1. Data controller
- LZ 98 — SAS (Simplified Joint-Stock Company)
- Registered office: 45 Rue du Faubourg Montmartre, 75009 Paris
- SIRET: 999 758 170 00016
- Contact email: pho98paris@hotmail.com
2. Data collected
Depending on your use of the site, we may collect:
- Identity: first name, last name
- Contact: email address, phone number (optional)
- Message content: subject and text of the contact form
- Booking: handled directly by TheFork, see their policy
- Technical data: IP address, server logs, browser type, pages visited, cookie identifiers
3. Purposes and legal bases
- Respond to contact requests — Legal basis: legitimate interest in managing customer relations
- Handle booking requests and customer relations — Legal basis: pre-contractual measures / contract performance
- Ensure the security and proper functioning of the site — Legal basis: legitimate interest
- Traffic statistics (if enabled) — Legal basis: consent (cookie banner) or exemption (CNIL-compliant tools)
4. Mandatory nature of data
Fields marked as mandatory in the contact form are necessary to process your request. Otherwise, we will not be able to respond.
5. Recipients and processors
Your data is accessible to:
- authorized staff of LZ 98 (restaurant team);
- our technical service providers (processors), each bound by a data protection agreement:
- Hosting: OVHcloud (OVH SAS) — Roubaix, France
- Email sending (contact form): Mail Hub Jarvis (DIGIFLOW AGENCY, Amazon SES sub-processor)
- Maintenance and development: BE HYPE
- Booking: TheFork — independent operator, see their policy
- Audience measurement: not applicable to date
- Social widgets: Elfsight (Google Reviews + Instagram feed); Meta (Instagram); Google (Maps, Reviews)
6. Transfers outside the European Union
Some services (in particular Google Maps, Instagram, Elfsight widgets) may involve data transfer outside the EU/EEA. These transfers are framed by appropriate safeguards: Standard Contractual Clauses (SCC) of the European Commission or adequacy decisions.
7. Retention periods
- Contact data and exchanges: 12 months after the last exchange
- Booking-related data: 3 years after the last contact
- Technical logs: 6 to 12 months
- Cookies and trackers: see section 9 below
8. Your rights
Pursuant to the GDPR and the French Data Protection Act, you have:
- a right of access to your personal data;
- a right of rectification;
- a right to erasure (right to be forgotten);
- a right to object and limit processing;
- a right to data portability;
- the right to define directives regarding the fate of your data after your death.
To exercise these rights, contact us at pho98paris@hotmail.com.
You also have the right to lodge a complaint with the CNIL: www.cnil.fr.
10. Security
We implement appropriate technical and organizational measures to protect your data: HTTPS encryption throughout the site, secure hosting, restricted access to authorized persons, regular dependency updates.
11. Policy changes
This policy may change. The version in force is the one published on this page. The date of the last update appears at the top of the page.