letter, letter of recommendation, etc.).Legal basis for the processing: such processing is necessary for the pursuit of the restaurant’s legitimate interests with a view to searching for and recruiting new staff. The retention of your data, once the position to be filled has been allocated, in our candidate database (or CV database) in order to subsequently offer you other positions that may be of interest to you is, however, subject to your prior consent, with the result that you have the option of not consenting or, if you do consent, of subsequently withdrawing your consent at any time, without having to provide any reason or explanation.Retention period: your personal data is retained in the active database for the period necessary to process your application. If you are recruited, the personal data collected in connection with your application may be reused in connection with the processing relating to staff management, then retained in archived form for 6 years for administrative and/or evidentiary purposes. If you are not recruited, your personal data will be retained for 3 months from the end of the recruitment process, then, subject to obtaining your prior consent, may be retained in our CV database until expiry of a period of two years from receipt of your application, for example in order to enable the restaurant to contact you again during that period if a position matching your profile becomes available. At the end of that period, your personal data may be retained in archived form for 6 years for administrative and/or evidentiary purposes.

4.15 Handling of requests to exercise data subjects’ rights

Purpose of the processing: in order to enable the restaurant, and Zenchef where applicable, to comply with their various legal and regulatory obligations regarding the protection of personal data (e.g. responses to requests by data subjects to exercise their rights, taking account of the resulting consequences, in particular management of objections to canvassing, etc.), the restaurant and Zenchef where applicable may process personal data concerning you in connection with this purpose.Controller(s): the restaurant and/or Zenchef (depending on the processing to which your request relates).Data processed: identity (title, first name, surname), contact details (email address, telephone number, etc.) and more generally all data processed concerning you, the substance and content of the request, of the exchanges and of the response, additional information or a copy of an identity document, but only where the situation so requires (i.e. in the event of reasonable doubt as to the identity of the applicant).Legal basis for the processing: such processing is in principle necessary for compliance with the aforementioned legal and regulatory obligations incumbent on the restaurant and/or on Zenchef where applicable, in their capacity as (possibly joint) controller(s).Retention period: retained in the active database until the controller(s) act on the request, then retained in archived form for a maximum of 6 years from the point at which the controller(s) respond to the request (depending on the type of request and the processing to which it relates), it being specified, however, that where a copy of an identity document is collected in this context, it is: immediately deleted where it has been provided by you but the request does not require the transmission of such an identity document; deleted once the verification of the identity of the person making the request has been carried out (where the situation requires such verification) or retained in archived form for evidentiary purposes in certain exceptional cases in which the controller(s) identify a strong litigation risk, for 6 years. If you object to receiving canvassing, your identity and/or your contact details may be retained by the controller(s) in the active database for 3 years in order to take account of your request (i.e. maintaining a canvassing objection list).

4.16 Management and follow-up of pre-litigation and litigation matters

Purpose of the processing: such processing of personal data concerning you is carried out by the restaurant with a view to the management and follow-up of pre-litigation and litigation matters (in particular disputes with its customers, with its partners, with its contacts in the broad sense, etc.), including in particular the preparation, conduct and follow-up of litigation as well as the enforcement of the decisions handed down, and also the management and follow-up of actions aimed at establishing, exercising or defending a legal claim (including, where applicable, the enforcement of the decision handed down).Controller: the restaurant.Data processed: identity (title, first name, surname), civil status, economic and financial information, history / information relating to exchanges and relations with the restaurant, and more generally any information if this is necessary having regard to the subject matter of the dispute, the disputed facts giving rise to the proceedings, information / documents / evidence gathered tending to establish or refute facts that may be alleged, characteristics and details of the pre-litigation / litigation / proceedings, decision, information necessary for the enforcement of the decision, etc., including, where applicable, data relating to convictions (in particular criminal convictions) or offences or security measures, or so-called “special category” data as defined above.Legal basis for the processing: such processing of your personal data is based on the legitimate interests pursued by the restaurant with a view to preserving / asserting its interests and its rights in legal proceedings, in particular in the performance of relationships with its customers (current or potential), partners (current or potential), contacts, candidates, etc. Furthermore, in connection with this processing, so-called “special category” personal data may be processed for the aforementioned purposes if it is strictly necessary for those purposes and for the establishment, exercise or defence of a legal claim. Likewise, data relating to offences, convictions or security measures may be processed for the purposes of enabling the restaurant to prepare and, where applicable, to bring and follow up legal proceedings as a victim, as an accused party, or on behalf of a victim or an accused party, and to have the decision handed down enforced.Retention period: as specified above, the data processed in connection with the various purposes presented above is retained in archived form for the statutory limitation periods, in particular for evidentiary purposes, in the event of litigation. In the event of pre-litigation initiated before the end of the above periods and which would require the retention of the personal data in particular with a view to the establishment, exercise or defence of the restaurant’s rights, the data will be retained until the amicable settlement of the dispute (including its enforcement where applicable), or, failing this, will be deleted as soon as the corresponding legal action becomes time-barred. In the event of litigation / proceedings, in particular judicial proceedings, initiated before the end of the above periods and which would require the retention of the personal data in particular with a view to the establishment, exercise or defence of the restaurant’s rights, the data will be retained for the duration of the said proceedings and until ordinary and extraordinary appeals are no longer possible against the decision handed down. The decisions handed down may be retained by the restaurant until the decision has been fully enforced, or as permanent archives.N.B.: as regards all the active database retention periods referred to above in paragraph 4, you are informed that these are the periods applied “in principle” by the controller(s), unless you exercise your right to erasure, to object or to withdraw your consent, in the situations and in accordance with the details referred to in paragraph 6 below. In the latter case, following the exercise of such rights, your data will be retained only in archived form for the period referred to above in 4.15.

5. Who are the recipients of your personal data? How do we share your data?

5.1 In principle, only authorised persons within the restaurant may access your personal data where such access is necessary for the performance of their duties and/or assignments, namely in particular the restaurant’s authorised staff (including, in the broad sense, employees, interns, temporary workers, etc.) in charge of reception at the restaurant, booking management, marketing and communication matters, recruitment and human resources, legal matters, etc.5.2 Recipients external to the restaurant may also receive disclosure of your personal data, namely:– authorised persons within the Zenchef group (including, in the broad sense, employees, interns, temporary workers, etc.), in particular staff in charge of marketing, communication, commercial management, recruitment and human resources, customer and prospective customer relations, administrative, financial and legal matters, development, IT, projects, etc.;– the data protection officer appointed by Zenchef (see contact details below);– the departments or entities responsible for auditing the restaurant and/or Zenchef where applicable (statutory auditor, departments or entities responsible for internal or external audit procedures, bodies authorised to carry out audits, etc.);– the advisers of the restaurant and/or of Zenchef where applicable (legal, financial, accounting, etc.);– the partners of the restaurant and/or of Zenchef where applicable, including in particular their current or potential service providers and suppliers;– social media publishers, third-party website publishers or publishers of cookies used on the website, or third-party companies involved for example in carrying out canvassing or communication operations, etc., or in connection with the management of our marketing, or for the operation of the website in the broad sense (e.g. making available and ensuring the proper functioning of the features offered on it, performance, security, etc.). In this respect, it is also specified for the record that if you post content disclosing your personal data on the internet, and in particular on the website or on the restaurant’s social media pages, this content may of course be accessible to any internet user. In addition, if you leave an online review concerning the restaurant, you are informed that your data, and in particular the rating left by you, may be disseminated and more generally used on publicly accessible digital media, and in particular on the Zenchef mobile application for your reviews collected via the Reviews service supplied by Zenchef. Furthermore, if you have consented to the restaurant using your personal data for external communication purposes, it may be accessible to / viewed by the audiences for whom these communications are intended, depending on the uses to which you have consented;– technical or other service providers involved in activities or assignments for which access to personal data is necessary and/or justified. This category of recipients may also include any publisher of an application, computer program or tool used in connection with the restaurant’s business, or any IT or maintenance provider for the applications, computer programs and/or tools used by the restaurant and/or by Zenchef where applicable and in which your personal data may be processed;– social security and tax bodies authorised to receive personal data in certain situations;– bodies, judicial officers and ministerial officers, in particular in connection with their debt recovery duties;– where applicable, the body responsible for managing the telephone canvassing objection list;– judicial officers, ministerial officers and, where applicable, the competent administrative or judicial courts or authorities, in order to enable the sale or transfer of all or part of the business or assets of the restaurant and/or of Zenchef where applicable, or in connection with the management and follow-up of pre-litigation and/or litigation matters;– the police or gendarmerie authorities in connection with the management and follow-up of pre-litigation matters, litigation and proceedings;– any third parties concerned by a dispute;– the insurers of the restaurant and/or of Zenchef where applicable.5.3 The controller(s) may also be required to disclose your personal data in the event of legitimate requests from public or authorised authorities, on the basis of the legal or regulatory provisions applicable to them. Your personal data may therefore be disclosed to any authority authorised to be informed of it, in particular in the event of a formal request from judicial, police or administrative authorities.5.4 It is specified that the recipients referred to above are not necessarily recipients of all of your personal data, but only of the data necessary for the purpose involving such disclosure.

6. What are your rights and how can you exercise them?

6.1 Subject to the conditions and procedures and within the limits defined by the legal and regulatory provisions on the protection of personal data, you have the following rights with regard to your data:– Right of access: you may obtain confirmation as to whether or not personal data concerning you is being processed by the controller(s) and, where it is, access to the said personal data, as well as certain information relating to the processing of your personal data and to the characteristics of such processing;– Right to rectification: you may request the correction of your personal data that you consider to be incomplete or inaccurate;– Right to erasure: you may, in certain situations provided for by the applicable provisions, request the erasure of your personal data (except, for example, if it is necessary for the performance of your contractual relationship with the controller(s), or if it is necessary for the controller(s) to comply with their legal or regulatory obligations or to establish or exercise their rights);– Right to restriction of processing: you may request the restriction of the processing of your personal data, that is to say request in certain situations the marking of your personal data in order to limit its future processing;– Right to the portability of your personal data: you have the right, in certain situations and subject to certain conditions provided for by the applicable provisions, to request to receive the personal data concerning you that you have provided to us or, where technically possible, for it to be transferred to a third party, in a machine-readable form (it being specified that this right to data portability applies only to processing based on the data subject’s consent or on the performance of a contractual relationship, and provided that the data is processed by automated means);– Right to withdraw your consent: you may withdraw your consent if the processing is carried out on the basis of your consent, without the withdrawal of such consent affecting the lawfulness of the processing based on consent carried out before its withdrawal;– Right to issue directives concerning the retention, erasure or communication of your personal data after your death. In this respect, in the event of a death being brought to the attention of the controller(s), please note that your personal data will be deleted (unless it must be retained for a specified period for reasons relating to our legal and regulatory obligations and/or to the statutory limitation periods and/or the mandatory retention periods referred to above in paragraph 4 in the details of the characteristics of the processing), after having been communicated, where applicable, to a third party that you may have designated.Furthermore, you have, in certain situations and subject to certain conditions provided for by the applicable provisions, a right to object which allows you to object to the processing of your personal data on grounds relating to your particular situation, it being specified that, as regards canvassing operations, including profiling operations connected with such canvassing, you have an absolute right to object, which may be exercised at any time, without having to provide any reason or justification.6.2 As regards the processing of your personal data carried out by the restaurant in its capacity as controller of its own processing as described in this policy, these rights are exercised with the restaurant using the contact details indicated in paragraph 2 or by email to [TO BE COMPLETED].Upon receipt of such a request, it will be responded to as soon as possible and in any event within a maximum period of one month from receipt of the request. If necessary, this period may be extended by two months, having regard to the complexity and number of requests received, in which case the applicant will be informed.In the event of reasonable doubt as to the identity of the person concerned by such a request to exercise the aforementioned rights, they may be asked to provide additional information necessary to confirm their identity, and they may be asked for this purpose, where the situation so requires, for a photocopy of an identity document bearing their signature. In such a case, the aforementioned response periods will be suspended pending receipt of the additional information necessary to identify the data subject.The request may be submitted by the data subject or by a person specially authorised for this purpose by the data subject, provided that this authorised person provides proof of their identity and of the identity of the principal, of their authority as well as of the duration and precise purpose of that authority. The authority must also specify whether the authorised representative may receive the response.You are also informed that the restaurant has appointed a data protection officer whose contact details are as follows: [TO BE COMPLETED].6.3 As regards the processing of your personal data carried out jointly by Zenchef and by the restaurant, in their capacity as joint controllers, as described in this policy, these rights are exercised with the data protection officer appointed by Zenchef, whose contact details are as follows: contact@zenchef.com or privacy@zenchef.com — Zenchef, 63 avenue de Villiers, 75017 Paris (France).6.4 Furthermore, and for the record, the restaurant may in certain situations be considered a joint controller of the processing of your personal data together with the social networks on which the restaurant has dedicated pages or with which Zenchef offers you interactions (see the details of the purposes in paragraph 4 above). Depending on the social network concerned, the joint controller may be:– as regards Facebook (Meta) and Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland. For more information on how Meta Platforms Ireland Limited processes your personal data, we invite you to refer to Meta Platforms Ireland Limited’s Data Policy for Facebook and to Meta Platforms Ireland Limited’s Data Policy for Instagram, as well as to the Facebook and Instagram “cookie” policies;– as regards X (formerly “Twitter”): Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland. For more information on how Twitter processes your personal data, we invite you to refer to Twitter’s Privacy Policy and “cookie” Policy.In these situations, you may also, in order to exercise the aforementioned rights, consult your account settings on the above-mentioned social networks and/or contact:– as regards Facebook and Instagram: the Data Protection Officer of Meta Platforms Ireland Limited by email, in particular using the dedicated contact form;– as regards X (formerly “Twitter”): the Data Protection Officer of Twitter by email, in particular using the dedicated contact form.6.5 Finally, you have in any event the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data is not carried out in accordance with the legal and regulatory provisions on the protection of personal data:– in France, this is the Commission Nationale de l’Informatique et des Libertés (“CNIL”): 3 place de Fontenoy – TSA 80715 – 75334 Paris cedex 07 (France); tel.: +33 (0)1 53 73 22 22 – https://www.cnil.fr/en/contact-cnil;– in Belgium, this is the Data Protection Authority: rue de la Presse 35 – Drukpersstraat 35 – 1000 Brussels – tel.: +32 (0)2 274 48 00 – contact@apd-gba.be;– in the Netherlands, this is the Autoriteit Persoonsgegevens: Hoge Nieuwstraat 8 – P.O. Box 93374 – 2509 AJ Den Haag/The Hague – tel. +31 (0)70 888 8500;– in Germany, this is Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit: Graurheindorfer Straße 153 – 53117 Bonn – tel. +49 (0)228 997799-0;– in Portugal, this is the CNPD (Comissão Nacional de Proteção de Dados): Av. D. Carlos I, 134 – 1.º – 1200-651 Lisboa – tel. +351 21 392 84 00;– in Luxembourg, this is the CNPD (Commission Nationale pour la Protection des Données): 15, boulevard du Jazz L-4370 Belvaux – tel. (+352) 26 10 60 -1;– in Italy, this is the Garante per la protezione dei dati personali: Piazza Venezia, 11 – 00187 Roma – tel. (+39) 06.696771;– in Austria, this is the Österreichische Datenschutzbehörde: Barichgasse 40-42 – 1030 Wien – tel. +43 1 52 152-0;– in Switzerland, this is the Federal Data Protection and Information Commissioner: Feldeggweg 1 – CH-3003 Berne – tel. +41 (0)58 464 74 84.If you are located in the European Union, in a country not referred to above, you may of course lodge such a complaint with the supervisory authority of the country concerned, it being specified that the list of European supervisory authorities is available at the following address: https://edpb.europa.eu/about-edpb/about-edpb/members_en.To understand your rights, you may also refer to the explanations provided by the CNIL here: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles or, if you are located in another European Union member country, with the competent personal data protection supervisory authority.6.6 It is also specified that, pursuant to Articles L.223-1 et seq. of the French Consumer Code, if you are a consumer you may object at any time to being canvassed by telephone, by registering free of charge on the website “www.bloctel.gouv.fr”.

7. Is your personal data transferred outside the European Union?

7.1 Your personal data is processed preferentially within the European Union.7.2 In connection with the aforementioned purposes, some of your personal data may nevertheless be transferred to third-party entities established in countries located outside the European Union (e.g. processors involved in the aforementioned processing).Some of these entities are considered to provide a sufficient level of protection of personal data because they are established in a country whose personal data protection regulations have been recognised as providing an adequate level of protection for the said data (see the adequacy decisions of the European Commission https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) or because they have undertaken to comply with a data protection framework entitled the “Data Privacy Framework” (the list of entities concerned is available here: https://www.dataprivacyframework.gov/s/participant-search, it being specified that this data protection framework concerns only United States entities).Furthermore, if the country of the entity concerned or the entity itself does not offer an adequate level of protection for the said data, we ensure that appropriate security and confidentiality measures are taken in order to guarantee that the protection of your data is maintained.Accordingly, in these situations, you are informed that transfers of your personal data to other entities outside the European Union are governed by the conclusion, with the recipients of this data, of contractual clauses in accordance with the recommendations of the European Commission, enabling us to ensure that appropriate safeguards are taken concerning the protection of the said data.You are also informed that transfers of personal data outside the European Union are lawful if the transfer is necessary for the performance of a contract between the data subject and the controller or for the implementation of pre-contractual measures taken at the data subject’s request, if the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person, or if the data subject has explicitly consented to the proposed transfer, after having been informed of the risks that such a transfer could entail for them due to the absence of an adequacy decision and of appropriate safeguards.A copy of the reference documents referred to in this paragraph may be obtained (free of any information considered to be commercially sensitive or confidential or covered by business secrecy) from the contact mentioned in the paragraph above “What are your rights and how can you exercise them?”.

8. What are the links between the website and the social media pages and third-party websites?

8.1 Please note that the restaurant’s digital media (in particular the website or the restaurant’s social media pages) may provide or contain links to third-party websites, including social media websites. The restaurant exercises no control over the activity of these websites and the policies they apply regarding the protection of your personal data and your rights. You are advised to examine the safeguards offered by these websites before any interaction with them. In this respect, your attention is drawn to the fact that the personal data protection policy of these websites may differ from this data protection policy of the website and that it is for you to familiarise yourself with it.8.2 If you post content disclosing your personal data on the internet, and in particular on social media, including on the restaurant’s social media pages, this content may be accessible to any internet user, and collected or used by third parties, for purposes that do not fall within the restaurant’s responsibility. In any event, the restaurant cannot be held liable in the event that the processing of personal data carried out via one of these third-party websites contravenes the applicable legal and regulatory provisions.

9. May this data protection policy be amended?

9.1 This data protection policy may be amended at any time, and such amendments will take effect on the date of publication of the corresponding update.9.2 In the event of an amendment, the new data protection policy will be published online on the website in the dedicated section.9.3 We therefore invite you to consult it regularly.Date of last update: 27 August 2026

Contents