Privacy Policy

This privacy policy (hereinafter the "Privacy Policy") aims to define the conditions and methods by which the company Magdalena (hereinafter "Magdalena") may process personal data of natural persons (hereinafter the "Users") who use the website www.magdalena-paris.fr (hereinafter the "Website") and use cookies during their navigation on the Website.

The Privacy Policy is available at any time in a special and dedicated tab on the Website and can be consulted at any time by the User. Any access to and use of the Website by the User implies unconditional acceptance of this Privacy Policy.

Magdalena reserves the right to modify this Privacy Policy at any time and without prior notice, particularly to adapt it to changes in the Website and to any applicable regulations. Therefore, Users are advised to refer to the latest version of the Privacy Policy before accessing and browsing the Website.

1. DATA CONTROLLER IDENTITY

For the processing of Personal Data on the Website, the data controller is the company Magdalena ("Magdalena"), registered with the Paris Trade and Companies Register under number 932321607, with the following contact details:

Registered office: 16 place de la Madeleine, 75008 Paris
Telephone number: +33 1 40 24 67 28
Email address: contact@magdalena-paris.fr

For any questions or requests for information regarding the Website, and to exercise their rights as listed in Article 5 below, Users can contact Magdalena at the above email address or by sending a registered letter with acknowledgment of receipt to the postal address mentioned above.

2. LEGAL BASES AND PURPOSES OF PERSONAL DATA PROCESSING

"Personal Data" refers to any personal information relating to an identified or identifiable natural person.

In accordance with European and French legislation on personal data protection (European Regulation No. 2016/679 of April 27, 2016 – GDPR – and French Data Protection Act No. 78-17 of January 6, 1978), Magdalena processes Users’ Personal Data only for the purposes and on the legal bases defined below.

2.1. Processing for online ordering and booking purposes
While browsing the Website, Users may access "click & collect" (online ordering) and online booking services, provided by Magdalena’s service providers.
To process the User's order or booking, Magdalena receives and processes the Personal Data collected by the relevant provider.
This processing is necessary for managing online orders and bookings in each relevant restaurant (legal basis: Art. 6.1.b GDPR – performance of a contract with the data subject).

2.2. Processing for private event and group booking requests
Users can request private event or group bookings at Magdalena by filling out a contact form on the Website. Magdalena collects and processes the following Personal Data:

First and last name
Phone number and email address
Employer identity (for professional requests)
Any Personal Data voluntarily provided in the contact form's free text field
This processing is necessary for managing private event and group booking requests in each relevant restaurant (legal basis: Art. 6.1.b GDPR – performance of a contract).

2.3. Processing for job application management
With the User's consent and to process their job application, Magdalena receives and processes Personal Data collected by its Human Resources department.
This processing is based on the User's consent (legal basis: Art. 6.1.a GDPR). Application-related documents may be retained for 2 years from the date of receipt.
Users may withdraw their consent at any time, but processing carried out before withdrawal remains lawful.

2.4. Processing for newsletter distribution
With the User's consent, Magdalena may use their Personal Data to send newsletters (legal basis: Art. 6.1.a GDPR – consent).
Users may withdraw their consent at any time. However, processing carried out before withdrawal remains lawful.

3. RECIPIENTS OF PERSONAL DATA

3.1. Magdalena’s internal services
Magdalena shares Users' Personal Data with its internal teams solely for the purposes defined in Article 2. Internal team members handling Personal Data are bound by confidentiality obligations.

3.2. Magdalena’s subsidiaries
Magdalena may share Personal Data with its subsidiaries solely to:

Manage orders, bookings, and group or private event requests in each subsidiary-managed restaurant
Manage job applications for positions within each subsidiary-managed restaurant

3.3. Third-party service providers
Magdalena shares Users’ Personal Data with its IT providers, acting as data processors within the meaning of the GDPR, including its booking platform provider. By entering your information into the booking module, you agree to the provider’s terms of service and legal notices.

3.4. Administrative and judicial authorities (where required)
Personal Data may be disclosed to public authorities only when legally required.

4. DATA RETENTION

Personal Data is retained only as long as necessary to fulfill the purposes described in this Privacy Policy. Retention duration is determined based on:

(i) the duration of the User's relationship with Magdalena;

(ii) legal or commercial obligations imposed on Magdalena; or

(iii) statutory or regulatory requirements.

In this regard:

Personal Data for online orders is retained for 5 years from the date of the order, except for accounting records, which are kept for 10 years
Personal Data for bookings and private/group event requests is retained for 3 years from the date of collection
Job application data is deleted after the recruitment process in case of rejection or kept for 2 years from last contact if the candidate consents
Newsletter subscription data is retained for 3 years from the date of collection or last contact initiated by the User

5. USER RIGHTS

Users have the following rights concerning their Personal Data:

Access, update, modify, or delete their Personal Data
Request restriction of or object to the processing of their Personal Data
Request data portability to another site or application

They also have the right to file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés – www.cnil.fr) or any competent court.

6. ANONYMOUS STATISTICAL COOKIES

With the User’s consent, Magdalena may use cookies to generate anonymous statistics. These cookies collect anonymous information such as device type, location, and gender to better understand client preferences and offer relevant services.

Personal Data is collected before being anonymized. Users can accept or refuse these cookies via the banner that appears when they first visit the Website. Cookies will only be activated with explicit consent. Consent can be withdrawn at any time via cookie settings on the Website.

6.1. Cookie management via the browser

Users have several options to refuse cookies. Most browsers accept cookies by default but can be configured to:

Accept or reject cookies on a case-by-case basis before they are stored
Regularly delete cookies from all devices via browser settings

Cookie management varies by browser. Instructions can be found in the browser’s help menu.
However, refusing cookies may limit certain functionalities of the Website, for which Magdalena cannot be held responsible.