FR EN
FR EN

Privacy policy

  1. 1. PREAMBLE

    The website www.vapiano.fr is published by the VAPIANO Economic Interest Group (GIE VAPIANO), whose contact details are provided under the “Legal Notice” tab.
    This policy concerns the protection of personal data provided to VAPIANO by users and customers of the website and sets out how VAPIANO processes said data.
    VAPIANO attaches the utmost importance to the protection of the privacy and personal data of its users and customers, to compliance with applicable law, and to offering optimized services.
    VAPIANO is also attentive to how online and offline activities that require the collection and processing of personal data are created, organized, and implemented.
    VAPIANO is committed to maintaining maximum protection of the personal data processed and to complying with current regulations relating to the protection of personal data.
    By using the website, users and customers are informed of and accept this personal data protection policy. If the User or Customer is a minor, they accept this privacy policy with the consent of their legal guardian.
    Definitions of capitalized terms are found in the General Terms and Conditions of Sale.
    Browsing the Website is reserved for adults. If the User is a minor, they declare and acknowledge having received authorization from their parents or legal guardian(s) to browse the Website, use the services offered, and transmit personal data concerning them.

    2. PERSONAL USER DATA COLLECTED AUTOMATICALLY (VIA COOKIES)

      • By continuing to browse the Website, the User accepts the use of cookies. They can object to this by clicking on the “learn more and configure cookies” link. (By clicking on the “I agree” banner), that is, by giving your consent to the collection of Personal Data via cookies, a certain amount of Personal Data will be automatically collected by VAPIANO (see clause 13 for more information regarding the cookies used by VAPIANO).
        The Personal Data collected via cookies is as follows:

        IP address (identification number of each device connected to the internet)
        Browser information commonly known as UserAgent
        Postal addresses and/or geolocation
        Name, surname, telephone number, email address, postal address
        User browsing history
        Personal contact information

    3. PERSONAL DATA PROVIDED BY THE CUSTOMER TO PLACE AN ORDER (“TAKEAWAY”)

    In order to order Products on the Website, the User may or may not create an Account.
    By placing an Order, the User becomes a Customer.

      1. Why is this data being collected?

    The collection of this Data is necessary for the performance of the contract between the Customer and VAPIANO, i.e., for processing the Order and issuing the invoice.
    This Data is also collected for marketing purposes (newsletters, general or personalized communications, and commercial solicitations regarding the company’s activities and Products and similar products).

      1. Who collects and processes this data, and to whom is it communicated?

    Order data is collected and processed by VAPIANO, which subcontracts the online ordering service to the following companies: 

     ZELTY, a simplified joint-stock company, registered with the Nanterre Trade and Companies Register under number 809 642 176, with a share capital of €8,297.90, whose registered office is located at 8 Villa Lecoeur, 92270 Bois Colombes, represented by its current Chairman, Mr. Marc LEGAY. 

    INNOVORDER, a simplified joint-stock company, registered with the Paris Trade and Companies Register under number 804 818 482, with a share capital of €21,923, whose registered office is located at 7 hameau de Boulainvilliers 75016 Paris, represented by its President Jérôme VARNIER.

    This Data is also communicated to VAPIANO, to the restaurant (VAPIANO subcontractor) in which the Customer has chosen to collect their Order and to the webmaster (VAPIANO subcontractor), the company MYLI (simplified joint-stock company with a single shareholder, registered with the RCS of Marseille 822 948 949, with a share capital of €10,500.00, whose registered office is located at 45 Rue Frédéric Joliot Curie, 13013 Marseille)

      1. What data is collected?

    The order requires, at a minimum and mandatorily (when placed without creating an account), the provision of the following personal data:

    E-mail address

    Name

    First name

    Phone number

    If the User chooses to create an Account, this creation will require the mandatory provision of the following Personal Data:

    E-mail address,

    Name,

    First name.

    In this case, the Customer will be required to provide their telephone number at the time of Order confirmation.

    Regarding payment data, this information is provided by the Customer directly to the payment processor (STRYPE) and is not processed by VAPIANO. This payment data is processed by the payment processor, under its own responsibility, in accordance with its privacy policy, which the Customer agrees to.

      1. How long is this data kept  ?

    In accordance with its legal obligations, VAPIANO retains the Data collected in connection with the Order for the duration of the business relationship.

    This data is then archived for:

    5 years for Data relating to the conclusion of the order contract;

    10 years if the Order amount is equal to or greater than €120;

    10 years for Billing Data. 3.2. Who collects and processes this data, and to whom is it communicated? 

    4. PERSONAL DATA PROVIDED BY THE USER TO LOCATE A RESTAURANT (“ON-SITE”)

    In order to access this service, the User will need to indicate their location or consent to geolocation.

      1. Why is this data being collected?

    The collection of this data is necessary for VAPIANO to provide its restaurant location service.

      1. Who collects and processes this data, and to whom is it communicated  ?

    The data is collected and processed by VAPIANO.

     In order to provide this location service, VAPIANO will use the Google Maps service, which is therefore the recipient of the Data.  

      1. What data is collected?

    The provision of this service by VAPIANO requires the User to provide their address, either directly by indicating it in the bar provided for this purpose, or indirectly by agreeing to be geolocated.

      1. How long is this data kept  ?

    In accordance with its legal obligations, VAPIANO retains the Data collected within the framework of the restaurant location service for the period necessary to perform the service (locate the restaurants closest to the address indicated).

    This data is then archived for 3 years.

    5. 5. PERSONAL DATA PROVIDED BY THE CUSTOMER TO RECEIVE DELIVERY (“DELIVERY”) In order to access this service, the User must provide their delivery address.

      1. Why is this data being collected?

    The collection of this data is necessary for the provision of the delivery service by VAPIANO and its partner food delivery companies, such as, but not limited to, Restauin, Glovo, Deliveroo, Uber Eats, Please, Just Eat…

      1. Who collects and processes this data, and to whom is it communicated  ?

    Delivery data is collected and processed by VAPIANO.

    This information is also shared with partner meal delivery companies (data recipients) who will deliver the meal. This delivery data is processed by the service provider, under its own responsibility, in accordance with its privacy policy, which the customer agrees to.

     This Data is also communicated to the webmaster (subcontractor of VAPIANO), the company MYLI (simplified joint-stock company with a single shareholder, registered with the RCS of Marseille 822 948 949, with a share capital of €10,500.00, whose registered office is located at 45 Rue Frédéric Joliot Curie, 13013 Marseille).

    In order to provide this delivery service, VAPIANO will use the Google Maps service, which is therefore the recipient of the Data.

      1. What data is collected?

    The provision of this service offered by VAPIANO and carried out by partner meal delivery companies requires the User to provide their delivery address.

      1. How long is this data kept  ?

    In accordance with its legal obligations, VAPIANO retains the Data collected within the framework of the Delivery service for 5 years.

    6. PERSONAL DATA PROVIDED BY THE USER IN THE CONTACT FORM

      1. Why is this data being collected?

    The collection of this Data allows VAPIANO to respond to questions asked by Users.

      1. Who collects and processes this data, and to whom is it communicated  ?

    Data relating to the contact form is collected and processed by VAPIANO.

      1. What data is collected?

    In order to contact VAPIANO via the contact form, the User must provide VAPIANO with the following Data:

    • Name,

    • First name,

    • E-mail address,

    • Phone number.

      1. How long is this data kept  ?

    In accordance with its legal obligations, VAPIANO retains the Data collected in the context of the contact form for 3 years from the date of collection or the last contact from the User.

    7. PERSONAL DATA PROVIDED BY THE USER TO RECEIVE NEWSLETTERS

    When placing an order and/or filling out the contact form, the Customer/User may give their consent to receive newsletters by SMS and/or email.  

    7.1. Why is this data collected?

    The purpose of collecting this data is to carry out operations related to prospecting.

    If the Customer / User has given their consent by ticking the box provided for this purpose, VAPIANO may send them commercial solicitations about other products. 

    If the Client / User has given their consent by ticking the box provided for this purpose, VAPIANO may send them commercial solicitations from partners. 

    The Client / User may object to the use of their Personal Data for marketing purposes and may unsubscribe from the newsletter (email or SMS) at any time by clicking on the unsubscribe link at the bottom of each email received or by sending “STOP” to the number indicated in the SMS. 

    7.2. Who collects and processes this data, and to whom is it communicated?

    Data relating to newsletter registration is collected and processed by VAPIANO. 

    They are also communicated to +++.  

    7.3. What data is collected?

    In order to receive newsletters from VAPIANO, the User must provide VAPIANO with the following Data: 

    Name, 

    First name, 

    E-mail address, 

    Phone number. 

    7.4. How long is this Data kept?

    In accordance with its legal obligations, VAPIANO retains the Data collected in the context of the contact form for 3 years from the date of collection or the last contact from the User. 

    8. PERSONAL DATA PROVIDED BY THE USER IN THE “RECRUITMENT” TAB 

    8.1. Why is this data collected?
    The purpose of collecting this data is to carry out operations related to recruitment and to assess the candidate’s ability to fill the proposed job.
    8.2. Who collects and processes this data, and to whom is it communicated?
    Recruitment data is collected and processed by My Serious Game (hosted on AWS Paris). It is also shared with Talent Soft.  
    8.3. What data is collected?
    Name, 
    First name, 
    E-mail address, 
    Phone number. 
    Cover letter
    Resume
    Presentation video 
    8.4. How long is this Data kept?
    If an application is unsuccessful, the recruiter must inform the candidate that they wish to retain their file, giving them the opportunity to request its deletion. If a candidate does not request the deletion of their file, the data is automatically deleted two years after the last contact. Only the candidate’s explicit consent allows for longer retention. 

    9. HOSTING OF PERSONAL DATA

     Personal data is hosted by OVH as a subcontractor, which undertakes to take the measures required by the regulations in force.

    No personal data is stored by VAPIANO. 

    10. DATA RELATED TO THE USE OF WIFI IN RESTAURANTS

     In accordance with the provisions of Law No. 1.165 of December 23, 1993, concerning the protection of personal information, as amended, GIE VAPIANO undertakes to respect the confidentiality of information provided by Wi-Fi service users when connecting to the internet via the captive portal.

    This information is collected by the service provider METEOR NETWORK, 40 rue du Général Malleret-Joinville – 94400 Vitry Sur Seine – email: webmaster@metornetworks.com, on behalf of the company GIE VAPIANO, 58 bis rue la Boétie 75008 Paris

    The data collected includes: title, surname, first name, country of usual residence, postal code, email address. 

    This information is used by the company GIE VAPIANO and MILY for statistical purposes as well as for communicating commercial information to Users of the WiFi service.

    This information is kept for 3 years from the date of collection.

    The collection of information on individuals under 16 years of age is limited to their name, nationality, and date of birth, which can only be provided by an adult. We ask that you ensure your children do not provide us with any personal data without your permission. Should such a transmission occur, you can contact the Data Protection Officer (see contact details below) to have this information deleted.

    Commercial Information: If the User has given their consent by checking the box provided for this purpose, GIE VAPIANO may send them commercial information by email regarding its products, offers, promotions, or events that may be of interest to Users. The User may unsubscribe at any time by clicking on the unsubscribe link at the bottom of each email received.

    In accordance with regulations concerning the processing of personal data, individuals whose personal data is being processed have the right to access, rectify, erase, and object to its processing. The Data Controller will take all necessary measures to rectify, complete, update, or delete their data if it is inaccurate or incomplete.  

    12. USER/CUSTOMER RIGHTS REGARDING PERSONAL DATA COMMUNICATED TO VAPIANO

     In accordance with applicable regulations, the Customer/User has the following rights regarding their personal data provided to VAPIANO:
    the right to access and rectify
    their data; the right to erasure (“right to be forgotten”), the right to restrict processing, and the right to object to processing in the cases provided for by applicable regulations;
    the right to define instructions regarding the fate of their personal data after their death;
    the right to data portability of the raw data provided to VAPIANO;
    and the right to lodge a complaint with the CNIL (French Data Protection Authority).
    The Customer/User may exercise these rights by email to serviceclient@vapianofrance.fr, or by mail to the following address: GIE VAPIANO, 9 avenue Percier, 75008 Paris, France.
    The Customer/User is informed that VAPIANO will request proof of identity before complying with any of the above-listed requests.
    If the Client/User is unable to prove their identity, VAPIANO will not be able to provide the requested information.
    In accordance with applicable regulations, this request will be fulfilled within a maximum of one month, provided it is not deemed abusive.
    Exercising these rights is free of charge for the Client/User. However, VAPIANO may charge a reasonable fee based on administrative costs for any additional copies requested by the Client/User. VAPIANO may also charge a reasonable fee that takes into account the administrative costs incurred in providing the information, communicating, or taking the requested actions when the Client/User’s requests are manifestly unfounded or excessive, particularly due to their repetitive nature.

    12. CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

      VAPIANO continuously improves its security procedures in line with technological advancements to maintain the highest level of protection. On the Website, the transmission of Personal Data is secured via the HTTPS protocol (SSL3/TLS1.3).

    All VAPIANO employees, subcontractors and authorized third parties who have access to Customer/User Personal Data or are involved in its processing are required to respect the confidentiality of this data.

    VAPIANO guarantees that, apart from the persons and recipients listed in this Policy, the Personal Data of Customers/Users will not be disclosed. In particular, it will not be disclosed to institutions or governmental authorities, except as required by law.

    13. COOKIES

     In order to allow all internet users optimal navigation on the Website and to improve the services offered by VAPIANO, the User is informed that VAPIANO will be required to place cookies on his computer, to which he expressly consents.

    These cookies may also be used for statistical purposes. A cookie is a piece of information stored on the user’s hard drive by the server of the website visited. By clicking on the banner provided for this purpose and/or by continuing to browse the Website, the User consents to the use of cookies. The User acknowledges and accepts that their consent is valid for a period of thirteen (13) months. The User can refuse the placement of cookies by configuring their browser. To learn how to do this depending on the browser used, the User is invited to consult its help section. In such a case, browsing the Website will not be optimized. If systematically disabling cookies on the user’s browser prevents them from using certain services or features provided by VAPIANO, VAPIANO cannot be held liable for this malfunction. The following cookies are present on the website:

    • Google Analytics (see description below)

    • Google Tag Manager (complement to Analytics)

    • Google AdWords (if the person came from AdWords)

    • Zelty (if ordering takeaway)

    • Facebook Pixel (see description below)

    • Facebook Ads (if the user came from a Facebook Ad)

    • Facebook Social Plugin (Facebook feed aggregation, see description below)

    • Instagram Social Plugin (Instagram feed aggregation)

    • MyliReview Plugin (displays Google/Facebook reviews)

    • MyliLead Plugin (route management and delivery redirection)

    • WordPress

    • MYLI cookies (for tracking user journeys and measuring conversion)

    • Google Analytics

    This website uses Google Analytics. This is a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for VAPIANO, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf, including, in particular, the publisher of this website. Google will not associate your IP address with any other data held by Google. Facebook Pixel The website uses Facebook Pixel which allows tracking the behavior of internet users.

    Following your permission granted as follows: “I accept the use of the Facebook pixel to track user behavior” our website uses the “Facebook Pixel to track user behavior” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA, 94304, USA.

    This pixel tracks user behavior after they are redirected to the provider’s website following a click on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising campaigns.

    The data collected is anonymous and does not allow for the identification of the visitor. However, this data is processed and stored by Facebook, making it possible to link it to the user’s profile and allowing Facebook to use this data for its own advertising purposes in accordance with Facebook’s Data Policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to place advertisements on the Facebook website or elsewhere. A cookie may also be stored on your computer for this purpose.

    Only visitors aged 16 and over can grant permission to use the pixel that tracks user behavior. If you are younger, ask your parents or legal guardians for permission. If you wish to revoke your permission, please click here: www.facebook.com/ads/website_custom_audiences/ Facebook Social Plugins

    Our website also uses social plugins from the social network facebook.com, whose headquarters are located at Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). These plugins are recognizable by the presence of one of the Facebook logos (a white “f” on a blue square or the “thumbs up” symbol) or are identified by the phrase “Facebook Social Plugin”. You can view the list and appearance of Facebook Social Plugins at the following website: developers.facebook.com/plugins

    When you visit a webpage on our website that contains this type of plugin, your browser establishes a direct connection to Facebook’s servers. The plugin’s content is transmitted directly from Facebook to your browser, which then links it to the webpage. Therefore, we have no control over the extent of the data collected by Facebook using this plugin and are informing you of this fact. By integrating the plugins, Facebook receives information that you have visited the corresponding page of our website. If you are logged into Facebook, Facebook can record your visit in your Facebook account. If you interact with the plugins, for example, by clicking the “like” button or leaving a comment, this information is transmitted directly from your browser to Facebook and stored there. Even if you are not a Facebook member, Facebook may still discover and store your IP address.

    For more information on the purpose and scope of data collection, the subsequent processing and use of data by Facebook, as well as your rights in this regard and the settings options for protecting your privacy, please consult Facebook’s data protection policy at www.facebook.com/policy.php. If you are a Facebook member and do not want Facebook to collect data about you through our website and associate it with your Facebook account data, you must log out of Facebook before visiting our website.