Privacy policy

2. Data collected

Depending on how you use the site, we may collect:

• Identity : first name, last name
• Contact details : email address, phone number
• Message content : entered in the contact form
• Booking data : via the Zenchef widget: date, time, number of guests, any comments
• Technical data : IP address, connection logs, browser type, pages viewed, cookie identifiers

3. Purposes and legal bases

• Responding to your enquiries — Legal basis: legitimate interest
• Handling booking requests and customer relations — Legal basis: pre-contractual measures / performance of the contract
• Ensuring the security and proper operation of the site — Legal basis: legitimate interest

4. Mandatory nature of the data

Fields marked as required in our forms are necessary to process your request. Without them, we will not be able to respond.

5. Data recipients

Your data may be accessed by:

• authorised staff of IWAO
• technical providers (processors) acting on our behalf:
  • Hosting : OVHcloud (OVH SAS) — servers located in France
  • Website design and maintenance : BE HYPE
  • Contact email delivery : Mail Hub (internal service) via Amazon SES
  • Online booking : Zenchef
  • Mapping : Google Maps (Google LLC)

6. Transfers outside the European Union

Some third-party services integrated into the site (Google Maps, Amazon SES) may involve a transfer of data outside the European Union / European Economic Area. Such transfers are governed by appropriate safeguards (European Commission standard contractual clauses, Data Privacy Framework).

7. Retention periods

• Contact data and exchanges : 12 months after the last exchange
• Booking-related data : 3 years after the last commercial contact
• Technical logs : 6 to 12 months
• Cookies and trackers : 13 months maximum (see the Cookies section)

8. Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights over your personal data:

• right of access
• right to rectification
• right to erasure (right to be forgotten)
• right to object
• right to restriction of processing
• right to data portability

To exercise these rights, contact us by phone or by post at the address of our registered office.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

9. Cookies and trackers

The site uses several types of cookies:

Strictly necessary cookies

Essential for the site to work (session, security, display preferences). They do not require your consent.

Third-party service cookies

Set by the widgets integrated into the site (Zenchef, Google Maps). They are only set when you use these services (opening the booking module, displaying the map).

You can manage your preferences at any time from your browser settings.

10. Security

IWAO implements appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure, alteration or destruction. Exchanges with the site are encrypted using the HTTPS protocol.

11. Changes to this policy

IWAO reserves the right to amend this privacy policy at any time. The version in force is the one published on this page. We invite you to review it regularly.