Politique de Confidentialité

In accordance with the GDPR (EU) 2016/679 and the French Data Protection Act (loi Informatique et Libertés)

Last updated: June 2026

1. Who are we?

The website www.restaurantduchampdemars.fr is published and commercially operated by the company Tiptoque. The Site allows the online sale of gift cards giving access to the services of the Restaurant du Champ de Mars, located at 16 avenue de la Victoire, 77100 Meaux. It also allows table reservations and requests to privatise the dining room. The Restaurant du Champ de Mars, operated by the company Restaurant du Champ de Mars (SAS), acts as Tiptoque's partner for the practical execution of the culinary services.

Tiptoque is the controller of your personal data in connection with your use of the website www.restaurantduchampdemars.fr, and is referred to as "we", "our" or "us" throughout this policy.

Tiptoque
Simplified joint-stock company (société par actions simplifiée) with share capital of 47,260 euros
SIRET: 813 464 146 00030, RCS Paris: 813 464 146
Registered office: 1 rue de Stockholm, 75008 Paris

Personal data contact:
Email: commande@tiptoque.fr
Address: Tiptoque, 1 rue de Stockholm, 75008 Paris

If you have any questions about this policy or about the use of your data, please do not hesitate to write to us at commande@tiptoque.fr. We are committed to responding to you as soon as possible.

2. What data do we collect?

Below we describe the personal data we collect when you use our website www.restaurantduchampdemars.fr, book a table, purchase a gift card or contact us. We only collect the data that is strictly necessary for each service.

2.1. Data you provide to us directly

Your identification data and contact details
When you purchase a gift card, book a table or contact us, you provide us with your first name, surname, email address, and where applicable your telephone number and the recipient's email address.

Your order and payment data
When you purchase a gift card, we collect the information relating to your purchase (amount, date, recipient). Your bank card details are collected and processed directly by our payment provider Shopify Payments in a secure, PCI-DSS certified environment. We never have access to your bank card numbers and do not store them.

Your reservation data
When you book a table at the restaurant, the reservation is managed via our provider Zenchef, which collects your name, email, telephone, the number of guests, the desired date and time, as well as any allergies or dietary requirements you choose to share.

Your privatisation data
For a request to privatise our dining room, we collect via an online form your name, email, telephone, the number of guests, the purpose of the event and your specific wishes.

Your marketing preferences
If you subscribe to our newsletter, managed via our provider Mailchimp, we keep your email address and your communication preferences. You can unsubscribe at any time by clicking the link at the bottom of each email.

2.2. Data collected automatically

When you browse www.restaurantduchampdemars.fr, certain technical data is collected automatically by your browser:

Browsing data: IP address, browser type and version, operating system, pages viewed, duration of visit, traffic source.
Cookies and trackers: small files placed on your device, subject to your consent for non-essential cookies. See section 8 for full details.

2.3. What we do not collect

We do not collect any sensitive data (ethnic origin, political opinions, health data, with the exception of food allergies that you voluntarily share with us for your safety at the restaurant). Our site is not aimed at children under 16 and we do not knowingly collect data from minors.

3. Why do we use your data?

We only use your data for specific reasons, always associated with a legal basis. Here are the details:

Purpose Why Legal basis Retention period
Gift card salesProcess and send your gift cardPerformance of the contract5 years (accounting)
Restaurant reservationConfirm and prepare your tablePerformance of the contract1 year
PrivatisationDraw up a bespoke quotePre-contractual measures1 year
Replying to messagesAnswer your questionsLegitimate interest1 year
NewsletterNews, events, offersConsentUnsubscription or 3 years
Site audienceImprove the siteConsent (cookies)13 months
Right of withdrawalProof of your withdrawalLegal obligation5 years
Fraud preventionProtect your paymentsLegitimate interestOrder + 5 years
AccountingTax obligationsLegal obligation10 years

4. Who do we share your data with?

We never sell or rent your personal data.

We share it only with trusted partners, strictly for the reasons set out below:

To process your payments:
Shopify Payments (Shopify International Limited, Dublin, Ireland), our secure e-commerce platform certified PCI-DSS level 1, the highest level of payment security.

To manage table reservations:
Zenchef, our reservation management provider, receives the data necessary to take and follow up on your reservation.

For the execution of the culinary services:
Restaurant du Champ de Mars (SAS), the partner in charge of preparing the culinary services (reservations, privatisations), receives the data strictly necessary for the execution of your order or reservation.

To send our newsletter (with your consent):
Mailchimp (Intuit Inc., United States), our emailing provider, receives your email address and communication preferences in order to send you our news and offers.

To measure audience (with your consent):
Google Analytics, to understand how you browse our site and improve it. This service is only activated if you accept it via our cookie banner.

For our accounting:
Our chartered accountancy firm receives the billing data necessary for accounting and tax processing.

In the event of a dispute:
Consumer mediation service, only if you call upon the mediator.

We contractually require all our partners to protect your data in accordance with the GDPR and to use it only according to our instructions, never for their own purposes.

5. Is your data transferred outside Europe?

Some of our providers (Shopify, Google, Mailchimp) may process your data outside the European Union, in particular in Canada and the United States. These transfers are governed by safeguards recognised by the European Commission:

The adequacy decision for Canada (applicable to Shopify)
The EU–US Data Privacy Framework
The European Commission's standard contractual clauses

These mechanisms ensure that your data benefits from a level of protection equivalent to that offered by European law.

6. What are your rights?

The GDPR and the French Data Protection Act grant you important rights over your personal data. Here is what you can do:

Right of access: You can ask us for a copy of all the data we hold about you. We will provide it to you in a readable format.

Right to rectification: If your information is inaccurate or incomplete, you can ask us to correct it.

Right to erasure: You can ask us to delete your data. We will do so unless we have a legal obligation to retain it (for example, invoices must be kept for 10 years).

Right to restriction: You can ask us to temporarily suspend the processing of your data, for example while its accuracy is being verified.

Right to portability: You can retrieve your data in a structured, machine-readable format and transmit it to another provider.

Right to object: You can object to the processing of your data, in particular for commercial prospecting.

Right to withdraw your consent: For the newsletter, click the unsubscribe link at the bottom of each email. For cookies, use the "Cookie management" link at the bottom of the site.

Right to set post-mortem directives: In accordance with French law, you can determine what happens to your data after your death.

How to exercise your rights?

It is simple and free. Write to us:

By email: commande@tiptoque.fr
By post: Tiptoque, 1 rue de Stockholm, 75008 Paris

We will respond within a maximum of one month. If your request is complex, this period may be extended by two months, and we will inform you accordingly.

And if you are not satisfied?

If you believe that your rights are not being respected after contacting us, you can lodge a complaint with the CNIL (the French data protection authority):

Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr

7. How do we protect your data?

The security of your data is a priority for us.

On the technical side:

The website www.restaurantduchampdemars.fr uses the HTTPS protocol to encrypt all exchanges between your browser and our server.
Payments are processed in a PCI-DSS environment via Shopify Payments; we never have access to your card numbers.
Access to data is restricted to only those people who need it as part of their role.

On the organisational side:

Our partners are contractually bound to protect your data.
We limit collection to what is strictly necessary (data minimisation principle).

What you can do on your side:

Favour connections on secure networks (avoid public wifi for your purchases).
If you receive a suspicious email claiming to come from the Restaurant du Champ de Mars and asking for personal information, do not reply and forward it to us at commande@tiptoque.fr.

8. Cookies and trackers

8.1. What is a cookie?

A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit our site. It allows certain information to be stored to make your browsing easier and to offer you suitable services.

8.2. The cookies we use

Strictly necessary cookies (no consent required)

These cookies are essential to the operation of the site. Without them, you would not be able to place an order or browse correctly.

Shopify session cookies: operation of the cart and the checkout process
Shopify Payments cookies: securing online payments
Cloudflare cookies: network security and technical performance of the site
Language preference cookies
Shopify consent banner: stores your cookie choices

Analytics cookies (with your consent)

These cookies help us understand how you use the site in order to improve it.

Google Analytics: pages viewed, browsing path, duration of visit

8.3. How to manage your preferences?

Via our cookie banner: On your first visit, the Shopify consent banner allows you to accept or refuse non-essential cookies. You can change your choices at any time via the "Cookie management" link at the bottom of each page.

Via your browser: You can also configure your browser to refuse or delete cookies (Chrome, Firefox, Safari, Edge; see your browser's help menu).

Disabling certain cookies may affect your browsing experience.

8.4. Cookie lifespan

In accordance with the recommendations of the CNIL, our cookies have a maximum lifespan of 13 months. The data collected by these cookies is kept for a maximum of 25 months. After that, your consent will be requested again.

9. Changes to this policy

We may need to update this privacy policy to reflect legal developments or changes in our practices. In the event of a significant change, we will inform you through a visible notice on the site. The date of the last update is always indicated at the top of this document.

10. Contact us

For any question about this policy or about the processing of your personal data:

Personal data email: commande@tiptoque.fr
Address: Tiptoque, 1 rue de Stockholm, 75008 Paris