Privacy Policy

Version dated [February 1, 2025]

Through this privacy policy, the company BAKERY BLISS CAFÉ provides you with all the information regarding the processing of your personal data that it carries out – for its own account and that of its subsidiaries – particularly to ensure an optimal experience (the company BAKERY BLISS CAFÉ being hereinafter collectively referred to as the ‘Company’).

Regulation EU No. 2016/679 of April 27, 2016, known as the “GDPR,” defines personal data as “any information relating to an identified or identifiable natural person.” Personal data includes, for example, your name, email address, or customer account number.

Who processes your personal data?

Your data is processed by BAKERY BLISS CAFÉ SAS, a simplified joint-stock company, with its registered office located at 3 Esp. du Port Vieux, 64200 Biarritz (the “Company”).

The Company acts as the data controller in processing your personal data. The Company is responsible for determining the purposes and means dedicated to the processing carried out.

The data protection officer can be contacted for any questions regarding the processing of your personal data by email at the following address: evitanerena@gmail.com or by mail: BAKERY BLISS CAFÉ SAS – Personal Data – 3 Esp. du Port Vieux, 64200 Biarritz.

What data do we process and for what purposes?

Collected data

The data we collect about you includes:

Identification data: name, surname*

Contact data: email address*, phone number*

The data marked with an asterisk (*) are mandatory to collect.

Please note that security measures are in place at our sales spaces, including a video surveillance system. Therefore, you may be filmed for security purposes during your visit.

Purposes pursued

We process your data to allow you to:

Improve our services by ensuring, among other things, audience measurement statistics.

It is also specified that, for your safety during your visit to one of our retail locations, we – including the company in charge of operating the location – may use a surveillance system that could capture your image.

Legal basis for processing

The processing carried out is based on:

The execution of contractual or pre-contractual measures,
Our legitimate interest,
Your consent,
Compliance with legal obligations.

How long are your data kept?

We ensure that your personal data is only retained for a period not exceeding that necessary in view of the purposes for which they are processed.

Who processes your data?

The data we collect is processed by the relevant internal services of the Company and by our operating subsidiaries – to prepare your orders – including:

BAKERY BLISS CAFÉ SAS, a simplified joint-stock company, with its registered office at 3 Esp. du Port Vieux, 64200 Biarritz.

The Company may also share the data with its service providers involved in providing services that require the communication of such data.

The information we collect about you may be transferred, stored, or hosted in countries where the Company has the necessary infrastructure to achieve the purposes mentioned above or where its service providers or, if applicable, subsequent service providers are located.

Therefore, it is possible that your data may be transferred to countries outside the European Union. If this happens, we ensure that appropriate protection mechanisms are in place to guarantee the satisfactory security of the data you entrust to us.

Cookies and Tracking Technologies

We also use cookies to analyze your use of navigation on the website. The cookies used, their purpose, and retention period are specified in the cookie usage policy.

Your Rights

In accordance with applicable regulations, you have the following rights:

Right to withdraw consent: As your consent is never final, you can withdraw the consent you gave at any time. However, processing carried out prior to the withdrawal will remain valid.

Right of access: You can ask us whether we hold any data about you and, if so, request access to it.

Right to rectification: To prevent us from processing inaccurate data, you have the right to rectify and/or complete the inaccurate or incomplete information we may have.

Right to erasure: You can request the deletion of your personal data.

Right to restriction of processing: In some cases provided for by the GDPR, you can ask us to temporarily suspend the use of certain of your data.

Right to object: You can object to all or part of the processing of your data.

Right to portability: When the processing of your personal data is based on consent or the performance of a contract or pre-contractual measures, and when processing is carried out using automated methods, you can request the recovery of such data in an easily usable format.

To exercise your rights, you can send a written request by email to the following address: evitanerena@gmail.com. Your request should specify your identity. If there is any reasonable doubt about the identity of the requester, an identity document may be requested.

We will strive to respond to your requests within a maximum of one month. However, complex requests may take up to three months to process.

You also have the option to file a complaint with the National Commission on Informatics and Liberties (CNIL).