Data controller

SANFRÉ (Société par actions simplifiée (SAS)) — La Pomponette, 9 quai des Baux, 13260 Cassis.
Contact : contact@pomponette-cassis.com

Data collected

The site collects no data without your knowledge. The only information gathered is what you voluntarily enter in the contact form:

your name
your email address
your phone number, if you provide one
the preferred date and number of guests, if provided
the content of your message

Why we collect it

Solely to handle your enquiry and reply to you. This information is never sold, rented or passed on for commercial purposes, and is not used for marketing without your agreement.

Legal basis: your consent, collected via the checkbox on the form (Article 6(1)(a) GDPR).

Who has access

Only the restaurant team. Your message is sent to us by email and stored on the servers of our host Cloudflare, Inc., where only the team can read it, behind a password. Our email delivery provider and our host act as processors and do not use the data for their own purposes.

Retention period

Messages are kept for a maximum of twelve months after the last exchange, then deleted.

Your rights

You have the right to access, correct, erase, restrict and object to the processing of your data, and to withdraw your consent at any time. To exercise these rights, write to contact@pomponette-cassis.com.

If our response does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr

Cookies and analytics

No cookie is set during your visit, and the site uses no advertising trackers or third-party analytics tools. No consent banner is therefore required. (A private administration page, reserved for the restaurant and not reachable from the site, uses a sign-in cookie: it is never sent on public pages.)

We count how many times the pages of the site are opened, and how many times the menu is opened from the QR code on the tables. At each opening we note, without ever linking them together: the language requested by the device, its type (phone, tablet, computer), the country it connects from, the time of day, and the site you arrived from — Google, a social network, or directly. None of this is kept about you: each simply adds 1 to a daily total. This count is strictly anonymous: no IP address, no identifier and no cookie is stored, and nothing links a visit to a person, or two visits to each other.

The location map is provided by OpenStreetMap and only loads if you click “Show the map”. Until you do, no connection is made to any third-party service.

Updates

This policy may change. The version in force is the one published on this page.