Data Controller
- Cristina Caffè SAS 2 bis, Boulevard de Strasbourg 93600 Aulnay-sous-bois France
- Contact email address ( contact-site@cristina-caffe.com ) for questions related to personal data
Data collected
The data collected is as follows:
- Contact or booking form: name, surname, email, telephone number, number of covers, date and time of booking, free message
- Online orders / click & collect: identity, contact details, order details, payment information
This data is hosted by our service provider: laddition (adstellam)
Purposes and legal basis
Your data is processed for the following purposes:
- Reservation and order management: contract execution (managing the table, preparing the order, invoicing)
- Sending offers and newsletters: consent (voluntary registration, possibility to unsubscribe at any time)
- Website traffic statistics (cookies, analytics): legitimate interest in improving the website, possibly with consent via a cookie banner
Recipients and subcontractors
List the categories of recipients who can access the data:
- Authorized restaurant staff (reservation management, billing, table service)
- Technical service providers: website hosting, booking solution, online payment solution
Shelf life
- Online booking/order data: we retain your data for the duration necessary to manage the online booking/order, then your data is archived for 3 years for the management of disputes and accounting obligations.
- Data for marketing purposes (newsletter): your data is kept until you withdraw your consent or for a maximum of 3 years
Rights of individuals
- Right of access, rectification, erasure, restriction, objection and data portability
- Right to withdraw consent at any time (unsubscribe from newsletter, object to marketing)
- Right to lodge a complaint with the CNIL (cnil.fr)
- The contact details for our data manager are: dpo@cristina-caffe.com
Data security
Access to your data is limited to authorized personnel only; our staff is aware of the importance of protecting our customers' personal data.
- We have implemented technical measures (HTTPS, strong passwords with two-factor authentication, software updates, firewalls, backups) and organizational measures (internal procedures)
Cookies and trackers
- Only cookies necessary for the operation of the site, audience measurement cookies are used
This page has been updated.
- Indicate that the data protection policy may be modified in the event of legal or technical developments, or changes to the services offered
- Last updated on: December 15, 2025