Privacy Policy

This policy describes the personal data processed by the aghavni-restaurant.com website. It does not cover processing carried out off-site (phone bookings, in-restaurant payment).

The site never collects, sees or stores any card details. When you choose to pay online you are redirected to the secure Monetico platform (Euro-Information / Crédit Mutuel-CIC), where the payment is entered and processed.

The only information we send to Monetico is: the amount, the currency, the order reference, your email address and your billing address. In return we receive only the payment outcome (succeeded or failed) and the transaction reference, which we store alongside the order.

Your data is never sold or rented. It is accessible to authorised restaurant staff and to the following technical providers, acting on our behalf:

• Hetzner Online GmbH — website and database hosting (Germany, European Union).
• Amazon Web Services (Amazon SES) — sending transactional emails (order confirmation, order ready, booking confirmation, change and cancellation). Servers located in the European eu-central-1 region (Frankfurt).
• Mailjet (Sinch) — newsletter mailing-list management. Only your email address is passed on.
• Monetico — Euro-Information / Crédit Mutuel-CIC — online payment processing (see section 3).
• Google Ireland / Google LLC — Google Maps map (loaded only if you click to display it) and, when enabled, Google Analytics audience measurement (see section 5).

Hosting and email delivery remain within the European Union. Google services may involve a transfer to the United States, covered by the standard contractual clauses and the EU–US Data Privacy Framework.

The site uses no advertising cookies and performs no profiling.

Strictly necessary cookies

• A language cookie, set when you switch site language, so we can serve you the right version.

Audience measurement — subject to your consent

The site may use Google Analytics 4, with IP anonymisation switched on, to measure traffic. These cookies are not advertising cookies and are not used for profiling.

No audience-measurement script is loaded until you have accepted it: a banner offers you accept and refuse, and refusing is exactly as easy as accepting. Until you choose, or if you refuse, nothing is set and no data is sent to Google.

You can change your mind at any time through the “Manage cookies” link in the footer. Withdrawing immediately deletes any measurement cookie already set. Your choice — acceptance and refusal alike — is remembered in your browser for 6 months, after which you are asked again.

Data kept in your browser (never sent to a third party)

• Your cart contents, so you find them again between visits.
• Your last 5 orders and last 20 bookings, powering the “My orders” and “My bookings” pages on this device. A button lets you clear each of these histories.
• Your contact details (name, phone, email, and where applicable billing address), only if you tick the “save my details” box on the order or booking form. Unticking the box deletes them immediately.
• A summary of the order in progress, just long enough to display the confirmation page; it is cleared when the tab is closed.
• Your choice about audience-measurement cookies, so you are not asked again on every visit.

This information stays on your device. You can remove it at any time by clearing your browser’s site data.

• The site is served over HTTPS only, with HSTS and a restrictive Content Security Policy.
• Order and booking status pages are reached through a link containing a random token, unique to each order or booking. These pages are excluded from search-engine indexing.
• Tokens, passwords and payment data are redacted in application logs.

Under the GDPR and the French Data Protection Act you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time (in particular for the newsletter).

To exercise these rights, write to restaurantaghavni@gmail.com, stating your request. We may ask for something that lets us verify your identity, and we reply within one month.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr).

This policy may be updated to reflect changes to the site or its providers. The last-updated date appears at the top of the page.