PRIVACY POLICY

Last updated: 17 September 2024 

Café Joyeux places transparency and honesty at the heart of its principles. More than that, Café Joyeux is concerned about how your Personal Data is processed and attaches particular importance to the confidentiality and security of your data. Café Joyeux implements a process of continuous improvement of its compliance with the General Data Protection Regulation (GDPR), the ePrivacy Directive and Law No. 78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties. 

Before enjoying your next coffee, we recommend that you consult our privacy policy. This will enable you to familiarise yourself with our methods and understand our commitments in terms of protecting your Personal Data. 

For any information on the protection of Personal Data, you can also consult the website of the Commission Nationale de l'Informatique et des Libertés www.cnil.fr. 

The purpose of this privacy policy is to inform you in a clear, simple and precise manner of the processing that we carry out on the Personal Data that you provide to us, or that we are likely to collect, of their possible transfer to third parties and of the rights and options available to you. 

1) Definitions 

“Recipient": the natural or legal person who receives communication of Personal Data, whether a third party or not; 

“Personal Data": any information relating to a natural person who is directly or indirectly identified or identifiable, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity; 

“Café Joyeux": all the entities controlled within the meaning of Article L.233-3 of the French Commercial Code by Abondance de joie, a simplified joint stock company with variable capital, with a minimum share capital of 425,358 euros, having its registered office at 22 rue Georges Picquart, 75017 Paris, registered with the Paris Trade and Companies Registry under number 844 786 004; 

“Informed Joyeux": any natural person who subscribes to the newsletter from the Site, without having an account. 

“Products” and “Services”: the products and services offered by the entities of the Café Joyeux group, in particular on the Site or in CAFE JOYEUX cafés-restaurants. Services include, but are not limited to, fast food services in CAFE JOYEUX cafés-restaurants, company cafeterias and event services (catering, events, privatisations, reservations).The Products include in particular coffee, tea, goodies or other objects marketed under the brand name ‘JOYEUX SERVI AVEC LE CŒUR’ (alone or in co-branding) by the entities of the Café Joyeux group, the subscription to a coffee machine and/or machine maintenance. 

“Data Controller": the natural or legal person who, alone or jointly with others, determines the purposes and means of the Processing; 

“Site": the https://www.cafejoyeux.com/en/; website; 

“Sub-processor": the natural or legal person who processes Personal Data on behalf of the Controller; 

“Processing": any operation or set of operations carried out, whether or not by means of automated processes, on data or sets of Personal Data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, limitation, deletion or destruction; 

“User": any natural person who has an account on the Site and who accesses the Services offered by Café Joyeux through this account. 

“Visitor": any individual who browses the Site without creating or connecting to an account. 

2) The data controller

Depending on the case, the persons responsible for processing Personal Data are the following Café Joyeux companies: 

- ABONDANCE DE JOIE, a simplified joint stock company with variable capital and a minimum share capital of 425,358 euros, having its registered office at 22 rue Georges Picquart, 75017 Paris, registered in the Paris Trade and Companies Register under number 844 786 004 (hereinafter ‘ADJ’). 

- GRAINS ET CAPSULES, a société par actions simplifiée (simplified joint stock company) with share capital of €100,000, having its registered office at 17 rue Henry Monnier, 75009 Paris, registered with the Paris Trade and Companies Registry under number 842 228 645 (hereinafter ‘G&C’). 

- GRAIN DE MOUTARDE, a limited liability company with share capital of 100,000 euros, having its registered office at 22 rue Georges Picquart, 75017 Paris, registered with the Paris Trade and Companies Registry under number 827 853 367 (hereinafter ‘GDM’). 

3) Cases of collection of Personal Data 

Café Joyeux may collect your Personal Information directly or indirectly, in paper or electronic form, in order to manage orders and customer relations, to personalize the services and messages sent, and to ensure the security of its Site. Café Joyeux undertakes to obtain your consent and to give you the opportunity to give your optional consent to receive communications. In addition, you may oppose the use of your data at any time by withdrawing your consent. All you have to do is click on the unsubscribe link in the last communication received. 

4) Cookies

We use cookies and other trackers to collect personal data about you in order to pursue some of the purposes of our processing. We invite you to consult the policy relating to cookies and other trackers to obtain detailed information on their use and other comparable technologies and to configure them if necessary, by clicking here. 

5) Recipients of Personal Data

Only authorized Café Joyeux employees or its service providers are required to process your Personal Data and only when this is necessary for the purpose of the Processing. We assure you that we do not transmit your Personal Data to third parties, except in cases where the purpose of the Processing requires it, and to the following Recipients: 

(i) Cases requiring transfer: 

- To carry out the purpose of the Processing for which the Personal Data was collected: 

• in response to a request from the public or judicial authorities ; 
• to ensure the safety of individuals, to protect the public or to protect our rights and property - and those of our customers; or 
• If we are required to do so by law or legal process. 

(ii) Recipients: 

- Companies in the Café Joyeux Group ; 

- Employees of our Sub-Contractors that Café Joyeux may use for the management of the Products and Services (for example, payment service providers); 

- Competent authorities pursuant to applicable law and/or court order; 

- Partners. 

We ensure that these Recipients implement appropriate security and confidentiality measures to ensure the proper security of your Personal Data. 

In addition, these Recipients are not authorised to use or transfer your Personal Data, except in the case of compliance with legal obligations or if this is necessary. 

6) Transfers of Personal Data outside the European Union

We may transfer your Personal Data to internal or external Recipients located in countries outside the European Union or the European Economic Area that do not offer an adequate level of protection for Personal Data. In order to guarantee the security and confidentiality of Personal Data transferred in this way, we take all necessary measures to ensure that this data is adequately protected. 

7) Purposes, legal basis and retention period for Personal Data

We apply the following purposes, legal bases or legal grounds and retention periods to the Processing of your Personal Data. 

Among the applicable legal bases: 

• Contract: the processing of Personal Data is necessary for the performance of the contract to which you have consented. 
• Consent: you agree to the processing of your Personal Data by means of an express consent (tick box, click...). You can withdraw this consent at any time. 
• Legitimate interest: Café Joyeux has a business interest in processing your data that is justified, balanced and does not infringe your privacy. With certain exceptions, you may object at any time to processing based on legitimate interest by notifying us. 
• The law: the processing of your Personal Data is required by law.

For all practical purposes, the Personal Data essential to Café Joyeux is the data which, if not filled in, is indicated by the following sentence ‘Please fill in this field’ on the collection forms. If you do not fill in these mandatory fields, we will not be able to respond to your requests and/or provide you with the Products and/or Services you have requested. The other information is optional and enables us to improve our communications and Services to you. 

Purpose of Processing 

• Creation, management and administration of customer, user and beneficiary accounts 

Type of personal data processed : identification data (surnames, first names, etc.), contact data (email address, telephone number, postal address), authentication and internet browsing data 

Legal basis : Contract

Data controller : G&C 

Shelf life : 5 years after last activity

• Customer relationship management and processing of complaints and orders for products/services (events) 

Type of personal data processed : Identification data (surnames, first names, etc.), contact data (email address, telephone number, postal address), data communicated to our customer service, account data, data relating to Product Orders placed via the Site (Products and Services purchased, transaction number, delivery address, etc.), data relating to the service ordered

Legal basis : Contract, Consent, Legitimate interest 

Data controller : G&C, GDM 

Shelf life : up to 5 years from the last call or contact, up to 3 years from the purchase of the Products / Services 

• Management and monitoring of the loyalty programme 

Type of personal data processed : Identification data (surname, first name, etc), contact data (email address, telephone number)

Legal basis : Contract, Consent, Legitimate interest 

Data controller : GDM

Shelf life :  3 years from subscription date 

• Electronic sales prospecting 

Type of personal data processed : Identification data (surnames, first names, etc.), contact data (email address, telephone number, postal address, etc.) 

Legal basis : Consent, contract

Data controller : G&C

Shelf life : 12 months from the end of the competition 

• Carrying out surveys and optional satisfaction surveys on our Products and Services 

Type of personal data processed : 

Depending on the survey : identification data (surname, first names, etc), Contact data (email address, telephone number, postal and business address),Professional data: title 

Legal basis : Consent, Legitimate interest 

Data controller : GDM, G&C 

Shelf life : 3 years from the poll or survey 

• Requests to exercise rights

Type of personal data processed : identification data (surnames, first names, etc.), contact data (email address, telephone number, postal address, etc.) 

Legal basis : Legal obligation

Data controller : ADJ

Shelf life : 5 years from date of request 

• Management of application files, recruitment processes and all recruitment procedures