At GAULT&MILLAU, we know that you care about the protection of your personal data. This is why we are committed to ensuring the highest level of protection for your data, in compliance with the regulations applicable to us in terms of personal data protection.

This privacy statement describes our procedures for collecting and processing your personal data.

Who is responsible for processing my personal data?

The data controller is the company that defines for what purpose(s) and how your personal data is used.

Personal data collected for France on the site and mobile application (hereinafter referred to as "the site") are processed by :

GAULTMILLAU , B418 576 955, 37-39 rue Boissière 75016 Paris

Hereinafter referred to as "GAULT&MILLAU".

What data is collected about me?

GAULT&MILLAU only collects personal data that enables us to offer you the most appropriate services.

We collect and record your surname, first name, date of birth, gender, email address, telephone number, awards, start and end date of your contract with a facility and your position within that facility.

How and when do we collect data?

We collect the information available when the establishment is added to our database or subsequently.

How do we use the data and for what purposes?

The data collected is used to enable you to use the site and associated services, in particular:

Searching for and consulting establishments and/or products;
The possibility of evaluating establishments and/or products;
News consultation.

We only collect data that enables users to link you to a facility and understand your role within it. Your last name, first name, position in the establishment and any awards you may have received may be published and visible, always in connection with an establishment.

How do we store and protect data?

IT services and automated processes are provided by a subcontractor: Gault & Millau International SA - Rue du Jeu-de-l'Arc 15, 1207 Geneva.

All the data we collect is stored in a database hosted by Platform.sh, a subcontractor in France. Account passwords are encrypted, and connections are secured using SSL protocol.

The servers are physically secure and not accessible to the public. Professional access is strictly controlled, and limited to authorized technical personnel.

A priori, we do not transfer your personal data to other countries, or even to other subcontractors. Your data remains within our services and our services only. However, should we need to make such transfers, we ensure that the recipient complies with European data protection guarantees. You hereby consent to the above-mentioned transfers. Your consent may be specifically required in the event of data transfers that do not comply with the aforementioned guarantees.

How long do we keep data?

Data is kept for its entire period of validity, i.e. as long as it reflects reality. A GAULT&MILLAU administrator keeps this information up to date and deletes it when it is no longer relevant. If the data concerns you, you may exercise your rights as described in the paragraph "What are your rights and how to exercise them" below. The statutory deletion period then applies.

What are your rights and how to exercise them?

In accordance with data protection regulations, you can exercise your rights (access, rectification, deletion, opposition, limitation and portability where applicable) and determine the fate of your personal data by contacting us by email at the following address: france@gaultmillau.fr

To enable us to reply as quickly as possible, please provide us with your full name, e-mail address and, if possible, your pseudonym. Certain requests to exercise your rights (right of access) must be accompanied by a photocopy of an identity document bearing your signature in order to verify your identity and specify the address to which the reply should be sent. A reply will be sent to you within one (1) month of receipt of the request.

About cookies

We use various cookies on the site to improve the interactivity of the site and our services.

What is a "cookie"?

A "cookie" is a string of information, generally a small text file identified by a name, which may be transmitted to your browser by a website to which you connect. Your web browser will store it for a certain period of time, and send it back to the web server each time you reconnect. Cookies have many uses: they can be used to memorize your customer ID, an ID that can be used to track your browsing for statistical purposes, your preferred language, and so on.

How do we use cookies?

Strictly necessary cookies:

These cookies enable the site to function optimally. You can refuse them and delete them using your browser settings, but your user experience may be degraded.

Cookie name	Function	Retention period
PHPSESSID	Enables user account login	2 years, 11 months and 15 days

Analytical cookies:

These are cookies that enable us to track the use and performance of our site and improve its operation (for example, the pages most often consulted, user searches in the search engine, etc.). These services are provided by Google, and are not compulsory. You can accept or refuse them by going to the cookie management page, accessible via the link below.

Cookie name	Function	Retention period
_ga	Identifies Google Analytics session and user	24 months
_ga_[KEY]	Used to operate the Google Analytics session	24 months

More information on cookies:

The http://www.allaboutcookies.org website provides more details on how cookies work.

To manage your cookies on the GAULT&MILLAU website: link to open the cookie management window

Privacy policy for external sites

Our site may refer you to external sites not affiliated with GAULT&MILLAU by means of dynamic links. Our privacy policy covers only the GAULT&MILLAU platform and associated domain names. Any use of a third-party site will be covered by their own privacy policy.

Changes to this policy

GAULT&MILLAU may modify this statement at any time in order to comply with any potential regulatory, legal, editorial and/or technical developments. If necessary, we will replace the declaration on the site so that you have free access to the latest version at all times.

Last update: August 06, 2020.

Contact us

Do you have a question or comment? You can contact us by email using the following address: france@gaultmillau.fr

Contact the appropriate authorities

If you feel that your rights have not been respected and we have not been able to deal with your requests satisfactorily, you can contact the supervisory authority in your country of residence or domicile. The competent authority depends on the country in which you access our services. The following site can help you find the competent supervisory authority: https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080