PERSONAL DATA PROTECTION POLICY

Summary


Mmm! is committed to protecting your personal information and being clear and transparent about what information we collect and how we use it. This policy explains how any personal information we collect when you use our website or digital services, or that you provide to us, will be processed by us.


Please read the following policy carefully to understand our views and practices regarding your personal information and how we will treat it.


1- Who we are and how we can be contacted


2- Our websites covered by this personal data protection policy


3- Other policies you should read


4- Information we may collect from you


5- Information about our marketing communication


6- Information we may collect about you from other places


7- Where we store your personal information


8- Sharing your personal information


9- International transfers of your personal data


10- How long will personal information be kept by us


11- Your rights under data protection legislation


12- What you can do if you’re not happy with how we use your information


13- About Data Security


14-Changes to our Personal Data Protection Policy


1. Who we are and how we can be contacted


Our full company name is Mmm! (hereinafter referred to as “Le Fooding”) and when you use our website or our services, we act as the Data Controller. If you need to contact us, you have a number of options, you can:


* Email us at contact@lefooding.com


* You can send us a letter addressed to Mmm!, Alexandre Cammas, at 25 boulevard de Bonne Nouvelle 75002 Paris


* You can contact us by using our contact form on our website (INSERT LINK)


* You can also contact us by telephone at 09 54 15 38 69


2. Our websites covered by this personal data protection policy


The information set out in this privacy policy is applicable to the following websites:


lefooding.com


3. Other policies and information we encourage you to read


While this Privacy Policy contains all the information you need on how we collect and use your personal information on our websites, there is information in some other places which we encourage you to read.


Our Cookie Policy


Linked Platforms


Our Cookie Policy


When you use our website and/or other digital services provided by us, information can be collected through cookies to distinguish you from other users of our website and other digital products and services. We have a separate Cookie Policy which explains our use of cookies and the purposes for which we use them. We encourage you to read our Cookie Policy here (INSERT LINK).


Linked platforms


Our site may contain links to and from the websites and digital platforms of our partner networks, advertisers, affiliates and social media pages. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.


4. Information we may collect from you


This section sets out:


* how we collect your personal information;


* the categories of data that we collect;


* a description of how we plan to use the information we collect;


* the legal basis that we will rely on to process information collected;


* how long we will hold the information collected; and


* specific types of data


We may collect and hold the following information about you:






Retention period

If you are a competition winner, we will delete any data collected no later than 6 months after the date we send you your prize. Any other data collected will be deleted 3 months after competition or promotion closure.

We will retain Account Data for as long as you have an account with us. If you do not access your account for more than 24 months, we will delete your account data so that we do not keep information for longer than is necessary. You can of course, create a new account if you like.

We will retain reservation data for three years following your last dining experience. If you provide us with new information, we will update these elements.

We do not obtain any Location Data and therefore we do not keep them.

We will hold on to Communication Data for as long as it is necessary to enable us to deal with the matter relating to that communication. Once your matter has been dealt with, we will delete Communication Data within 6 months.

We will not keep Marketing Data more than 3 years after our last contact.


Voluntary Information


When you provide us information (for example, the information set out in the scenarios above), in some cases we may ask you for additional, voluntary information. This information will be identified as optional and is used to help us better understand our customers and tailor our services to them.


Statistical Information


We also collect and use aggregated data such as statistical or demographic data (“Aggregated Data”). Aggregated Data may be derived from your personal information but does not reveal your identity in any way. For example, we may aggregate your Usage and Device Data to calculate the percentage of our website users accessing a specific feature of our website. Aggregated Data is used for our own business purposes only.


Sensitive Personal Information


While we never request sensitive personal data, we do have sections on our websites where you can submit additional information or special requests, for example, when you make a reservation. This sensitive personal information might include special requests relating to handicaps or health conditions, such as food allergies for example. Only submit information you are comfortable providing and always bear in mind that it may be sensitive information. If you submit information for a reservation, this information will be kept confidential and used only to process your reservation and your special request.


Children and Personal Information


Our website is not intended for use by children and we do not knowingly collect data relating to children. If we become aware that we are holding any information about children under the age of 15, we will take any actions necessary to comply with data protection legislation, including if appropriate, deleting the information. If you become aware that your underage child has provided their personal information to us, without your consent, please let us know as soon as possible by emailing us at contact@lefooding.com so that we can take appropriate action.


5. Information about our marketing communications


You will receive marketing communications or newsletters from us only if you wish it.


In this context, we will use the information you provide us, usually just your name and email address.


In any case, you can unsubscribe or put an end to direct marketing from us at any time either:


(i) by clicking on the unsubscribe option at the bottom of each marketing communication we send you; and/or


(ii) by contacting us by email or letter by using any of the contact details set out in section 1.


We may send you marketing communications until you choose to unsubscribe from receiving them. However, if we have not heard from you or notice that you have not opened our emails for a period of 3 years, we will remove your details from our database. There’s nothing stopping you from subscribing again at any time.


We may also use your Usage and Device Data to make online suggestions and recommendations to you about goods or services that may be of interest to you. This is necessary for the legitimate interest of our business in developing our products and services and growing our business.


Marketing for Restaurants


When you make a reservation at a restaurant, you may also opt to receive marketing communications from the Restaurant. We always ask for your explicit consent before authorizing the Restaurant to send you their marketing material. The Restaurants only have access to data that you have agreed to send them.


All marketing communications coming from the Restaurants are subject to their own personal data protection policies and we encourage you to read them for further information.


6. Information we collect about you from other places


To enable us to provide you with our services, we may receive personal information about you from other sources, including:


*Information from our web servers’ logs, for example information about your computer, such as your IP address, operating system and browser type. We may also collect information on the searches you carry out on our website and your interaction with communications we send you, for example, when you open email communications (“Usage and Device Data”). This information is used by us for system administration and to analyze how people are using our websites and digital platforms. It also helps us to provide the best online infrastructure for your online activities.


The legal basis for this processing is our legitimate interests, namely monitoring and improving our website, products and services.


* As mentioned above, we collect information using cookies or other similar technologies stored on your device about how you use our website, digital products and services. Cookies contain information that is transferred to your computer’s hard drive or to your cellphone/tablet. They help us to improve our websites and deliver a better and more personalized service to you. You can read our Cookie Policy here [INSERT LINK].


The legal basis for this processing is your consent, or, where applicable, our legitimate interest in the monitoring and improvement of our website, products and services.


* Our website may enable you to share you experience and connect with us through third party social networks such as Facebook and Twitter. We may collect this information from our social media sites, including likes, shares and tweets, and about the content on social networking sites. We do not control the privacy of the information you provide on social media networks and the privacy policies of those social media networks will apply when using their services.


7. Where we store your personal information


All information you provide to us is stored on secure servers within the EEA (European Economic Area). However, we use MailChimp to manage our newsletters and marketing communications, which is potentially located in the United States.


While we are committed to keeping your personal information secure, the transmission of information online via the internet is not completely secure. We, together with our service provider, will do our best to protect your personal information but information provided is at your sole risk.


8. Sharing your personal information


We only share your personal data with people who have a need to know such information to perform their responsibilities.


We may share your personal information with the following:

  • To subcontractors


Le Fooding may share your personal data with sub-contractors who help us process your request or provide its services to you, including IT and system administration services, such as hosting and email services. The reservation service is subcontracted to the company La Fourchette who will process Reservation Data to this end.


These subcontractors are legally obligated to keep the personal information they may have received confidential and secure and to use your personal information on the basis of our instructions only.

  • To third parties


(i) Google


Google provides you with services on our site (Google Maps, help with research …). In this context, Google may collect data such as search terms, your IP address and GPS coordinates. Google’s Privacy Policy applies https://www.google.com/policies/privacy/


(i) For legal reasons


If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our general terms and conditions or any other agreements; or to protect the rights, property or safety of the [NF1] , our customers, or others. In this context or to the extent that it may be necessary, we may disclose your personal information to our professional advisors who are under a duty of confidentiality.


9. International Transfers of Personal Data


We will only transfer your data outside of the EEA if we have signed a contract containing clauses from the European Commission, for service providers established outside of the EU in order to guarantee the same or similar level of protection to that of your home country or if the service provider in question has adhered to Privacy Shield for service providers based in the United States.


10. How long will personal information be kept by us?


As a rule, we will not hold your personal information for any purpose or purposes for longer than is necessary to fulfill the purposes we collect it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For more specific retention periods, please see section 4 above.


To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.


In some circumstances, you can ask us to delete your data: see your right to be deleted below for further information.


In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes. In this case, we may use this information indefinitely without further notices to you.


11.Your rights under data protection legislation


Data protection legislation provides you with certain rights when it comes to the processing of your information. These are the right to:


The right to be informed


The right to access your information


The right to correct your information


The right to delete your information


To right to restrict processing


The right to transfer information


The right to object to processing


The right to give instructions about your data after your death


For further information on your rights


The right to be informed


You have the right to be informed about how we collect and process your personal information, including who we are, how we use your personal information and your rights in relation to your personal information. We have gathered all the information you need in this privacy notice.


The right of access to your information


You have the right to access the personal information we have on you. We can confirm whether or not your information is being processed and provide you with access to your personal information.


The right to correct your information


If your personal information is inaccurate or incomplete, you are entitled to have that information corrected and updated. If we have disclosed your information to any third parties, where possible, we will inform them of any updates you provide to us. You can update the personal information we hold about you by contacting us using any of the contact method details in this Privacy Policy.


The right to delete your information


You have the right to request the deletion or removal of your personal information where there is no reason for us to continue processing it. The circumstances in which you can request the right to be forgotten include situations where the information is no longer necessary in relation to the purpose for which it was originally collected or processed and where you have withdrawn your consent to processing.


There are some limited circumstances where the right to be forgotten does not apply. If you want to know more, just ask.


The right to restrict processing


You have the right to ‘block’ or suppress the processing of your personal data. If you request we suppress your personal information, we will stop any further processing of it.


The right to transfer information


If you wish to move or transfer your personal information to another service provider or copy your information for your own purposes, you have the right to have your information transferred to another person.


The right to object


You have the right to ask us not to process your personal information for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your information for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your information. You can also exercise the right at any time by contacting us at contact@lefooding.com.


The right to define the outcome of your personal information after your death


You also have the right to give us instructions on what you wish us to do with your personal information after your death. We will register it and if we hear that such an event occurred, we will comply with your instructions.


For further information on your rights


You can find further information on your data protection rights from the CNIL at cnil.fr.


13. What you can do if you’re not happy


We are committed to protecting and respecting your privacy. However, if you’re not happy with how we collect or process your information or just want some further information on your rights, you can contact us in the following ways:


* You can email us at contact@lefooding.com,


* You can send us a letter addressed to Mmm!, Alexandre Cammas, at 25 boulevard de Bonne Nouvelle 75002 Paris,


* You can contact us using our contact form on our website [INSERT LINK]


* You can also contact us by phone at 09 54 15 38 69


We will work with you to resolve any issues you may have and aim to answer any questions raised by you as soon as possible.


If you feel, after having contacted us, that your rights were not respected or that access to your information wasn’t in conformity with the data protection legislation, you can submit a complaint to the CNIL.


13. About Data Security


Le Fooding has implemented measures to protect the privacy, security and integrity of your personal data. Access to personal data is restricted to those employees and service providers who need to know this information and who have been trained to comply with rules on confidentiality.


[NF2] ensures that your personal data is not altered, damaged or accessed by unauthorized third parties.


14. Changes to our Privacy Policy


We may change our policy from time to time. Any changes we make to this policy in the future will be posted on this page. If you have an online account with us, we may notify you of any changes by email or through your account the next time you log on.