Le Fooding is committed to protecting your personal information and being clear and transparent about what information we collect and how we will use it. This policy explains how any personal information we collect when you use our website or digital services, or that you provide to us, will be processed by us.

Please read the following policy carefully to understand our views and practices regarding your personal information and how we will treat it.

1. Who we are and how we can be contacted
2. Our websites covered by this privacy policy
3. About our Privacy Department
4. Other policies you should read
5. Information we may collect from you
6. Information we collect about you from other places
7. Marketing Communications
8. Where we store your personal information
9. Sharing your personal information
10. International transfers
11. How long will personal information be kept by us
12. Your rights under data protection legislation
13. What you can do if you’re not happy with how we use your information
14. About Data Security
15. Changes to our Privacy Policy

Our full company name is MMM! (hereinafter referred to as “Fooding”) and when you use our website or our services, we act as the Data Controller. If you need to contact us, you have a number of options, you can:

• Email us at contact@lefooding.com
• You can send us a letter addressed to MMM! at 327, rue Saint-Martin 75003 Paris

When you submit a request, please describe your request with sufficient detail that allows Le Fooding to properly understand, evaluate, and respond to it.

The information set out in this policy is applicable to :

• the following website https://lefooding.com.
• The iOS app GUIDE FOODING® and the progressiv web app FOODING®

Everyone at Le Fooding is committed to protecting and respecting your privacy, we have a data protection Privacy Department who deals with all aspect of personal data at Le Fooding. You can contact our Privacy Department by sending an email to contact@lefooding.com.

While this Privacy Policy contains all the information you need on how we collect and use your personal information on our websites, there is information in some other places which we encourage you to read.

• Our Cookie Policy : When you use our website and other digital products and services provided by us, information can be collected through cookies to distinguish you from other users of our website and other digital products and services. We have a separate Cookie Policy which explains our use of cookies and the purposes for which we use them. We encourage you to read our Cookie Policy here
• Linked platforms : Our site may contain links to and from our websites and digital platforms of our partner networks, advertisers, affiliates and social media pages. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

This section sets out:

• How we collect your personal information;
• The categories of data that we collect;
• A description of how we plan to use the information we collect;
• The legal basis that we will rely on to process information collected;
• How long we will hold the information collected; and
• Specific types of data

We may collect and hold the following information about you:

1. Information you give to us when you enter a competition or promotion (« Competition Data »).
   Purpose/Activity : To enable us to send you further information about the competition or a prize if you are the competition winner. Unless we state otherwise when we collect your information, we will only use this information for managing and administer the competitions or promotions.
   Type of Data : Competition Data might include, for example, your name and you email.
   Lawful basis for processing : The performance of an agreement between you and us to enter the competition or promotion. Retention period : To enable us to send you further information about the competition or a prize if you are the competition winner. Unless we state otherwise when we collect your information, we will only use this information for managing and administer the competitions or promotions.
2. Information you provide us when creating a My Fooding account. We will ask for information that allow us to log you in and give you access to features like saving your favorites restaurants for later (« Account Data »)
   Purpose/Activity : Account Data will be collected in order to provide digital services to which you subscribed and communicate with you about it.
   Type of Data : Account Data might include your Name and Surname, your email address and a password to log into your account safely.
   Lawful basis for processing : The performance of an agreement between you and us to provide digital products and services will be used as the legal basis for processing Account Data
   Retention period : We will hold on to Account Data for as long as your account exists. If you don’t log into your account for more than 24 months we will erase Account Data. You can of course create a new account if you wish to.
3. Information you provide us when you communicate with us, e.g. by email or contact us form via our website (« Communication Data »)
   Purpose/Activity : This information is used to enable us to respond to or following up on your comments, queries or questions.
   Type of Data : Information may include your full name, your email address and other personal data you provide us to enable us to deal with your communication.
   Lawful basis for processing : We will use our legitimate interests in the assisting you and answering your communications as the legal basis for processing Communication Data.
   Retention period : We will hold on to Communication Data for as long as it is necessary to enable us to deal with the matter relating to that communication. Once your matter has been dealt with, unless we inform you otherwise, we will delete Communication Data within 3 years.
4. Information you give to us when you book a restaurant (« Booking Data for Restaurant »).
   Purpose/Activity : This information is used to enable us to provide you with restaurant booking services and complete your booking with the Restaurant. We also use this information to show you your past restaurant reservations and cancellations.
   Type of Data : We process personal information to facilitate your restaurant booking by providing your name, other reservation details or special request.
   Lawful basis for processing : The legal basis for this processing is to fulfil the agreement between you and Le Fooding or the booking partner in relation to your booking.
   Retention period : We retain your booking information for 3 years following your last dining experience. If you provide us with new information, we will update your details.
5. Information you give to us when you use one of  our localisation service, as instance when you use localisation to find a restaurant around you (« Localisation Data »).
   Purpose/Activity : Localisation Data are used to help you find the restaurants around you.
   Type of Data : We use geolocalisation system or ask you to enter a area like postal code or region. You can find more info in the Privacy Policy.
   Lawful basis for processing : The performance of an agreement between you and us to provide digital products and services will be used as the legal basis for processing Localisation Data
   Retention period : We don’t have access to Location Data so we don’t hold to it.

Voluntary Information
When you provide us information (for example, the information set out in the scenarios above), in some cases we may ask you for additional, voluntary information. This information will be identified as optional and is used to help us better understand our customers and tailor our services to them.

Statistical Information
We also collect and use aggregated data such as statistical or demographic data (“Aggregated Data”). Aggregated Data may be derived from your personal information but does not reveal your identity in any way. For example, we may aggregate your Usage and Device Data to calculate the percentage of our website users accessing a specific feature of our website. Aggregated Data is used for our own business purposes only.

Sensitive Personal Information
While we do not request sensitive personal data, we do have sections on our websites where you can submit additional information, for example, when you submit a review. If you submit information on these free text section, only submit information you are comfortable providing and always bear in mind that it may be sensitive information. If you submit reviews or feedback for our website, please remember that this information will be visible to others users of our website.

Children and Personal Information
This website is not intended for use by children and we do not knowingly collect data relating to children. If we become aware that we are holding any information about children under the age of 16, we will take any actions necessary to comply with data protection legislation, including if appropriate, deleting the information. If you become aware that your child (under 16) has provided their personal information to us, without your consent, please let us know as soon as possible by emailing contact@lefooding.com so that we can take appropriate action.

To enable us to provide you with our services, we may receive information from other sources including:

1. 1. We may collect your location data (« Location Data »)
      Purpose/Activity : This data is used by us to provide our location-based services (research of nearby restaurant). Type of Data : IP Address. Information from the GPS functionality of your mobile device. Lawful basis for processing : The legal basis for this processing is your consent. Retention period : No retention.
   2. We may collect information from our web servers’ logs (« Usage and Device Data »)
      Purpose/Activity : This information is used by us for system administration and to analyse how people are using our websites and digital platforms. It also helps us to provide the best online infrastructure for your online activities. From time to time we may also use your Usage and Device Data to make online suggestions and recommendations to you about goods or services that may be of interest to you. Type of Data : Information may include your connexion log, IP address, operating system and browser type, language preferences. We may also collect information on the searches you carry out on our website and your interaction with communications we send you, for example, when you open email communications. Lawful basis for processing : The legal basis for this processing is our legitimate interests, namely monitoring, improving our website, products and services and growing our business. Retention period : 1 year.
   3. We and our business partners collect information using cookies or other similar technologies stored on your device (« Behavioural Data »)
      Purpose/Activity : This information is used to analyse how you use our website, digital products and services. They help us to improve our websites, deliver a better and more personalised service to you, display relevant advertising. We may match your Behavioural Data with your Marketing Data to send you personalized notifications and/or newsletters. To reach this purpose we and our authorized partner can use technologies on our websites or digital service such as Data Management platform (DMP). Type of Data : Cookies contain information that is transferred to your computer’s hard drive. Information may include your display and search preferences, your search history, your location, the way you are surfing on /using our websites, products or newsletters such as mouse move, display duration and clicks) and your interests. Lawful basis for processing : The legal basis for this processing is your consent or, where relevant, our legitimate interests, namely monitoring and improving our website, products and services and offer you personalized content or newsletters. Retention period : Le Fooding will not keep this Data more than 13 month after the collect.

When you sign up for our newsletters or marketing communications we will use the information you have provided us, in principle your name and email address, to send you our newsletters, restaurant offers, promotional offers or any other communication you have requested.

In any case, you can unsubscribe or make stop direct marketing from us at any time either :

• By clicking on the unsubscribe option available at the website or at the bottom of each marketing communication we send to you; and
• By contacting us by email or letter using any of the contact details set out in this notice.

When you make a reservation at a restaurant, you may also opt to receive marketing communications from the Restaurant. We always ask for your explicit consent before authorizing the Restaurant to send you their marketing material. The Restaurants only have access to data that you have agreed to send them.

All marketing communications coming from the Restaurants are subject to their own personal data protection policies and we encourage you to read them for further information.

All information you provide to us is stored on secure servers within the EEA (European Economic Area). However, we use MailChimp to manage our newsletters and marketing communications, which is potentially located in the United States.

While we are committed to keeping your personal information secure, the transmission of information online via the internet is not completely secure. We, together with our service provider, will do our best to protect your personal information but information provided is at your sole risk.

We only share your personal data with people who have a need to know such information to perform their responsibilities. We may share your personal information with the following:

• Within Michelin Group – we may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries to the extent necessary for the same purposes of the initial processing set out in this policy. In particular, your contact data (identity, email address, interests) can be shared with the Michelin companies in order to get to know you better and to send you, whit your consent, marketing communications related to the newsletters.
• Service Providers – Le Fooding may share your personal data with sub-contractors who help us process your request or provide its services to you, including IT and system administration services, such as hosting and email services. The reservation service is subcontracted to the company La Fourchette who will process Reservation Data to this end.
  These subcontractors are legally obligated to keep the personal information they may have received confidential and secure and to use your personal information on the basis of our instructions only.

We may also share your personal information with third parties:

• For legal reasons
  If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions and other agreements; or to protect the rights, property, or safety of the Le Fooding Group, our customers, or others. In this context, we may disclose your personal information to our professional advisors who are under a duty of confidentiality.
• On the basis of your consent
  Third parties can collect information about you on our website, products or services via cookies or similar technologies, in order for example to provide personalised ads or to make profiling. These cookies will be accepted by you in accordance with our Cookie Policy.

If you consented to receive offers from our partners, we can also transfer your Marketing Data to third parties, in order to send you newsletters and marketing communications as mentioned above.

We will only transfer your data outside of the EEA if we have signed a contract containing clauses from the European Commission, for service providers established outside of the EU in order to guarantee the same or similar level of protection to that of your home country or if the service provider in question has adhered to Privacy Shield for service providers based in the United States.

As a rule, we will not hold your personal information for any purpose or purposes for longer than is necessary to fulfil the purposes we collect it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For more specific retention periods, please see section 5 and 6 above.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances you can ask us to delete your data: see your right to be deleted below for further information.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Data protection legislation provides you with certain rights, depending on your applicable law, when it comes to the processing of your information. These are the right to:

• The right to be informed
• The right to access your information
• The right to correct your information
• The right to delete your information
• The right to restrict processing
• The right to data portability (transfers your information) for
• The right to object to processing
• For further information on your rights

The right to be informed
You have the right to be informed about how we collect and process your personal information, including who we are, how we use your personal information and your rights in relation to your personal information. We have gathered all the information you need in this privacy notice.

The right of access your information
You have the right to access the personal information we have on you. We can confirm whether or not your information is being processed and provide you with access to your personal information.

The right to correct your information
If your personal information is inaccurate or incomplete, you are entitled to have that information corrected and updated. If we have disclosed your information to any third parties, where possible, we will inform them of any updates you provide to us. You can update the personal information we hold about you by contacting us using any of the contact methods details in this Privacy Policy.

The right to delete your information
You have the right to request the deletion or removal of your personal information where there is no reason for us to continue to process it. The circumstances in which you can request the right to be forgotten includes, where the information is no longer necessary in relation to the purpose for which it was originally collected or processed and where you have withdrawn your consent to processing.
There are some limited circumstances where the right to be forgotten does not apply – if you want to know, just ask.

The right to restrict processing
You also have the right to ‘block’ or suppress the processing of your personal information. If you request us to suppress your personal information, we will stop any further processing of it.

The right to data portability
If you want to move or transfer your personal information to a different service provider or copy your information for your own purposes, you have the right to have your information transferred to another person.

The right to object
You have the right to ask us not to process your personal information for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your information for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your information.

The right to define the outcome of your personal information after your death
You have the right to give us instructions on what we wish that we do with your personal information after your death. We will register it and if we heard that such event occurred, we will comply with your instructions.

For further information on your rights
You can find further information on your data protection rights from your local supervisory authority’s website.

We are committed to protecting and respecting your privacy. However, if you’re not happy with how we collect or process your information or just want some further information on your rights, you can contact us in the following ways:

• You can email us at contact@lefooding.com,
• You can also make a complaint to your local supervisory authority website.

Le Fooding has implemented measures to protect the privacy, security and integrity of your personal data. Access to personal data is restricted to those employees and service providers who need to know this information and who have been trained to comply with rules on confidentiality.

On Le Fooding’s commercial sites, banking information will be collected by an authorized payment service provider for the purposes of effective, legal secure payment processes. These measures may consist of SSL encryption (intended to make the data unreadable to others) during the collection or transfer of confidential data. Said information will be used only for purposes of online payment and will not be retained.

Le Fooding ensures that your personal data are not altered, damaged or accessed by unauthorised third parties.

We may change our policy from time to time. Any changes we make to this policy in the future will be posted on this page. If you have an online account with us, we may notify you of any changes by email or through your account the next time you log on.