Privacy Policy

1. Introduction

Welcome to the AL FORNO website (hereinafter "we", "our" or "the restaurant"). We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and French Data Protection Law.

This privacy policy explains how we collect, use, store and protect your personal information when you visit our website.

2. Data Controller

The data controller is:

AL FORNO 32 Av. de la République, 77340 Pontault-Combault, France Phone: +33 (0)1 64 40 00 20

For any questions regarding your personal data, you can contact us at this address or by phone.

3. Personal Data Collected

3.1 Browsing Data

When you visit our site, we automatically collect certain technical information:

• IP Address: For security and statistical analysis • Browser type and operating system: To optimize site display • Pages visited and visit duration: To improve user experience • Referral source: To understand how you found our site • Date and time of visit: For traffic analysis

3.2 Cookies and Similar Technologies

We use cookies and similar technologies. For more information, see the "Cookies" section below.

3.3 Voluntarily Provided Data

If you contact us by phone or WhatsApp, we may collect:

• Your name • Your phone number • The content of your message

5. Processing Purposes

We use your personal data for the following purposes:

• Site operation: Ensure proper technical functioning • Experience improvement: Optimize navigation and content • Statistical analysis: Understand visitor behavior • Communication: Respond to your contact requests • Marketing: Display relevant advertisements (with your consent)

6. Data Sharing

We never sell your personal data to third parties.

Your data may be shared with:

• Google: For Google Analytics and Google Tag Manager (if you consented) • Facebook: For Facebook Pixel (if you consented) • Site host: For data storage and security

These service providers are required to comply with GDPR and protect your data.

7. Retention Period

We retain your personal data for the following periods:

• Analytics and marketing cookies: Maximum 13 months • Necessary cookies: Session duration or until manual deletion • Connection logs: 12 months (legal security obligation) • Contact data: 3 years after last contact

9. Right to Complaint

If you believe your rights are not being respected, you have the right to file a complaint with the French Data Protection Authority (CNIL):

CNIL 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07 Phone: 01 53 73 22 22 Website: www.cnil.fr

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access • Accidental loss or destruction • Misuse or disclosure

These measures include HTTPS encryption, regular backups, and strict access controls.

11. Third-Party Links

Our site may contain links to third-party websites (social networks, delivery platforms, etc.). We are not responsible for the privacy practices of these sites.

We recommend reading the privacy policies of these sites before providing them with your personal data.

12. Children's Data

Our site is not intended for children under 16. We do not knowingly collect personal data from minors without parental consent.

13. Policy Updates

We may update this privacy policy from time to time. The last update date is shown at the top of this page.

We encourage you to regularly review this page to stay informed about our data protection practices.