Ô P'tit Garonnais cares about protecting your data. This page explains what data we collect, why, how long we keep it, and how you can exercise your rights.
Data controller
BRASSERIE DU TERROIR SARL, share capital €2,000 20 rue des Filatiers, 31000 Toulouse, France Contact: contact@optit-garonnais.fr No data protection officer (DPO) has been appointed: requests are handled directly by the data controller.
Data we collect
Through the booking form: name, phone number, email address, requested date and time slot, number of guests and any message.
We also process your IP address temporarily to protect the form against automated submissions (anti-spam) and to limit abuse.
Why and on what legal basis
Managing booking requests and related communication: legal basis = performance of a contract or pre-contractual steps taken at your request (Article 6.1.b GDPR).
Site security and abuse prevention (rate limiting, anti-spam): legal basis = legitimate interest (Article 6.1.f GDPR).
Retention period
- Bookings: maximum 12 months, then automatically deleted.
- Technical security data (IP address, anti-abuse counters): from a few minutes up to 24 hours.
Who has access to your data
Only the restaurant team accesses bookings. Our technical providers act as processors, strictly for the needs of the service:
- Infomaniak Network SA: site hosting (Switzerland).
- httpSMS: sending confirmation SMS from a restaurant phone.
No data is sold, rented or used for advertising purposes.
Transfers outside the European Union
The site is hosted in Switzerland, a country recognised by the European Union as providing an adequate level of protection. To send SMS, only the strictly necessary data (number and message) is transmitted; where applicable, such transfers are covered by appropriate safeguards (standard contractual clauses).
Cookies
The site only uses cookies that are strictly necessary for it to work:
• Language-preference cookie: to show you the site in your language.
No advertising, analytics or tracking cookies. These cookies do not require your consent; you can delete them at any time in your browser settings.
Security
All traffic is encrypted (HTTPS). Administration passwords are stored hashed, access to bookings is protected by authentication, and the server is kept up to date.
Your rights
You have the following rights over your data:
- Access: know what data we hold about you.
- Rectification: correct inaccurate information.
- Erasure: request deletion of your data.
- Restriction: temporarily limit its use.
- Objection: object to a processing operation.
- Portability: receive your data in a readable format.
To exercise them, email us at contact@optit-garonnais.fr: we reply within one month at most. You can also lodge a complaint with your data protection authority (in France, the CNIL — www.cnil.fr).
Changes
This policy may be updated at any time; the date of the last update appears at the top of this page.