Privacy policy
Last updated: 12 August 2026
This page explains what personal data we handle when you visit this website or send us a booking request, why we do so, how long we keep it and what rights you can exercise. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and French Act no. 78-17 of 6 January 1978 as amended.
In short: this website uses no analytics, no advertising and no embedded social networks. No form sends data to a server of ours: the booking request simply opens your own email application.
1. Data controller
- Controller
- SARL LE HAVANE, trading as "Couleur Café" — 28 rue du Père Louis de Jabrun, 33000 Bordeaux, France — SIRET 428 993 794 00018
- Contact
- couleurcafereservation@gmail.com — +33 5 56 48 28 58
- Data protection officer
- No DPO has been appointed: the business does not fall within the cases where appointment is mandatory under article 37 of the GDPR.
2. Data processed, purposes and legal bases
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Booking request | Name, phone number, requested date and time, number of guests, seating preference, and the email address you write to us from | Steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR) | 12 months from the booking date, then deleted |
| Replying to a request sent by email or by phone | Your contact details and the content of your message | Our legitimate interest in replying to people who contact us (art. 6(1)(f) GDPR) | 12 months from the last exchange |
| Displaying the Google Maps map | IP address and browsing data collected by Google when the map loads | Your consent, given by an explicit click (art. 6(1)(a) GDPR and art. 82 of the French Data Protection Act) | See Google's own retention rules |
| Remembering your choice about the map | A technical value stored in your browser (cc_consent_maps) |
Strictly necessary storage, exempt from consent | Until you erase it; 12 months maximum recommended |
No data is collected without your knowledge when you simply browse the pages: the typefaces are served from our own site and no analytics tool is installed.
3. Which fields are required
The "name", "date" and "time" fields of the booking form are needed to handle your request: without them we cannot act on it. The other fields are optional and only help us look after you better.
4. Recipients
Your data is accessible only to those members of staff who need it in order to organise the dining room. It is never sold, rented or passed to third parties for commercial purposes.
Two technical providers may have access to it by virtue of their role as intermediaries:
- Our email provider, which hosts the mailbox receiving booking requests. As the address currently used is a Gmail account, the messages are hosted by Google and may be processed outside the European Union.
- Cloudflare, Inc., which hosts this website, serves its pages and keeps technical connection logs for security, attack protection and maintenance purposes.
5. Transfers outside the European Union
Three processing operations may involve a transfer of data to the United States:
- Google Maps, if and only if you click to display the map;
- the Gmail mailbox, which receives booking requests;
- Cloudflare, Inc., the website host, a US company.
Google LLC is certified under the EU–U.S. Data Privacy Framework, adopted by the European Commission's adequacy decision of 10 July 2023, which governs those transfers. Transfers carried out by Cloudflare are governed by its data processing agreement, which incorporates the European Commission's standard contractual clauses.
6. Security
We take reasonable measures to protect the data: access limited to authorised staff, password-protected devices and mailboxes, and a site served over HTTPS. No customer database is built from this website.
7. Your rights
Under the conditions set out in the GDPR, you have the following rights:
- Right of access: to obtain a copy of the data we hold about you;
- Right to rectification: to have inaccurate or incomplete data corrected;
- Right to erasure: to ask for your data to be deleted;
- Right to restriction of processing;
- Right to object, in particular to processing based on our legitimate interest;
- Right to portability of the data you have provided to us;
- Right to withdraw your consent at any time for the Google Maps map, from the cookie settings page;
- Right to give directions as to what becomes of your data after your death.
To exercise these rights, write to us at couleurcafereservation@gmail.com or by post to 28 rue du Père Louis de Jabrun, 33000 Bordeaux, France. We may ask for proof of identity if we have reasonable doubt as to who you are. We reply within one month, extendable by two months for complex requests.
8. Complaints
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr. If you live in another EU country, you may also contact your own national supervisory authority.
9. No automated decision-making
No decision producing legal effects concerning you is taken solely on the basis of automated processing. No profiling is carried out. This website is not aimed at children under 15 and does not knowingly collect their data.
10. Changes to this policy
This policy may be updated to reflect legal or technical developments. The date it was last updated appears at the top of the page.