PRIVACY POLICY
This privacy policy was last updated on 15 October, 2018.
1. Who we are
Taste of Toulouse EURL is a limited-liability company registered in France (collectively referred to as “we” or “us” in this policy). Our website is www.tasteoftoulouse.com (referred to as “our website” in this policy).
Taste of Toulouse is committed to maintaining the trust and confidence of visitors to our website and our customers. In particular, we want you to know that Taste of Toulouse is not in the business of selling, renting, or trading email or customer lists with other companies and businesses for marketing purposes. The following Privacy Policy provides detailed information on when and why we collect your personal information, how we use it, the limited conditions under which we may disclose it to others and how we keep it secure.
2. What personal data we collect, why we collect it, and for how long it is stored
Contact forms
When you submit a contact form on the website, we collect information from you such as name, email address, and phone number. We use your data to respond to your request for contact based on your stated preference.
The basis on which we may process this data is: Performance of an agreement
In order to complete your request, we process this data using G Suite, with whom we have a Data Processing Agreement.
Retention period: We retain this data until the service is terminated.
Mailing list
When you consent to join the Taste of Toulouse email list, through an online signup form, a consent checkbox during checkout, or other means, we use your data to send you our email newsletter and other occasional information about Taste of Toulouse.
For this purpose, we use the following data:
- Name
- Email address
The basis on which we may process this data is: Consent
We use MailChimp to send our email newsletter. By subscribing, you acknowledge that your information will be transferred to MailChimp for processing. You can learn about MailChimp’s privacy practices here. To reiterate – we will NEVER sell or trade your email address or other personal information and you have the right to unsubscribe from our marketing emails at any time!
Retention period: We retain this data until you request to be removed from the email list. You can do so by clicking the link at the bottom of each newsletter or by clicking here.
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s anonymized IP address to help spam detection.
The basis on which we may process this data is: Consent
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Retention period: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. We retain this data until you request its removal.
Order Information
We use a third party payment processor, Stripe, for all payments. Taste of Toulouse does not store credit card details and instead relies on Stripe for this. When you make a purchase or attempt to make a purchase through the website, we or a third-party service collect certain information from you, including your name, billing address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”
The Order Information that is collected is used to fulfill any orders placed through the website (including processing your payment information and providing you with invoices and/or order confirmations). Additionally, this Order Information is used to:
- Communicate with you;
- Screen our orders for potential risk or fraud (in particular, your IP address); and
- When you consent, provide you with information or advertising relating to our products or services. Please see the “Mailing List” section above for further information on this.
The basis on which we process this information is: Performance of an agreement
We use the third-party services Stripe and Ticketinghub to power our online reservation system — you can read more about how Stripe uses your Personal Information here: https://stripe.com/fr/privacy. You can view the TicketingHub privacy policy here: https://legal.ticketinghub.com/docs/policy.
Analytics
When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. Google may not use the data for any other Google services. The inclusion of full IP addresses is blocked by us
Google Web Fonts
For uniform representation of fonts, our site uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our website was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our plugin. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
If your browser does not support web fonts, a standard font is used by your computer.
Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.
3. Who we share your data with
We share your Personal Information with third parties to help us use your Personal Information, as described in the sections above.
What other companies do we share your data with?
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info.
4. How long we retain your data
We will not retain your data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however the longest we will normally hold any personal data is 6 years from the date of last contact with you.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
5. What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
6. Where we send your data
To deliver products and services to you, it is sometimes necessary for Taste of Toulouse to share your data outside of the European Economic Area. This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.
If this happens, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. We ensure that all service providers outside of the EEA are subscribed to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework (collectively, “Privacy Shield”). To learn more about the Privacy Shield program visit www.privacyshield.gov.
7. Our contact information
If you have questions or concerns about our privacy policy, you can contact us using this form or in one of the ways listed below.
By email: [email protected]
By phone: +33 7 66 10 08 07
By mail: Jessica Hammer
Taste of Toulouse
46 Boulevard des Minimes
31200 Toulouse, FRANCE
8. Additional information
How we protect your data
- We keep your personal information in closed systems that are only accessible to the sole owner/operator of Taste of Toulouse.
- We handle all our credit card and other payment transactions via external, PCI-compliant payment gateways.
- All financial transactions are processed through a gateway provider and are not stored or processed by us.
What data breach procedures we have in place
Our data breach handling policies comply with both the Fair Information Practices in the US, and GDPR in the EU.
Should a data breach occur, we will notify you about it via email, within 72 hours of finding out about the breach, or do a public announcement. If the leaked data was unencrypted and is seen to pose a danger to your rights or freedoms, we will also report the breach to the relevant regulatory body within 72 hours.
Complaints
If you believe there is a problem with the way we are handling your data, and if you are an EU citizen, you have the right to complain to the data protection supervisory authority of your country. To help you find your local supervisory authority, here is a list of such authorities in the EU for each country, as well as a central one at the very bottom of the list.
