Privacy Policy

This privacy policy applies to all data processing carried out by the restaurant ÉLYSÉES BIARRITZ (hereinafter "ÉLYSÉES BIARRITZ"), an establishment that is a member of the MOMA GROUP network.

This policy covers data collection carried out both online and offline, including information collected via the ÉLYSÉES BIARRITZ website, partner booking applications, reservations made by clients and Users (hereinafter the "Users"), or events and functions organized at the request of clients or directly by ÉLYSÉES BIARRITZ.

This policy is updated on a regular basis. ÉLYSÉES BIARRITZ recommends that every client and User check it periodically.

1. Personal data

1.1 What is personal data?

Personal Data refers to any information that allows for the direct or indirect identification of a natural person, for example:

Directly : first name, last name, email address, home address;
Indirectly : pseudonymized data such as a unique identification number, an IP address, etc.

1.2 Data controller

ÉLYSÉES BIARRITZ is the data controller for the Personal Data it collects, unless expressly stated otherwise. No Personal Data will be shared with a third party without your prior notification and/or consent.

2. Collection methods

We collect your Personal Data in two ways:

Directly from you : when using our website, our booking services, when you apply for our job offers, subscribe to our newsletters, or interact with our teams;
Automatically : while browsing our site (technical data, IP address, pages visited, etc.).

3. Categories of data collected

Identification and contact information : first name, last name, email address, phone number;
Application information : professional experience, resume, skills, education level, languages spoken, salary expectations — collected solely for the purpose of managing our job offers;
Payment data : financial data related to bank accounts or credit cards;
Technical data : operating system version, browser type, IP address, access time, pages visited.

4. Legal basis for collection

Your Personal Data is collected based on one of the following legal grounds:

your consent;
the legitimate interest of ÉLYSÉES BIARRITZ;
compliance with a legal obligation.

5. Purposes of collection

5.1 Based on your consent

Managing your requests and questions;
Sending you newsletters you have subscribed to;
Managing job applications;
Managing table, seat, or event reservations and sending you the corresponding confirmations;
Sending you commercial information about our establishment and our events.

5.2 Based on our legitimate interest

Defending our interests in the event of a dispute or legal action;
Managing the cybersecurity of our website;
Preventing fraudulent activity to ensure the security of our assets and content.

6. Accessibility of your data

Your Personal Data is only accessible to ÉLYSÉES BIARRITZ staff members who require it for their duties, as well as to the following third parties:

Our subcontractors and technical service providers : website hosting, security and maintenance, fraud management, email and newsletter distribution, anti-spam services, recruitment agencies, and banking and financial institutions;
Our partners for specific events;
Any competent authority when disclosure is required by law or a court order.

These service providers are contractually obligated to use your data in accordance with applicable regulations.

7. Transfer outside the European Union

The Personal Data collected is hosted on servers located within the European Union. However, some service providers may be located outside the EU. Any such transfer is carried out with appropriate safeguards in place (standard contractual clauses, BCRs, etc.).

8. Personal data of minors

ÉLYSÉES BIARRITZ only collects Personal Data from adults. Please contact us if you believe we are processing data concerning a minor so that we can delete it as soon as possible.

9. Security and confidentiality

ÉLYSÉES BIARRITZ implements organizational, technical, software, and physical measures to protect Personal Data against alteration, destruction, and unauthorized access. These same requirements are contractually imposed on our service providers and subcontractors.

However, every client and User acknowledges that the Internet is not a completely secure environment.

10. Links to third-party sites

Our website may contain links to third-party sites that we do not own or control. This privacy policy does not apply to those sites. We encourage you to review their own privacy policies.

11. Data retention

Commercial and marketing communications : 3 years from the end of the business relationship, or 3 years from our last contact;
Job applications : 2 years from the date your data is provided or from our last contact;
Specific requests : duration necessary for managing the request, followed by destruction or anonymization;
Video recordings : 1 month, unless extended due to investigations;
Bank details : deleted after the transaction, archived for 13 months to prevent disputes;
Cookies : 13 months (with the exception of technical cookies).

12. Your rights

In accordance with the GDPR, you have the following rights:

Right of access to your Personal Data;
Right to rectify any incorrect or outdated data;
Right to object to receiving marketing communications;
Right to erasure (Article 17 of the GDPR);
Right to restriction of processing (Article 18 of the GDPR);
Right to data portability (Article 20 of the GDPR);
Right to provide instructions regarding the handling of your data after your death;
Right to object to processing (Article 21 of the GDPR);
Right to lodge a complaint with the CNIL: https://www.cnil.fr/en/complaints.

To exercise your rights, you can contact us:

By mail : ÉLYSÉES BIARRITZ — 22 Rue des Champs-Élysées, 75008 Paris, France
By email : commercial@elyseebiarritz.com
By phone : +33 (0)1 42 71 26 05

13. Cookie Policy

13.1 What is a cookie?

A cookie is a small text file stored on your device (computer, tablet, phone) while you browse. It allows us to retain status information for the duration of its validity.

13.2 Types of cookies used

Technical cookies : essential for the proper functioning of the site (display preferences, language, form data). These do not require your prior consent;
Statistical cookies : used to compile traffic statistics (page views, user journeys, visit duration). We use Google Analytics for this purpose;
Social media cookies : allow you to share our content on Facebook, Instagram, LinkedIn, etc. If you do not want this information linked to your account, please log out of the relevant social network beforehand;
Advertising cookies : allow us to show you advertisements tailored to your interests and measure the effectiveness of our campaigns.

13.3 Managing your consent

During your first visit, your consent is requested for advertising and social media cookies. You can change your preferences at any time by clicking the “Cookie Preferences” button available on our site.

The following cookies do not require your prior consent:

trackers that store your cookie consent choices;
authentication and security trackers;
interface customization trackers (language, layout);
load balancing trackers.