Privacy Policy | Atelier Salle à Manger

Last updated: 1 August 2026

Atelier Salle à Manger ("we", "us", "our") is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the French Data Protection Act (Loi Informatique et Libertés), and applicable European data protection legislation. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage our restaurant interior design services.

1. Data Controller

The data controller responsible for your personal data is:

Atelier Salle à Manger
18 Rue du Faubourg Saint-Honoré
75008 Paris, France
Email: [email protected]
Phone: +33 1 42 65 8814

For data protection enquiries, contact us at [email protected] with the subject line "Data Protection Enquiry".

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Identity and Contact Data

Full name, job title, and company or venue name
Email address, telephone number, and postal address
Professional role (restaurateur, hotel manager, developer, architect)

2.2 Project and Business Data

Venue location, cover targets, and service style
Floor plans, lease drawings, and project briefs you submit
Correspondence, meeting notes, and project communications
Contractual and invoicing information

2.3 Technical and Usage Data

IP address, browser type, and device information
Pages visited, time spent, and referral source
Cookie identifiers (see our Cookie Policy)

2.4 Communication Data

Contact form submissions and email correspondence
Phone call records where notes are taken for project purposes
Marketing preferences and newsletter subscription status

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

Contract performance (Art. 6(1)(b)): Processing necessary to provide restaurant interior design services, respond to proposals, and fulfil contractual obligations.
Legitimate interests (Art. 6(1)(f)): Processing for business development, client relationship management, website security, and service improvement, balanced against your rights and freedoms.
Consent (Art. 6(1)(a)): Where you have given explicit consent, such as for marketing communications or non-essential cookies. You may withdraw consent at any time.
Legal obligation (Art. 6(1)(c)): Processing required to comply with French tax, accounting, and commercial law obligations.

4. How We Use Your Data

We use your personal data for the following purposes:

Responding to enquiries, proposals, and consultation requests
Delivering dining floor layout, bar zone, and corridor planning services
Managing client accounts, contracts, and invoicing
Communicating project updates and deliverables
Improving our website and service offerings
Complying with legal and regulatory requirements
Sending marketing communications where you have opted in

5. Data Sharing and Recipients

We do not sell your personal data. We may share data with:

Service providers: IT hosting, email services, accounting software, and project management tools bound by data processing agreements compliant with Article 28 GDPR.
Professional advisers: Lawyers, accountants, and insurers where necessary for legitimate business purposes.
Authorities: Where required by law, court order, or regulatory request.

Any third-party processors are located within the European Economic Area (EEA) or subject to adequacy decisions or Standard Contractual Clauses for international transfers.

6. International Data Transfers

Your data is primarily processed within France and the EEA. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or binding corporate rules.

7. Data Retention

We retain personal data only for as long as necessary:

Client project data: Duration of the project plus 10 years for contractual and legal compliance purposes.
Enquiry data (no contract): 3 years from last contact.
Invoicing and accounting records: 10 years as required by French commercial law (Code de commerce).
Marketing consent records: Until consent is withdrawn, plus 3 years for proof of consent.
Website analytics: 26 months maximum.
Cookie data: As specified in our Cookie Policy.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access (Art. 15): Request a copy of the personal data we hold about you.
Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your data where there is no compelling reason for continued processing.
Right to restriction (Art. 18): Request limitation of processing in certain circumstances.
Right to data portability (Art. 20): Receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.
Right not to be subject to automated decision-making (Art. 22): We do not use automated decision-making or profiling that produces legal effects.

To exercise any of these rights, email [email protected]. We will respond within one month, extendable by two further months where requests are complex.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encrypted data transmission (TLS/HTTPS)
Access controls limiting data access to authorised personnel
Secure storage of project files and client correspondence
Regular review of security practices and processor compliance
Staff training on data protection obligations

While we take reasonable precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Children's Data

Our services are directed at business clients and professionals in the hospitality industry. We do not knowingly collect personal data from individuals under 16 years of age. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via our website with an updated "Last updated" date. We encourage you to review this page periodically.

13. Contact

For questions about this Privacy Policy or our data practices:

Atelier Salle à Manger
18 Rue du Faubourg Saint-Honoré, 75008 Paris
[email protected]
+33 1 42 65 8814