Privacy

1. Preamble

Le Chardon d'Écosse takes the protection of its customers' and visitors' personal data very seriously. This policy explains how your data is collected, used and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

2. Data controller

The data controller is Le Chardon d'Écosse, Cour du Pré Carré, 74000 Annecy.

3. Data collected

We collect the following data:

• Bookings: last name, first name, email address, phone number, date and number of guests (via Zenchef).
• Private-event form: name, email, phone, event type and message.
• Browsing: technical data (IP address, browser, pages visited) for anonymous audience measurement.

4. Purposes

• Manage your bookings and private-event requests.
• Reply to you by email or phone.
• Improve the content and usability of the site.
• Meet our legal and tax obligations.

5. Legal basis

Processing relies on the performance of pre-contractual measures at your request (bookings), your consent (non-essential cookies) or our legitimate interest (anonymous audience measurement, site security).

6. Recipients

Your data is never sold. It is accessible to our team and our technical subcontractors (notably Zenchef for bookings), bound by a strict duty of confidentiality.

7. Retention

• Bookings: 3 years from the last contact.
• Form requests: 3 years from the last interaction.
• Browsing data: 13 months maximum.

8. Your rights

Under the GDPR, you have the following rights over your data:

• Right of access, rectification and erasure.
• Right to restriction and portability.
• Right to object to processing.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the CNIL (www.cnil.fr).

To exercise your rights, contact us via the contact page with your request.

9. Security

We implement appropriate technical and organisational measures to safeguard your data and prevent unauthorised access.

10. Cookies

To learn more about how cookies are used, see our cookie policy.