Privacy Policy
Last updated — 2026
This privacy policy applies to all data processing carried out by Alcazar restaurant (hereinafter referred to as "Alcazar"), an establishment located at 62 Rue Mazarine, 75006 Paris.
It covers data collection conducted both online and offline, particularly information gathered through the website. alcazar.fr, partner booking applications, bookings made by clients and Users (hereinafter "Users"), or events organized at the request of clients or directly by Alcazar.
This policy is updated regularly. Alcazar recommends that every client and User consult it regularly.
1. Personal Data
What is Personal Data?
Personal Data refers to any information or set of information that directly or indirectly identifies a natural person, including:
- Direct identification: name, first name, email address, home address, etc.
- Indirect identification: pseudonymized data, unique identification number, IP address, etc.
This therefore refers to all information about you that you voluntarily provide to us or that we collect during your browsing on our site or when making your bookings and/or using our services.
Data Controller
Alcazar is responsible for processing the Personal Data it collects, unless expressly stated otherwise. Personal Data processed by Alcazar's partners is the responsibility of these third parties. No Personal Data collected by Alcazar will be transmitted to a third party without your prior information and/or consent.
Collection Methods
We collect your Personal Data through two main methods:
- Directly from you — when using the alcazar.fr website, online booking services, applying for our job offers, subscribing to our newsletter, or any direct contact with our teams.
- Automatically — when you access the site (technical data, IP address, browsing information, etc.).
Categories of Data Collected
- Identification and Contact Information — name, first name, email address, phone number.
- Application Information — professional experience, CV, skills, education level, languages, salary expectations, etc. This data is used exclusively for recruitment purposes.
- Payment Data — financial data related to bank accounts or credit cards, for the purpose of service payment.
- Technical Data — operating system version, browser type, IP address, access time, pages visited, access link.
2. Legal Basis and Purposes
Legal basis for collection
In accordance with applicable European (GDPR) and French regulations, your Personal Data is collected:
- Based on your consent
- In our legitimate interest
- To fulfill our legal obligations
Purposes of processing
Based on your consent:
- Manage your requests and questions
- Send you newsletters you have chosen to subscribe to
- Manage job applications
- Manage table, seat, or event bookings and send you confirmations
- Send you marketing information about our establishment and our events
Based on our legitimate interest:
- Ensure the defense of our interests in the event of a dispute or legal action
- Manage the cybersecurity of our website
- Prevent fraudulent activities
3. Data Accessibility and Transfer
Who has access to your data?
Your Personal Data is only accessible to Alcazar staff members who need to know it in the course of their duties, as well as to the following third parties:
- Processors and Technical Service Providers — hosting, security, website maintenance, email and newsletter management, anti-spam, recruitment agencies, banking companies.
- Partners for specific events.
- Competent Authorities when disclosure is required by law, a regulatory provision, or a court order.
These service providers are contractually obligated to use your data in compliance with applicable regulations.
Transfer outside the European Union
The Personal Data collected is hosted on servers located within the European Union. However, Alcazar may use service providers located outside the EU. Any transfer is carried out with appropriate safeguards in compliance with the GDPR (standard contractual clauses, BCR, etc.).
Minors' Data
Alcazar collects Personal Data only from adults. If you provide us with data concerning a minor, you guarantee that you are their legal representative. Contact us if you believe we are processing data from minors so that we can delete it.
4. Data Retention
We store your Personal Data for a period proportionate to the purpose of the processing:
- Commercial and marketing communication — 3 years from the end of our commercial relationship (customer), or the last contact (simple user or newsletter subscriber).
- Applications — 2 years from the communication of your data or the last contact.
- Specific requests — duration necessary for processing your request, then destruction or anonymization.
- Video recordings — 1 month, unless extended due to investigations (fraud, etc.).
- Banking data — deleted after the operation, kept in archive for a maximum of 13 months.
- Cookies — 13 months (excluding technical cookies).
5. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access to the Personal Data we hold
- Right to rectification — to update or correct any outdated or incorrect data
- Right to object regarding the receipt of commercial communications
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to define directives concerning the fate of your data after your death
- Right to lodge a complaint with the CNIL — cnil.fr/fr/plaintes
When processing is based on your consent, you can withdraw it at any time, without justification, by modifying your subscription preferences directly from our emails.
Exercise your rights
By mail
Alcazar — Personal Data Department
62 Rue Mazarine, 75006 Paris
By email
By phone
To respond to your requests, we may ask you for proof of identity.
6. Security and confidentiality
Alcazar implements organizational, technical, software, and physical measures to protect your Personal Data against alteration, destruction, and unauthorized access.
Alcazar requires its service providers, subcontractors, and partners to provide guarantees and implement sufficient security measures, in accordance with the GDPR.
Each client and User acknowledges that the Internet is not a completely secure environment and that our site cannot guarantee the absolute security of information transmission or storage.
Links to third-party sites
Our site may offer links to third-party sites that we do not control. This privacy policy does not apply to these sites. We encourage you to consult their own data protection policies.
7. Cookie management policy
What is a cookie?
A cookie is a small text file stored on your device (computer, tablet, phone) when you browse a website. It allows for the retention of state information for the duration of its validity.
Types of cookies used
- Technical cookies — essential for browsing and the proper functioning of the site. They allow the display to adapt to your device, remember your preferences, and form information.
- Statistical cookies — allow us to compile traffic and usage statistics (page views, user journeys, visit duration) to improve the site's usability. We use Google Analytics for this purpose.
- Social media cookies — enable sharing of our content on third-party platforms (Instagram, Facebook, LinkedIn, etc.).
- Advertising cookies — used to display advertisements tailored to your interests and measure campaign effectiveness.
Purposes of use
- Improve your browsing experience and ensure correct page display
- Remember your display and language preferences
- Anonymously analyze site performance
Consent management
In accordance with Article 82 of the French Data Protection Act, your prior consent is required for advertising cookies and social media cookies. Technical cookies do not require consent.
You can change your preferences at any time by clicking on the "Cookie Preferences" available on our site, or by configuring your browser directly.
Cookies (excluding technical cookies) are stored for a maximum period of 13 months.