Privacy Policy
Les Grands Buffets builds strong and lasting relationships with its customers, partners, and employees based on mutual trust: ensuring the security and confidentiality of their personal data is an absolute priority for Les Grands Buffets.
Les Grands Buffets complies with French and European regulatory and legislative provisions relating to the protection of personal data.
Les Grands Buffets applies an extremely strict privacy policy to guarantee the protection of the personal data of users of its websites and other applications:
- Each user remains in control of their data. It is processed in a transparent, confidential, and secure manner.
- Les Grands Buffets is committed to a continuous process of protecting its users’ data, in compliance with the French Data Protection Act of January 6, 1978, as amended (hereinafter “LIL”) and the General Data Protection Regulation (EU) of April 27, 2016 (hereinafter “GDPR”).
- Les Grands Buffets has a Data Protection Officer registered with the CNIL.
DEFINITIONS
“Personal Data” means any information relating to an identified or identifiable natural person; an “identifiable natural person” is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements proper to their physical, physiological, genetic, mental, economic, cultural or social identity (hereinafter referred to as “Data Subject“).
“we” or “our” refers to the Les Grands Buffets entity that operates personal data processing activities.
“Data Controller” means the natural or legal person who determines the purposes and means of the processing.
“Services” refers to the services offered on the Internet Portal and/or within one of our establishments.
“Processor” means the natural or legal person who processes personal data on behalf of the Data Controller.
“you” means any user/visitor to the Internet Portal.
“Portal” refers to this website and/or, where applicable, mobile application, as well as sub-sites, mirror sites, portals, and related URL variations where applicable.
PURPOSE OF THIS POLICY
We attach great importance to the protection of your personal data.
We have developed this policy to inform you of the conditions under which we collect, process, use, and protect your personal data. Please read it carefully to understand which categories of personal data are collected and processed, how we use this data, and with whom we may share it. This policy also describes your rights and how you can contact us to exercise them or to ask any questions you may have about your personal data.
This Policy may be modified, supplemented, or updated in order to comply with any legal, regulatory, case-law, or technical developments. However, your personal data will always be processed in accordance with the policy in force at the time of collection, unless a mandatory legal requirement dictates otherwise and has retroactive application.
This policy is an integral part of the General Terms of Use of the Internet Portal.
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The controller of the personal data processing is located at Les Grands Buffets, Giratoire de la Liberté 11100 in Narbonne, and can be reached at the following address: responsabletraitementdonnees@lesgrandsbuffets.com
COLLECTION & ORIGIN OF PERSONAL DATA
We may collect your personal data directly (notably via collection forms available on our Internet Portal) or indirectly (notably via our service providers and/or our Portal’s technologies).
We undertake to obtain your consent and/or allow you to object to the use of your data for certain purposes, whenever necessary. Furthermore, you can optionally consent to receive personalized communications and offers from us. In this context, to withdraw your consent, simply click on the unsubscribe link in the last personalized communication or offer received from us. In all cases, you will be informed of the purposes for which your data is collected via the online data collection forms and via the Cookies Management Policy.
Furthermore, any credit card payment potentially offered on the Internet Portal will be handled by our payment provider specializing in secure online transactions. The transmission of your personal data, such as your credit card number, expiry date, and CVV, will be done via a secure link directly to their dedicated platform. Online payments will be secured by an additional layer of security provided by the 3DS authentication process.
TYPES OF PERSONAL DATA WE COLLECT AND USE
We may collect and process, in particular, the following types of personal data:
– the information you provide by filling in forms when making a reservation on the Internet Portal, particularly for marketing purposes to send you previews of information relating to reservations at Les Grands Buffets (e.g.: title, surname, first name, etc.);
– the information you provide for authentication and internet browsing purposes (e.g.: IP address, cookies, etc.);
– the information you provide for the purposes of booking and paying for a service or Service (e.g.: telephone number, email and postal address, credit card number, etc.);
– the information you provide for the purposes of managing your application and, where applicable, your recruitment process (e.g.: CV, information relating to your education, your professional experience, awards, diplomas, certificates, testimonials, languages spoken, salary expectations, etc.);
– the information you provide for the purposes of managing a request or a service;
Personal Data identified by an asterisk in the collection forms is mandatory because it is necessary to process the request made. Failure to provide this mandatory information will mean that these operations cannot be processed.
PERSONAL DATA THAT WE MAY COLLECT AUTOMATICALLY
We may collect certain information automatically when you visit the Internet Portal, in particular to facilitate its use and to better personalize it, as well as our products and Services, according to your interests and needs. We undertake to obtain your consent whenever necessary. For more information, please consult our Cookies Management Policy.
After obtaining your consent, we may collect certain information automatically when you consult the Internet Portal for the purposes of personalizing and improving your experience. We collect this information through various means, namely:
Cookies
A “cookie” is a small information file sent to your browser when you are on our Portal and saved on your terminal. This file includes information such as domain name, Internet access provider, operating system, as well as the date and time of user access. Cookies do not risk damaging your terminal in any way.
Cookies are not used to determine the identity of an individual who visits our Site. Cookies allow us, in particular, to determine your geographical location and the display language in order to improve your navigation. They also allow us to process information concerning your visit to the Site, such as pages viewed and searches performed, in order to improve the Site’s content, follow your interests, and offer you the most suitable content.
If you do not wish to receive cookies from our Portal, you can configure your choice using our management tool or by directly configuring your browser.
For more information, please consult our Cookies Management Policy.
IP Addresses
An IP address is a unique identifier that certain electronic devices use to identify and communicate with each other on the Internet. When you consult the Site, we may use the IP address of the device you use to connect to it. We use this information as part of our statistics to understand from which geographical region visitors to the Internet Portal come.
Statistics
The Portal may use Google Analytics to generate statistical reports. These reports tell us, for example, how many users have visited the Internet Portal, which pages were visited, and from which geographical area the Site’s users come. The information collected using statistics may include, for example, your IP address, the website from which you arrived on our Site, and the type of device you use. Your IP address is masked on our systems and will only be used if necessary to resolve technical problems, to administer the Portal, and to understand its visitors’ preferences. Information relating to traffic on the Portal is only available to authorized personnel. We do not use any of this information to identify visitors and we do not share it with third parties.
PURPOSES FOR WHICH WE USE PERSONAL DATA
We may use your personal data in particular for the following purposes:
| No. | Purpose of processing | Legal basis | Data retention period |
|---|---|---|---|
| 1 | Provide the services and benefits ordered on the Internet Portal | Execution and management of our contractual relationship with you | Up to 5 years from the last activity or the end of our contractual relationship |
| 2 | Respond to your requests for information, contact, or research | Execution and management of our contractual relationship with you
Our legitimate interest in communicating and responding to your solicitations and to improve the quality and operational excellence of the services we offer you |
Up to 12 months after the last contact |
| 3 | Send you offers and communications for our products and services | Our legitimate interest in improving the quality and operational excellence of the services we offer you
Your consent to receive communications and offers from our partners |
Up to 5 years from data collection or the last contact from you |
| 4 | Management of application files, recruitment processes, and any hiring procedures | Execution of our contractual relationship
Our legitimate interest in managing applications and recruitment processes for profiles adapted to our needs Compliance with certain legal obligations, particularly in social matters Your consent to the retention of your candidate file |
For the duration of the recruitment procedure, extended where applicable by a period of 2 years after obtaining your consent
In the context of recruitment, during the term of employment |
| 5 | Personalize and improve your experience on our Portal | Our legitimate interest in improving the quality and operational excellence of the services we offer you | Up to 12 months after the last contact |
| 6 | Retain data relating to your sales receipts and/or invoices for our tax or accounting obligations | Compliance with certain legal obligations | Up to 10 years |
RETENTION PERIOD FOR YOUR PERSONAL DATA
We will retain your personal data for a period not exceeding that necessary for the purposes for which it is collected and processed (see tables above).
At the end of this period, strictly relevant data may be retained (i) for evidentiary purposes (in the event of a dispute or inspection by authorized bodies), (ii) for the purposes of complying with legal or regulatory limitation periods and/or (iii) to comply with a contractual obligation with our customers.
COMMUNICATION OF PERSONAL DATA
The security and confidentiality of your personal data are of great importance to us. That is why we restrict access to your personal data only to those members of our staff who need to know it in order to process your request or provide the requested service.
We do not disclose your personal data to unauthorized third parties. We may, however, share your data with:
– staff of processors whom Les Grands Buffets may use for the management of services (e.g.: technical hosting and maintenance providers, consultants, etc.);
– partners authorized to provide you with certain services offered on the Internet Portal;
We ensure that these recipients implement appropriate security and confidentiality measures so that your personal data is protected.
We do not authorize these recipients to use or disclose your personal data, except as necessary to perform services on our behalf or to comply with legal obligations. Furthermore, we may share personal data about you (i) if the law or a legal procedure requires us to do so, (ii) in response to a request from public authorities or other officials, or (iii) if we consider that the transmission of this data is necessary or appropriate to ensure the safety of persons or to protect the public and to protect our rights and property as well as those of our customers.
SENSITIVE PERSONAL DATA
As a general rule, we do not collect sensitive personal data through our Internet Portal. “Sensitive personal data” is considered to be any information concerning racial or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, health data, or data concerning a natural person’s sex life or sexual orientation. This definition also includes personal data relating to criminal convictions and offenses.
In the event that the collection of such data is strictly necessary to fulfill the purpose of the processing carried out, we will do so in accordance with the requirements of local legislation on personal data protection and, in particular, with your prior explicit consent and under the conditions described in this Privacy Policy.
PERSONAL INFORMATION AND MINORS
The Portal is intended for adults capable of entering into obligations in accordance with the legislation of the country in which you are located.
In France, minor users under the age of 15 or incapable persons must obtain the prior consent of their legal guardian before entering their data on the Internet Portal.
YOUR RIGHTS
Les Grands Buffets undertakes to facilitate the exercise of your rights in accordance with the applicable regulations. Below is a table summarizing the different rights you have:
| RIGHT OF ACCESS AND RECTIFICATION | You can request access to your personal data that we have about you. You can also request the rectification of personal data that is inaccurate, or that incomplete personal data be completed.
You also have the right to know the sources of this personal data. |
| RIGHT OF ERASURE | Your right to be forgotten authorizes you to request the deletion of your personal data when:
(i) the personal data is no longer necessary in relation to the purposes for which it was collected and processed; (ii) you decide to withdraw your consent (in cases where your consent was collected as the legal basis for processing). This withdrawal does not affect the lawfulness of the processing before its implementation; (iii) you object to the processing of your personal data; (iv) your personal data has been processed unlawfully; (v) your personal data must be erased to comply with a legal obligation; or (vi) their deletion is required to guarantee compliance with applicable legislation. |
| RIGHT TO RESTRICTION OF PROCESSING | You can also request the restriction of the processing of your personal data if:
(i) you contest the accuracy of your personal data; (ii) we no longer need your personal data for the purposes of processing; and, (iii) you have objected to the processing of your personal data on legitimate grounds. |
| RIGHT TO OBJECT | You have the right to object (right of “withdrawal”) to the processing of your personal data (particularly profiling or commercial communications). When we process your personal data based on your consent, you can withdraw your consent at any time.
You can also at any time ask us no longer to receive commercial information messages from us by contacting us directly and free of charge, or by using the unsubscribe link included in any prospecting that we may send you by email or by sending an email to the address indicated below. This objection is without prejudice to the legality of the mailings carried out before its implementation. |
| RIGHT TO LODGE A COMPLAINT | You may decide to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) via the following link: www.cnil.fr. |
To exercise these rights, you can contact us via the address responsabletraitementdonnees@lesgrandsbuffets.com. We may ask you for additional information in order to identify you and be able to process your request.
SECURITY
We implement all technical and organizational measures to ensure the security and confidentiality of personal data processing.
In this respect, we take all necessary precautions, given the nature of the personal data and the risks presented by the processing, to preserve the security of the data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorized third parties (physical protection of premises, authentication processes with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, etc.).
LINKS TO OTHER SITES
We may very occasionally provide links to other websites for convenience and information. These partner websites operate independently of our sites and are not under our control. These sites operated by third parties may have their own privacy notice or terms of use, which we strongly suggest you review. We decline all responsibility for the content of these sites, for the products and services that may be offered there, or for any other use.
UPDATE OF OUR PRIVACY POLICY
We may update or modify this policy from time to time in the event that our Services or our legal obligations evolve substantially. In the event that we make significant changes to this policy, we will publish an information note on our Portal at the time the changes in question come into effect. Check this page regularly to monitor changes.
If you have any questions or comments regarding this policy, please do not hesitate to contact us at
