This policy explains what personal data is collected on restaurantratn.com, why, how long it is kept and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978.
Data controller
SARL BABA JI (RATN – Restaurant indien), 9 rue de la Trémoille, 75008 Paris, France. Contact: contact@restaurantratn.com, +33 1 40 70 01 09.
Data collected and purposes
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, phone, email, date, service, time, number of guests, occasion | Handle the booking request, confirm it and welcome the guest | Steps taken at the guest’s request prior to a contract (Art. 6(1)(b)) | 12 months after the date of the meal, then deleted |
| Allergies, intolerances and dietary requirements | Adapt the preparation of the meal | Explicit consent (Art. 9(2)(a)), as this information may reveal health data | 30 days after the date of the meal |
| Private hire request | Prepare a proposal and organise the event | Steps prior to a contract (Art. 6(1)(b)) | 3 years after the last contact |
| Pages viewed, visit duration, source, device type, approximate city (Google Analytics) | Measure website traffic and improve its content | Consent (Art. 6(1)(a)), given through the cookie banner | Cookies: 13 months maximum. Statistics: 14 months |
| IP address, connection date and time (server logs) | Security and proper operation of the website | Legitimate interest (Art. 6(1)(f)) | 12 months maximum, at the host |
The required fields of the form (name, phone, email) are needed to handle the request: without them, the restaurant cannot contact you. The “Occasion” and “Allergies or special requests” fields are optional.
No data is used for marketing, sold or transferred to third parties. Booking data is never sent to Google Analytics. No automated decision is made on the basis of this data.
Recipients
- RATN restaurant staff in charge of bookings.
- Affectio, the agency in charge of designing and maintaining the website, which receives a copy of requests for technical monitoring of the form (processor).
- OVH SAS, website and data host, in France (processor).
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for Google Analytics audience measurement, only if you have accepted it (processor).
Processors act only on the restaurant’s instructions and are bound by confidentiality and data security obligations (Article 28 GDPR).
Transfers outside the European Union
Booking data is hosted in France and is not transferred outside the European Union.
Visit statistics collected by Google Analytics, if you have accepted it, may be transferred to Google LLC in the United States. This transfer is covered by the European Commission’s adequacy decision of 10 July 2023 (Data Privacy Framework), to which Google LLC has signed up, and by the European Commission’s standard contractual clauses.
Cookies
On your first visit, a banner lets you accept or refuse audience measurement cookies, as easily as one another. Until you have made a choice, no cookie requiring consent is set. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.
| Cookie | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| _ga, _ga_<id> | Google Analytics | Distinguish visitors and measure traffic | 13 months | Yes |
| ratn_consent | restaurantratn.com | Remember whether you accepted or refused | 6 months | No (necessary) |
No advertising cookies or social media trackers are used. Google Analytics is set up without advertising data sharing and without Google signals. The Google Maps link opens Google’s service in a new page, subject to its own privacy policy.
Refusing audience measurement cookies has no effect on your use of the website or on booking requests.
Security
Data is transmitted encrypted (HTTPS), stored with a host located in France and accessible only to authorised persons through password-protected access.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to object to it and to data portability, as well as the right to withdraw your consent regarding allergy information and audience measurement at any time, without affecting processing already carried out. You may also give instructions regarding what happens to your data after your death.
To exercise these rights, write to contact@restaurantratn.com or to SARL BABA JI, 9 rue de la Trémoille, 75008 Paris, France. You will receive a reply within one month.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr.
This English version is provided for convenience; in the event of any discrepancy, the French version prevails.
Last updated: 28 September 2026.