PRIVACY POLICY

This Privacy Policy applies to all data processing carried out by PRVH – PRUNIER RESTAURANT VICTOR HUGO (“Restaurant Prunier”), its possible subsidiaries, and, where applicable, its endowment fund.

It covers both online and offline data collection, including information gathered through Restaurant Prunier’s websites (including https://restaurant.prunier.com/), its subsidiaries’ websites, group applications, reservations made by customers and users, and any events, seminars, or operations organized at the request of clients, website users (hereinafter “Users”), or directly by Restaurant Prunier, its subsidiaries, or its endowment fund.

This Privacy Policy is updated regularly, and Restaurant Prunier encourages all clients and Users to consult it frequently.

Restaurant Prunier attaches the highest importance and care to the protection of its clients’ and Users’ personal data (“Personal Data”).

PERSONAL DATA

What is Personal Data?

Personal Data means any information or set of information that identifies, directly (e.g., name, first name, email address, home address, etc.) or indirectly, a person (e.g., through pseudonymized data such as a unique ID number). Unique identifiers such as your computer’s IP address may also constitute Personal Data.

It includes all information relating to you as a natural person, which you provide voluntarily or that we collect while you browse our websites, use our mobile apps, or make reservations, and which—whether directly or indirectly—may allow us to identify you.

DATA CONTROLLER

PRVH – PRUNIER RESTAURANT VICTOR HUGO, its subsidiaries, and its endowment fund are responsible for the processing of the Personal Data they collect, unless expressly stated otherwise.

Personal Data processed by Restaurant Prunier’s partners, subsidiaries, or endowment fund partners remain under those third parties’ responsibility. No Personal Data collected by Restaurant Prunier, its subsidiaries, or its endowment fund will be shared with third parties without prior notice and/or your consent, depending on the purpose of processing.

METHODS OF DATA COLLECTION

We collect your Personal Data in several ways:

Directly from you: when you use our websites, online reservation services, or partner booking apps; when you apply for a job; subscribe to our newsletters; or otherwise interact with us (by completing forms, communicating with our teams, etc.).
Automatically: when you access our websites, mobile apps, or partner reservation apps (technical data, IP address, browsing information, etc.).

CATEGORIES OF PERSONAL DATA COLLECTED

We may collect the following categories of Personal Data:

Identification and contact information: name, surname, email address, and other details needed for identification.
Job application data: name, email, phone number, work experience, and all information provided in your CV (photo, education, skills, languages, salary expectations, address, hobbies, family situation, etc.). This data is used solely for managing our own recruitment.
Payment data (if applicable): for certain services, payment information related to your bank account or credit card.
Technical data: details about your device, operating system, browser type, IP address, access time, visited pages, referring page, and similar usage data.

LEGAL BASIS FOR DATA COLLECTION

In accordance with European and French data protection regulations, your Personal Data is collected:

Based on your consent;
On the basis of our legitimate interest;
Or to fulfill our legal obligations.

PURPOSES OF DATA COLLECTION

Collected with your consent, to:

Manage your inquiries and requests;
Send you newsletters you have subscribed to;
Manage job applications;
Manage reservations (tables/events) and send confirmations/cancellations;
Send marketing information about our establishments, events, or the activities of our endowment fund.

Collected based on our legitimate interest, to:

Defend our rights in case of disputes;
Ensure cybersecurity of our websites;
Prevent fraud and protect our assets and content.

We may also retain certain Personal Data when required by law or to assert our legal rights.

ACCESS TO YOUR PERSONAL DATA

Your Personal Data is accessible only to authorized employees of Restaurant Prunier, its subsidiaries, and its endowment fund who require such access to perform their duties.

It may also be accessed by:

Service providers and subcontractors (hosting, maintenance, security, fraud management, email delivery, recruitment, payment processing, etc.), who are contractually bound to comply with data protection regulations;
Partners in connection with specific events, including those related to the endowment fund;
Authorities or courts when required by law, regulation, or judicial decision, or to defend our legal rights.

DATA TRANSFERS OUTSIDE THE EU

Personal Data collected is hosted on servers located within the European Union.

However, Restaurant Prunier, its subsidiaries, or its endowment fund may use service providers located outside the EU. Such transfers are carried out with appropriate safeguards in compliance with applicable regulations (EU Standard Contractual Clauses, Binding Corporate Rules, etc.).

If applicable, you will be informed and asked to consent to such transfers, including to countries like the United States, where data protection laws may differ from those in your country of residence.

PERSONAL DATA OF MINORS

Restaurant Prunier and its entities collect data only from adults. You may be asked to provide your age or date of birth.

If you believe we have collected data from a minor, please contact us so we can delete it.

Data concerning minors may be processed via their legal representative (for example, for reservations or special requests). By providing such data, you confirm that you are of legal age and the minor’s legal guardian.

SECURITY AND CONFIDENTIALITY

Restaurant Prunier, its subsidiaries, and its endowment fund implement technical and organizational measures to protect Personal Data from alteration, destruction, or unauthorized access.

We require our partners and providers to offer adequate guarantees and apply security measures consistent with legal standards.

However, Users acknowledge that the internet is not a fully secure environment, and absolute security of online data transmission or storage cannot be guaranteed.

LINKS TO THIRD-PARTY WEBSITES

Our websites may include links or features directing you to third-party sites. Your use of such links or features is at your own risk. We are not responsible for the content or privacy practices of these sites and recommend reviewing their privacy policies.

DATA RETENTION PERIODS

We store your Personal Data for a duration proportionate to the purposes for which it was collected and in compliance with legal requirements:

Marketing and communications: up to 3 years after the end of the commercial relationship (clients) or the last contact (prospects/subscribers).
Job applications: 2 years from submission or last contact (with the option to renew).
Specific requests: for as long as necessary to process the request, then deleted or anonymized unless retention is legally required.
Video surveillance: 1 month, unless extended for legitimate reasons (e.g., suspected fraud).
Payment data: deleted from operational databases after the transaction; may be archived for 13 months for dispute resolution.
Cookies (except technical cookies): 13 months.

EXERCISING YOUR RIGHTS

In accordance with the GDPR, you have the right to:

Access your Personal Data;
Correct inaccurate or outdated data;
Object to direct marketing;
Request erasure (Art. 17 GDPR);
Request restriction of processing (Art. 18 GDPR);
Request data portability (Art. 20 GDPR);
Provide instructions for handling your data after death;
Object to processing (Art. 21 GDPR);
File a complaint with the CNIL (https://www.cnil.fr/en/home).

If processing is based on consent, you may withdraw it at any time (e.g., via the unsubscribe link in emails/newsletters).

We may ask for proof of identity before processing your request. Certain data may be retained as required by law or to protect our legal interests.

HOW TO EXERCISE YOUR RIGHTS

You may exercise your rights by contacting us:

By post:

Restaurant Prunier – Data Protection Officer (DPO)

51 Quai des Grands Augustins, 75006 Paris, France

By email:

contact@prunier-restaurant.com

COOKIE MANAGEMENT POLICY

What is a cookie?

A cookie is a small text file stored by your browser to save session information between visits.

Types of cookies we use:

Technical cookies: essential for operation (display, language, forms, etc.);
Analytics cookies: for audience measurement (e.g., Google Analytics);
Social media cookies: for sharing content on social networks (Facebook, X/Twitter, LinkedIn, etc.);
Advertising cookies: for personalization and campaign performance tracking.

These cookies do not directly identify you and are intended for use solely by Restaurant Prunier.

Purposes of use:

Facilitate browsing and display;
Remember preferences (language, layout, etc.);
Identify referral sources;
Analyze site performance using anonymized data.

Consent management:

In accordance with Article 82 of the French Data Protection Act, your prior consent is required for certain cookies (advertising, social media). Only strictly necessary cookies (e.g., security, load balancing, session management) are exempt.

Upon your first visit, you will be asked to configure your preferences. You can change them at any time via the “cookie preferences” link on our sites or through your browser settings.

Last updated: October 2025