Skip to content

Legal information

Privacy Policy

We collect only what we need in order to reply to you. This page sets out what data we receive, why, how long we keep it, and how to exercise your rights.

Last updated:

Data controller

The data controller is the restaurant Seven 7 Days, 10 Rte de Neuf-Brisach, 68000 Colmar.

For any question about your data: [email protected] or 03 89 29 54 95.

Data we collect

Two sources, and only two:

  • Contact form: your name, your e-mail address, your phone number (optional), the subject and body of your message, and the site language you used. We store this so that we can reply to you.
  • Technical data: your IP address, your browser (user agent) and the time of your requests, recorded by the server and the session in order to keep the site running and secure.

There is no customer account, no newsletter and no online payment. We do no advertising profiling, and we neither sell nor rent any data.

The form contains an invisible trap field aimed at bots: when it is filled in, the message is simply ignored and nothing is stored.

Purposes and legal bases

Each processing operation rests on a legal basis within the meaning of Article 6 GDPR:

  • Answering your enquiry and, where relevant, preparing your visit: pre-contractual steps and our legitimate interest in replying to our guests.
  • Keeping the site secure and limiting spam: legitimate interest.
  • Running the site technically (session, cross-site request forgery protection): legitimate interest.

Retention periods

We keep nothing “just in case”:

  • Messages received through the form: kept for a maximum of three years after the last exchange, then deleted.
  • Browsing session: expires after two hours of inactivity.
  • Server logs: twelve months at most, in line with CNIL guidance.

Who receives the data

Your messages are read only by the restaurant team.

Our hosting provider can technically access data stored on the server as part of maintenance: it acts on our instructions and may not use the data for any other purpose.

No data is sold, rented or passed on for commercial purposes.

Security

The site is served over HTTPS, access to messages is limited to the people who need to answer them, and form submissions are rate-limited to contain abuse.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your data:

  • Right of access: obtain a copy of the data we hold about you.
  • Right to rectification: have inaccurate information corrected.
  • Right to erasure: ask us to delete your data.
  • Right to restriction of processing.
  • Right to object to processing based on our legitimate interest.
  • Right to portability: receive your data in a machine-readable format.
  • Right to give directives on what happens to your data after your death.

To exercise these rights, write to [email protected] or by post to 10 Rte de Neuf-Brisach, 68000 Colmar. We reply within one month. If we have reasonable doubt about your identity, we may ask for proof.

Complaint to the CNIL

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

Changes

This policy may change as the site does (a new feature, a new tool). The date of the last update appears at the top of this page.