Privacy policy

1. Data controller

The data controller is DOLCE VITA SAS, a société par actions simplifiée with its registered office at 17 Rue de la Chèvre, 57000 Metz, France, SIRET 753 024 181 00012.

For questions or requests concerning your personal data, contact ladolcevitametz.contact@gmail.com or write to the registered office.

2. Data processed, purposes and legal bases

Website access and security

When you visit, the hosting provider may process technical data including your IP address, the date and time of the request, the requested page, browser, operating system, diagnostic data and security logs.

This data is used to display the website, maintain availability, prevent abuse, detect incidents and protect security. Processing is based on DOLCE VITA SAS’s legitimate interest in operating a reliable and secure website.

Post-visit experience

When you use the experience reached from the restaurant QR code, the website processes an opaque session identifier, the times when the Google link was opened and when the session returned, and technical signals used to limit abuse. It does not verify whether a review was published, read its rating or content, or try to link a Google account to a participant. This provides and restores the requested experience and protects it against abuse.

If you continue, your email address is used to send a verification code, apply the 90-day period between participations and, if you win, deliver and manage the prize. It is not associated with a Google account or review and is not used for newsletters or marketing.

Individually authenticated and explicitly authorized managers can view participation records, email addresses, prizes and redemption states where needed to operate the game. Staff devices authorized only to validate rewards cannot access this data.

Google Maps

Google Maps loads only after you give permission. If you allow it, your IP address, device information and interactions with the map may be sent to Google. This processing is based on your consent, which you can withdraw at any time using the “Manage cookies” link in the footer.

Links to external services

The website links to Zenchef for reservations, Eazee for the menu, Google for directions and reviews, and Instagram and Facebook. Simply displaying these links sends no data to those services. If you follow one, you leave this website and the third party processes data under its own responsibility.

Telephone enquiries and reservations

If you call the restaurant, information you provide voluntarily may be used to respond to your enquiry or manage your booking. Depending on the request, processing is based on steps taken before entering into a contract, performance of the requested service, or the legitimate interest in responding to enquiries.

3. Required and optional data

Technical data needed to deliver the website is essential to its operation. Consent to Google Maps is optional: if declined, the embedded map remains disabled and the website stays accessible. You can still use the external directions link.

4. Recipients and processors

Within the limits of their responsibilities, data may be accessible to:

• authorised staff at DOLCE VITA SAS;
• Vercel, which provides website hosting and delivery infrastructure;
• Supabase, which provides the post-visit experience database and email authentication;
• Resend, the intended provider for verification and prize emails;
• Google, only if you allow Google Maps to load;
• legally authorised public authorities when required by law.

Zenchef, Eazee, Instagram, Facebook and Google operate under their own policies when you voluntarily open their external websites or services.

5. Transfers outside the European Economic Area

Some providers, including Vercel and Google, are established in or operate infrastructure in the United States. Data may therefore be processed outside the European Economic Area. These providers state that they use GDPR transfer safeguards, such as an applicable adequacy decision or the European Commission’s standard contractual clauses. Contact DOLCE VITA SAS for further information about safeguards applying to a specific processing activity.

6. Retention periods

• Technical and security logs: for only as long as necessary for website operation, diagnostics and security, according to the hosting provider’s settings and retention periods.
• Google Maps choice: for no more than six months, unless withdrawn sooner or browser data is deleted.
• Post-visit experience session: the usable session expires after two hours and its recovery cookie after no more than three hours. An unfinished session with no play is automatically deleted seven days after expiry.
• Abuse-limitation data: until the corresponding technical window expires, followed by automatic daily cleanup.
• Prize email delivery: after prize expiry, a sent or failed delivery row containing the recipient and encrypted link is deleted after 30 days. Encrypted redemption material is deleted after use or expiry according to short security delays.
• Participation and verified email address: for the period needed to apply the 90-day rule, deliver and manage a prize, and then for applicable legal periods needed for evidence and handling requests.
• Telephone enquiries: for the time needed to handle the request and, where necessary, for legal periods relating to the commercial relationship and evidence.

The final period for identifiable participation, prize, Auth-account and audit history must be approved before launch after reviewing evidence, fraud-prevention and applicable legal requirements. This policy must then be updated with the approved period. Third-party services you visit after following a link apply their own retention periods.

7. Your rights

Under the General Data Protection Regulation (GDPR) and French data-protection law, you may request:

• access to and a copy of your personal data;
• correction of inaccurate or incomplete data;
• deletion where the conditions are met;
• restriction of processing;
• objection to processing based on legitimate interests;
• data portability where applicable;
• withdrawal of consent at any time, without retroactive effect.

You may also give instructions concerning your data after your death. Proof of identity may be requested only where necessary to confirm your identity.

To exercise your rights, write to ladolcevitametz.contact@gmail.com or to DOLCE VITA SAS, 17 Rue de la Chèvre, 57000 Metz, France.

8. Complaint to the CNIL

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data-protection authority, the Commission nationale de l’informatique et des libertés (CNIL): www.cnil.fr (opens in a new tab).

9. Security

DOLCE VITA SAS and its providers implement technical and organisational measures intended to protect data against unauthorised access, loss, alteration or disclosure. As no system can provide absolute security, these measures are reviewed as risks and services evolve.

10. Changes to this policy

This policy may be updated to reflect legal, technical or functional changes. If a material change is made, appropriate information will be provided on the website. The latest update date appears at the top of this document.