Privacy policy

Data controller Le 27 Gourmand, operated by BADIE (SARL), 33 rue de Turin, 75008 Paris, France. Restaurant: 27 boulevard des Batignolles, 75008 Paris. Contact: 27gourmand@gmail.com, +33 6 52 10 97 21. The data we collect Reservation: first name, last name, email, phone, date, time and party size. If you wish, you may add a message, a special occasion, the presence of children, or allergies. Those fields are optional. Allergies and dietary needs: this information relates to your health. We use it solely to adapt your meal, only because you volunteer it, and it is shared with no one beyond our kitchen. Customer record: your contact details, your number of visits and the date of the last one, so that we welcome you properly when you return. Payment: when a card hold is required, it is handled directly by Stripe. No banking data passes through our servers or is stored by us. Audience measurement: see the Cookies section below. Why we use it, and on what basis Managing your reservation and sending the related emails, confirmation, reminder and attendance confirmation: performance of your reservation. Keeping a customer record and your visit history: our legitimate interest in welcoming you well and maintaining the customer relationship. Occasionally sending you news about the restaurant if you are already a customer: our legitimate interest, with an unsubscribe link in every message and the right to object at any time. Measuring site audience and the effectiveness of our ads: your consent, collected through the cookie banner. Keeping accounting records: a legal obligation. Who has access to your data Your data is never sold, rented or exchanged. It is accessible to the management and staff of the restaurant, and hosted or processed by our technical providers: Vercel, website hosting, servers located in Ireland. Supabase, reservation database, servers located in Ireland. Stripe, processing of card holds and payments. Google, sending our emails through Gmail and, if you consented, audience measurement. Some of these providers are US companies. The data is hosted in the European Union, and any transfers are governed by the European Commission's standard contractual clauses or by the EU, US Data Privacy Framework. How long we keep it Reservations: three years after your last visit, then anonymised. Only figures with no link to your identity are kept for our statistics. Customer record: three years after your last visit or your last contact with us. Accounting records: ten years, as required by law. Cookies: thirteen months at most. Your choice, whether you accept or decline, is stored for six months, after which you are asked again. If you unsubscribe from our messages, we keep only your address on an opt-out list, so that we never write to you again. Cookies When you arrive on the site, no measurement cookie is placed. A banner offers you to accept or to continue without accepting, in a single click either way. Only cookies strictly necessary for the site to work and to remember your choice are used without consent, as the regulation allows. If you accept, we use Google Analytics to see which pages are visited and, where relevant, to measure whether our Google ads bring in reservations. We also use an audience measurement provided by Vercel, which sets no cookie and cannot identify you. You may change your mind at any time through the "Cookies" link at the bottom of every page. Your rights You have the right to access, correct, erase, object to, restrict and port your data, as well as to give instructions on what happens to it after your death. Write to 27gourmand@gmail.com and we will reply within one month. If our answer does not satisfy you, you may contact the French data protection authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or www.cnil.fr. Security The site is fully encrypted over HTTPS. Access to the reservation database is password protected and restricted to the restaurant. Daily backups are performed.