Privacy
This site shows you the menu, the opening hours and the phone number. It asks you for two things at most: what we need to answer you when you ask for a table, and what we need to send you a gift voucher when you buy one.
No cookies, and therefore no banner
The site stores nothing in your browser: no cookies, no social network button, no embedded map. It serves its own fonts instead of loading them from an outside server. That is why no window asks you to accept anything.
If you buy a gift voucher, you pay on Stripe's page. That page belongs to Stripe and follows its own rules.
What the site counts
The site counts the pages opened each day: which one, in which language, on a phone or a computer, and where visitors come from (a search engine, a social network, another site or a direct link). It also counts taps on the phone number and on the directions link. It keeps only daily totals, with no IP address, no identifier and no address of the page you came from: nobody can tell who opened what, or recognise you from one visit to the next.
What a table request records
Your name, your phone number, your email address, the date, the time, the number of guests, and your message if you leave one. The form asks you for nothing else.
What they are for
To answer you when you ask for a table, by email or by phone, and to send you the acknowledgement. The restaurant uses them for nothing else: no advertising, no newsletter, no resale, no profiling. The legal basis is the restaurant's legitimate interest in answering a request you addressed to it.
For how long
Twelve months. The database then deletes them by itself: it sorts them out every day, with nobody having to think about it.
What buying a voucher records
Your email address, the amount, the name of the person you are giving it to, yours if you write it, and your message. You type your card on Stripe's page: the restaurant neither sees nor keeps it.
This information is used to write the voucher, send it to you, check it at the restaurant, and refund you if you ask. The legal basis is the contract of sale.
The database deletes the voucher and what goes with it two years after it expires, and an order that was never paid after seven days. Stripe keeps a record of the payment for as long as the law requires of it.
A voucher paid at the restaurant can also go out by email. The address you give is used for that alone, and goes when the voucher goes.
Who sees them
The owners of the restaurant, and the person who maintains the site. The data stays on servers located in Europe, and a European sending service carries the emails. Nobody else receives it.
If you buy a voucher, Stripe collects the payment and receives your email address with it. Stripe is responsible for your card details under its own privacy policy, and may process them outside the European Union with the safeguards the GDPR provides.
What we do about robots
The site protects itself without putting you through a test. An invisible field catches robots, the only ones that fill it in. A counter keeps an unreadable fingerprint of your connection for two days, without your address, to spot a burst of requests; after that, nothing remains.
What the host sees
As with any site, the host keeps technical logs (IP address, date, page requested) for the security and the proper working of the server. The restaurant does not use them.
Who is responsible
The processing of this site's data is carried out by:
- Company name
- EMAITZA (SARL)
- Trading name
- Le Kozy
- Registered office
- 95 avenue du Stade, 73700 Bourg-Saint-Maurice, France
- lekozy-bsm@outlook.fr
Your rights
You can ask at any time to see what concerns you, to correct it or to have it deleted without waiting for the twelve months. An email to lekozy-bsm@outlook.fr is enough, with no form to fill in. You can also refer the matter to the CNIL, the French data protection authority, at cnil.fr.