Privacy
This site shows you the menu, the opening hours and the phone number. It asks you for two things at most: what we need to answer you when you ask for a table, and what we need to send you a gift voucher when you buy one.
No cookies, and therefore no banner
Nothing is stored in your browser: no cookies, no social network button, no embedded map, and the fonts are served from this site rather than from an outside server. That is also why no window asks you to accept anything.
If you buy a gift voucher, you pay on Stripe's page. That page belongs to Stripe and follows its own rules.
What the site counts
How many pages are opened each day: which one, in which language, on a phone or a computer, and what kind of place visitors come from (a search engine, a social network, another site or a direct link). It also counts taps on the phone number and on the directions link. These are daily totals, with no IP address, no identifier and no address of the page you came from: nobody can tell who opened what, or recognise you from one visit to the next.
On this demonstration version, nothing is counted.
What a table request records
Your name, your phone number, your email address, the date, the time, the number of guests, and the word you leave if you leave one. Nothing more: there is no other field, and none is hidden.
On this demonstration version, the form sends nothing: your request stays in your browser and reaches neither the restaurant nor any server.
What they are for
To answer you when you ask for a table, by email or by phone, and to send you the acknowledgement. For nothing else: no advertising, no newsletter, no resale, no profiling. The legal basis is the restaurant's legitimate interest in answering a request you addressed to it.
For how long
Twelve months, then deletion. Deleting is not left to anyone's goodwill: it is scheduled in the database and runs on its own, every day.
What buying a voucher records
Your email address, the amount, the name of the person you are giving it to, yours if you write it, and your message. You type your card on Stripe's page: the restaurant neither sees nor keeps it.
This information is used to write the voucher, send it to you, check it at the restaurant, and refund you if you ask. The legal basis is the contract of sale.
The database deletes the voucher and what goes with it two years after it expires, and an order that was never paid after seven days. Stripe keeps a record of the payment for as long as the law requires of it.
A voucher paid at the restaurant can also be sent to you by email. The address you give is used for that alone, and is deleted with the voucher.
On this demonstration version, nobody pays: the voucher is created in your browser and reaches neither the restaurant nor Stripe.
Who sees them
The owners of the restaurant, and the person who maintains the site. The data is hosted on servers located in Europe, and the emails are carried by a European sending service. Nobody else receives it.
If you buy a voucher, Stripe collects the payment and receives your email address with it. Stripe is responsible for your card details under its own privacy policy, and may process them outside the European Union with the safeguards the GDPR provides.
What we do about robots
Two discreet things, never a puzzle to decipher. An invisible field, which only a robot fills in. And a counter, which keeps a fingerprint of your connection for two days — not your address, an unreadable digest — to spot a burst of requests. After that, nothing remains.
What the host sees
Like any site, this one is served by a host that keeps technical logs — IP address, date, page requested — for the security and the proper working of the server. The restaurant does not use them.
Who is responsible
The processing of this site's data is carried out by:
- Name
- Le Kozy (SARL)
- Registered office
- 95 avenue du Stade, 73700 Bourg-Saint-Maurice, France
- lekozy-bsm@outlook.fr
Your rights
You can ask at any time to see what concerns you, to have it corrected, or to have it deleted without waiting for the twelve months — an email to lekozy-bsm@outlook.fr is enough, and there is no form to fill in for that. You can also refer the matter to the CNIL, the French data protection authority, at cnil.fr.