Privacy policy

1. Data controller

BLACKSTAR GROUP INVEST (SASU)
Registered office: 13 Place des Cardeurs, 13100 Aix-en-Provence
Represented by Kenzo ZOUAGHI, president
Email: Kenzo.zouaghi@outlook.fr

2. Data collected

We only collect data strictly necessary for the purposes described below:

• Online booking and takeaway ordering (via the Be-Book widget): surname, first name, email, phone, date, number of guests or basket contents, pick-up time slot.
• General contact form: name, email, message.
• Groups & events form: name, phone, email, number of guests, requested date, message.
• Anonymised audience measurement of the website (page views, duration, browser).

3. Purposes of processing

• Management of bookings and customer relations.
• Management of takeaway orders (click & collect).
• Response to requests sent through the contact forms.
• Organisation of events and private hire.
• Improvement of the website and its operation.

4. Legal basis

The processing of your data is based on:

• The performance of a contract or of pre-contractual measures at your request (booking, order, group quote).
• Your consent for sending messages through the forms.
• Our legitimate interest in anonymously measuring the website's audience in order to improve it.

5. Retention period

• Booking and order data: 3 years after the last visit.
• Messages from the forms: 12 months maximum, unless an active customer file is constituted.
• Anonymised audience data: 13 months.

6. Data recipients

Your data is never sold. It is accessible only to:

• The BLACKSTAR GROUP INVEST team for handling your request.
• Our technical providers necessary for the service:
  • Be-Book for the management of bookings and takeaway orders.
  • Mail Hub Jarvis (DIGIFLOW) for sending the form emails.
  • OVH Cloud France for website hosting.
  • Elfsight for displaying Google reviews and the Instagram feed.

7. Transfers outside the European Union

Your data is mainly processed within the European Union. Where a provider operates from a country outside the EU, transfers are governed by the standard contractual clauses adopted by the European Commission.

8. Your rights

In accordance with the GDPR, you have the following rights over your data:

• Access: obtain a copy of your data.
• Rectification: correct inaccurate data.
• Erasure: request the deletion of your data.
• Portability: receive your data in a structured format.
• Restriction: restrict certain processing.
• Objection: object to a specific processing.

To exercise these rights, write to us at Kenzo.zouaghi@outlook.fr. We will reply within the legal period of one month.

You also have the right to lodge a complaint with the CNIL — www.cnil.fr.

9. Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure: HTTPS connection, restricted access, providers hosted in France and GDPR-compliant.

10. Changes to this policy

This privacy policy may change over time. Any modification will be published on this page. We invite you to consult it regularly.