Data controller
Da Vinci [Legal entity], [full address] [Company number] Contact: [email]
Privacy
This policy explains what personal data Da Vinci collects through this website, why, and what your rights are.
Data we collect
Private-event form: name, email, phone, preferred date, number of guests and message. Analytics: only if you consent (see “Cookies”). Nothing is collected without your knowledge, and the site never asks for payment details.
Purposes and legal basis
Your data is used solely to answer your enquiry and organise your event. The legal basis is your consent and pre-contractual steps taken at your request. It is never sold, nor used for advertising without your agreement.
Recipients and processors
Your data is handled by the restaurant team and by our technical providers: · Vercel Inc. — website hosting · Supabase — database and storage (EU hosting) · Resend — email notifications · Google Ireland Ltd — analytics, only after consent Some transfers outside the EU may occur, covered by standard contractual clauses or the EU–US Data Privacy Framework.
Retention
Private-event enquiries: [12] months after the last exchange. Cookie consent: 6 months. Analytics data: [14] months.
Cookies
No analytics or advertising cookie is set before you agree. You can change your choice at any time via “Manage cookies” at the foot of the page. Cookies strictly necessary for the site to work do not require consent.
Your rights
You have the right to access, correct, erase, object to, restrict and port your data. Write to [email] and we reply within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).