Privacy Policy

Last updated: 1 January 2026. BistroNova SARL ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

BistroNova SARL is the data controller responsible for your personal data. Our registered address is 24 Rue des Gourmets, 75007 Paris, France. For all data-related enquiries, please contact our Data Protection Officer at privacy@bistronova.com.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: first name, last name.
• Contact Data: email address, phone number, postal address.
• Reservation Data: booking date, time, party size, dietary requirements, and special requests.
• Transaction Data: payment confirmation reference (we do not store card details).
• Technical Data: IP address, browser type, operating system, and pages visited, collected via cookies.
• Marketing Data: your preferences regarding receiving marketing communications from us.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your reservations and event bookings.
• To communicate with you regarding your booking, including confirmations and reminders.
• To fulfil gift card orders and deliver purchased services.
• To send you marketing communications (only with your explicit consent).
• To comply with legal obligations and resolve disputes.
• To improve our website and the quality of our services through analytics.

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR Article 6:

• Contract performance: to process reservations and deliver services you have requested.
• Legitimate interests: to improve our services and ensure the security of our systems.
• Consent: to send marketing emails. You may withdraw consent at any time.
• Legal obligation: to comply with applicable French and EU law.

5. Data Sharing

We do not sell or rent your personal data to third parties. We may share your data with the following categories of recipients solely to fulfil our services:

• Our reservation management system provider (data processor).
• Our email delivery service provider (e.g., for booking confirmations).
• Payment processors (we do not transmit full card data).
• Authorities where required by law.

All third-party processors are required to comply with GDPR and handle your data securely.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Reservation records are retained for 3 years for accounting and dispute resolution purposes. Marketing preferences are stored until you withdraw consent. Technical/analytics data is anonymised after 14 months.

7. Cookies

Our website uses cookies to improve your browsing experience and to analyse site traffic. Strictly necessary cookies are always active. Analytics and preference cookies are only placed with your consent, which you can manage via our cookie banner on your first visit. For full details, please see our Cookie Policy.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your data ("right to be forgotten").
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: withdraw marketing consent at any time via the unsubscribe link in any email.

To exercise any of these rights, please contact us at privacy@bistronova.com. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS. Access to personal data within our organisation is restricted on a need-to-know basis.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date. We encourage you to review this page periodically. For significant changes, we will notify you by email where we hold your contact details.

11. Contact Us

Data Protection Officer — BistroNova SARL
24 Rue des Gourmets, 75007 Paris, France
Email: privacy@bistronova.com
Tel: +33 1 23 45 67 89