Data controller

Caihouela Cyril — Sole trader (EI), under the French micro-enterprise regime, operates La Cahute. SIRET: 453 842 635 00022. Address: 917, D5 Route de Saint-Vallier, 06530 Saint-Cézaire-sur-Siagne. Data protection contact: contact@lacahute.fr or 06 70 51 44 18.

Orders by SMS

The order builder uses your selected pizzas, quantities, name, pickup time and optional comment to prepare a message in your SMS app. You must then send this message. The builder does not itself send these fields to the website server. Upon receiving the SMS, La Cahute processes the order content and your telephone number to prepare, confirm and manage your order. The legal basis is performance of the contract or pre-contractual steps taken at your request (Article 6(1)(b) GDPR). Your name and pickup time are required to use the builder; without them it cannot prepare the SMS. Comments are optional: avoid including sensitive information or information unrelated to your order.

Contact enquiries and location proposals

The Development page form collects your surname, first name, email, message and, if provided, whether the proposed location is private or public. This data is used to reply to your proposal and assess its feasibility. Email enquiries are used to answer your question. The legal basis is our legitimate interest in responding to enquiries and assessing location proposals (Article 6(1)(f) GDPR). Where your request concerns an order or contract you are considering with us, it falls under pre-contractual steps taken at your request. Required fields are indicated on the form; without them it cannot be submitted.

Form bot protection — Cloudflare Turnstile

The Development form uses Cloudflare Turnstile to limit automated submissions. Loading it sends technical signals to Cloudflare, Inc., including the IP address, browser and TLS connection information, and the site key and its origin. For La Cahute, the purpose is to protect the form and mailbox against abuse; the legal basis for this security processing is our legitimate interest (Article 6(1)(f) GDPR).

Cloudflare states that it acts as a processor to protect the site and as a separate controller to improve its bot detection, based on its own legitimate interest. The check may be required to submit the form. You can also email us directly at contact@lacahute.fr or call 06 70 51 44 18. In the current configuration, Turnstile loads on the form page independently of the choice concerning external reviews and awards.

The SMS and email retention periods described above do not apply to Cloudflare’s technical signals. Its general policy provides for retention according to purposes, security needs and applicable obligations, without a specific numerical Turnstile retention period in the notice consulted. Cloudflare operates international infrastructure and states that it may process data outside the European Economic Area, including in the United States, relying, depending on the transfer, on an adequacy decision or standard contractual clauses. The safeguards and terms actually applicable to the service used must be verified.

Information and exercising your rights: Turnstile privacy notice · Cloudflare general privacy policy. For protection of our form, contact La Cahute; for processing carried out by Cloudflare for its own purposes: dpo@cloudflare.com.

Retention periods

Order SMS messages are deleted no later than 3 months after the order. General contact emails are deleted no later than 12 months after the last exchange. Location proposals are retained during discussions and for no more than 12 months after they close. In the event of a complaint or dispute, only necessary records are retained separately for the time required to resolve it and for the applicable statutory periods. Accounting records subject to mandatory retention are kept separately for the legally required period; this does not justify retaining every SMS or email.

Recipients and no promotional messaging

Within La Cahute, only Caihouela Cyril receives and processes your enquiries and orders. OVH SAS hosts the website and the contact@lacahute.fr mailbox. Messages are viewed and synchronised in the Mail app on the operator’s iPhone. Telecommunications operators deliver SMS messages. La Cahute does not use telephone numbers or email addresses to send promotions. The external content providers described below receive connection data when their services load; their presence on the website does not itself make them recipients of the SMS order fields.

Your rights

You may request access to your data, rectification, erasure and restriction of processing under the conditions set out in the GDPR. You may object, on grounds relating to your particular situation, to processing based on our legitimate interest. Data portability applies to data you provide where automated processing is based on a contract or your consent. To exercise your rights, write to contact@lacahute.fr or the postal address above, specifying your request and information useful for locating your exchanges. Where there are reasonable doubts about your identity, appropriate evidence may be requested. A response is normally provided within one month; if a legally justified extension is required, you will be informed within that period.

Complaining to the CNIL

You may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), notably at https://www.cnil.fr/fr/plaintes.

Browsing, cookies and third-party content

The website does not use Google Analytics or Google Tag Manager. Elfsight and Tripadvisor reviews and Restaurant Guru awards are optional content grouped under the “marketing” category in the WebLegal manager. They are configured to wait for your consent. This choice concerns external content display; La Cahute does not use order contact details to send promotions. The OpenStreetMap map displays directly to help you locate La Cahute; loading it transmits your IP address to the map provider, among other data. Google directions and social network links open external services when clicked.

Choosing and changing your cookie preferences

You may accept, refuse or customise optional content in the WebLegal banner. Continuing to browse does not constitute consent. Your choice, including refusal, is stored for 180 days unless browser data is deleted or you change your choice. This period concerns remembering your choice, not the lifetime of every third-party cookie. The “Manage cookies” link at the bottom of every page lets you change your decision. Refusal does not prevent viewing pizza menus, contacting us or preparing an SMS order. Cookies strictly necessary to remember your choice do not require consent.

External content providers

Once optional content is activated, its provider receives the data needed to display it, including your IP address and browser information. Elfsight states that it retains its technical operating data for 7 days. Tripadvisor and Restaurant Guru apply their own rules to data received when their content loads. Their terms and retention periods are separate from those for SMS messages and emails.

Provider information: WebLegal · Elfsight · Tripadvisor · OpenStreetMap Foundation · Restaurant Guru · OVHcloud — data protection

Data location and international services

OVH SAS hosts the website and email service. The provider’s French registered office alone does not establish the location of all processing performed by its services. The terms of the subscribed service determine processing locations and applicable commitments.

Tripadvisor LLC states in its privacy statement that data may be transferred and stored outside the European Economic Area, including in countries where its services and providers operate. Tripadvisor states that these transfers are covered by an adequacy decision or safeguards such as the European Commission’s standard contractual clauses. Its statement, linked above, provides details and contact information for its European representative.

OpenStreetMap Foundation states that personal data other than data associated with map tile requests is stored in the United Kingdom and the Netherlands, with backups in the European Union. Map images are distributed by a worldwide server network: the server contacted depends on the network at the time of the request. Loading the map therefore involves communicating with infrastructure not limited to France.

For optional content, refusing the corresponding category prevents activation in blocks configured for that purpose. You may withdraw consent using “Manage cookies”. For information about recipients and safeguards applicable to your data, contact contact@lacahute.fr; provider contact details and policies are also available above.