1. Data controller
- LZ 98SAS (Simplified Joint-Stock Company)
- Registered office: 45 Rue du Faubourg Montmartre, 75009 Paris
- SIRET: 999 758 170 00016
- Contact email: pho98paris@hotmail.com
2. Data collected
Depending on your use of the site, we may collect:
- Identity: first name, last name
- Contact: email address, phone number (optional)
- Message content: subject and text of the contact form
- Booking: handled directly by TheFork, see their policy
- Technical data: IP address, server logs, browser type, pages visited, cookie identifiers
3. Purposes and legal bases
- Respond to contact requestsLegal basis: legitimate interest in managing customer relations
- Handle booking requests and customer relationsLegal basis: pre-contractual measures / contract performance
- Ensure the security and proper functioning of the siteLegal basis: legitimate interest, limited to the server's technical logs (no cookie or tracker)
- Traffic statistics (Google Analytics, loaded by Google Tag Manager), active from arrival; can be refused at any time via "Manage cookies" at the bottom of the page
- Displaying third-party content (Google reviews, Instagram and TikTok posts via Elfsight, Google Maps map), Legal basis: consent (Article 6(1)(a) GDPR), which you can withdraw the same way
4. Mandatory nature of data
Fields marked as mandatory in the contact form are necessary to process your request. Otherwise, we will not be able to respond.
5. Recipients and processors
Your data is accessible to:
- authorized staff of LZ 98 (restaurant team);
- our technical service providers (processors), each bound by a data protection agreement:
- Hosting: OVHcloud (OVH SAS), Roubaix, France
- Email sending (contact form): Mail Hub Jarvis (DIGIFLOW AGENCY, Amazon SES sub-processor)
- Maintenance and development: BE HYPE
- Booking: TheFork, independent operator, see their policy
- Audience measurement: Google (Google Tag Manager and Google Analytics 4), active from your arrival; you can refuse it at any time
- Third-party content: Elfsight (Google reviews, Instagram and TikTok posts) and Google (Google Maps map), only after your consent or a click on "Show content"
6. Transfers outside the European Union
Some of these services (Google, Elfsight) may involve data transfers outside the European Union. The safeguards they apply are described in each one's privacy policy, linked from the cookie policy.
7. Retention periods
- Contact data and exchanges: 12 months after the last exchange
- Booking-related data: 3 years after the last contact
- Technical logs: 6 to 12 months
- Cookies and trackers: the duration of each cookie is given in the cookie policy
8. Your rights
Pursuant to the GDPR and the French Data Protection Act, you have:
- a right of access to your personal data;
- a right of rectification;
- a right to erasure (right to be forgotten);
- a right to object and limit processing;
- a right to data portability;
- the right to define directives regarding the fate of your data after your death.
To exercise these rights, contact us at pho98paris@hotmail.com.
You also have the right to lodge a complaint with the CNIL: www.cnil.fr.
10. Security
The site is served over HTTPS: exchanges between your browser and the server are encrypted. Contact form data is only accessible to the recipients listed in section 5.
11. Policy changes
This policy may change. The version in force is the one published on this page. The date of the last update appears at the top of the page.