{"id":3677,"date":"2025-10-29T08:30:09","date_gmt":"2025-10-29T08:30:09","guid":{"rendered":"https:\/\/pro.barestho.com\/?page_id=3677"},"modified":"2026-03-02T14:40:36","modified_gmt":"2026-03-02T14:40:36","slug":"confidentialite","status":"publish","type":"page","link":"https:\/\/pro.barestho.com\/en\/confidentialite\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"3677\" class=\"elementor elementor-3677\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-102208d e-flex e-con-boxed e-con e-parent\" data-id=\"102208d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8d9572a elementor-widget elementor-widget-heading\" data-id=\"8d9572a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Privacy policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3c8443 elementor-widget elementor-widget-text-editor\" data-id=\"e3c8443\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: bolder; color: #dc0044;\"><u>Object<\/u><\/span><\/p><p>This policy is established by Barestho SRL, located at Avenue de la Bourgogne, 96, 7700 Mouscron, registered under registration number 0740.454.745 (hereinafter referred to as \u00abthe data controller\").<\/p><p>The purpose of this policy is to inform visitors of the website hosted at www.barestho.com (hereinafter referred to as the \u00abwebsite\u00bb) about how data is collected and processed by the data controller.<\/p><p>This policy is part of the data controller's desire to act with full transparency, in compliance with its national provisions and with Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (hereinafter referred to as the \u00abGeneral Data Protection Regulation\u00bb).<\/p><p>The data controller pays particular attention to the privacy of its users and therefore undertakes to take the necessary reasonable precautions to protect personal data collected against loss, theft, disclosure or unauthorised use.<\/p><p>\u00abPersonal data\u00bb is defined as any personal data relating to the user. This means any information which allows them to be identified, directly or indirectly, as a natural person. If the user wishes to respond to any of the practices described below, they can contact the data controller at the postal or email address specified in the \u00abcontact details\u00bb section of this policy.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>What data do we collect?<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem; color: inherit; font-family: inherit;\">The data controllers collect and process the following personal data, in accordance with the terms and principles described below:<\/span><\/h6><p><span style=\"font-size: 14px;\">Its domain (automatically detected by the controller's server), including the dynamic IP address.<\/span><\/p><ul><li>All information concerning the pages that the user has viewed on the website.<\/li><li>Any information that the user has provided voluntarily, for example by completing the contact form.<\/li><li>The data controller may also collect non-personal data. This data is classified as non-personal data because it does not allow for the direct or indirect identification of a particular person. It may therefore be used for any purpose, for example to improve the website, the products and services offered or the advertisements of the data controller.<\/li><\/ul><p>If non-personal data were to be combined with personal data, such that the identification of individuals concerned by such data would become possible, this data would be treated as personal data until such time as the link to a particular person is impossible to re-establish.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Collection methods<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The data controller collects personal data when the user completes the contact form.<\/span><\/h6><h6><span style=\"font-size: 1rem;\">\u00a0<\/span><\/h6><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Purpose of processing<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">Personal data is collected and processed solely for the purposes mentioned below:<\/span><span style=\"font-size: 14px;\">\u00a0<\/span><\/h6><ul><li>Ensure the management and control of the delivery of services offered.<\/li><li>Dispatch and tracking of orders and invoices.<\/li><li>Sending promotional information on the products and services of the data controller.<\/li><li>Sending promotional material.<\/li><li>Answer the user's questions.<\/li><li>To carry out statistics.<\/li><li>Improve the quality of the data controller's website and products and services.<\/li><li>To transmit information about new products and services from the data controller.<\/li><li>For the purpose of commercial prospecting.<\/li><\/ul><p>The data controller may carry out processing that is not yet provided for in this policy. In such cases, they will contact the user before re-using their personal data in order to inform them of the changes and give them the opportunity, if applicable, to refuse such re-use.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Legitimate interests<\/strong><\/span><\/h6><h6><span style=\"font-size: 14px;\">Certain processing activities carried out by the controller are based on the legal basis of its legitimate interests. These legitimate interests are proportionate in relation to the respect of the user's rights and freedoms. If the user wishes to be informed of the details of the purposes based on the legal basis of legitimate interests, they are advised to contact the controller (see section on \u00abContact details\u00bb).<\/span><\/h6><h6><span style=\"font-size: 14px;\">\u00a0<\/span><\/h6><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Shelf life<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">In general, the data controller shall only retain personal data for the period reasonably necessary for the purposes pursued and in accordance with legal and regulatory requirements.<\/span><\/h6><p>A client's personal data is kept for a maximum of 10 years after the end of the contractual relationship between this client and the data controller.<\/p><p>At the end of the retention period, the data controller shall take all appropriate measures to ensure that personal data has been rendered unavailable and inaccessible.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Application of rights<\/strong><\/span><\/h6><h6><span style=\"font-size: 1rem;\">For all rights set out below, the data controller reserves the right to verify the identity of the user for the application of the rights set out below.<\/span><\/h6><p>This request for further information will be made within one month of the request being submitted by the user.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Data access and copying<\/strong><\/span><\/span><\/h6><p>The user can obtain written communication or a copy of their personal data collected, free of charge.<\/p><p>The controller may charge a reasonable fee based on administrative costs for any further copies requested by the data subject. Where the data subject makes the request by electronic means, the information shall be provided in an electronic form of common use, unless otherwise requested by the data subject.<\/p><p>Unless an exception is provided for under the General Data Protection Regulation, a copy of their data will be communicated to the user no later than one month after receipt of the request.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Right to rectification<\/strong><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The user may obtain, free of charge, as soon as possible and at the latest within one month, the rectification of their personal data that is inaccurate, incomplete or irrelevant, as well as have incomplete data completed.<\/span><\/h6><p>Barring any exceptions provided for by the General Data Protection Regulation, requests to exercise the right to rectification will be processed within one month of their submission.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Right to object to processing<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The user may, at any time, for reasons relating to their particular situation, object free of charge to the processing of their personal data when:<\/span><\/h6><ul><li>Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.<\/li><li>The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.<\/li><\/ul><p>The data controller may refuse to implement the user's right to object when it establishes the existence of compelling and legitimate grounds justifying the processing, which override the user's interests or rights and freedoms, or for the establishment, exercise or defence of legal claims. In the event of a dispute, the user may lodge a complaint in accordance with the \u00abComplaint and Grievance\u00bb section of this policy.<\/p><p>The user may also, at any time, object, without justification and free of charge, to the processing of personal data concerning them when their data is collected for commercial prospecting purposes.<\/p><p>Where personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with the General Data Protection Regulation, the data subject shall have the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.<\/p><p>Unless an exception is provided for under the General Data Protection Regulation, the data controller is required to respond to the user's request as soon as possible and at the latest within one month, and to provide reasons for their decision when they intend not to grant such a request.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Right to restriction of processing<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 14px;\">The user can obtain the restriction of the processing of their personal data in the following cases:<\/span><\/h6><ul><li>When the user contests the accuracy of data and only for the period it takes for the controller to verify it.<\/li><li>Where processing is unlawful and the data subject prefers restriction of processing to erasure.<\/li><li>When, although no longer necessary for the purposes of the processing, the user needs it for the establishment, exercise or defence of their legal rights.<\/li><li>During the time necessary to examine the grounds for an objection submitted by the user, in other words the time taken by the controller to verify the balance of interests between the legitimate interests of the controller and those of the user.<\/li><\/ul><p><span style=\"font-size: 14px;\">The controller shall inform the user when the restriction on processing is lifted.<\/span><\/p><p><span style=\"font-size: 14px;\">\u00a0<\/span><\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Right to erasure (right to be forgotten)<\/strong><\/span><\/span><\/h6><p>The user may obtain erasure of personal data concerning them, when one of the following grounds applies:<\/p><p><span style=\"font-size: 14px;\">The data is no longer necessary for the purposes of processing.<\/span><\/p><ul><li>The user has withdrawn their consent for their data to be processed and there is no other legal basis for the processing.<\/li><li>The user objects to the processing and there is no overriding legitimate ground for the processing and\/or the user exercises their specific right to object to direct marketing.<\/li><li>Personal data has been unlawfully processed.<\/li><li>Personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject.<\/li><li>Personal data has been collected in the context of the provision of information society services aimed at children.<\/li><\/ul><p>However, data erasure does not apply in the following cases:<\/p><ul><li>When processing is necessary for the exercise of the right to freedom of expression and information.<\/li><li>When processing is necessary to comply with a legal obligation to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.<\/li><li>When processing is necessary for reasons of public interest in the area of public health.<\/li><li>When processing is necessary for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, and if the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing.<\/li><li>When processing is necessary for the establishment, exercise or defence of legal claims.<\/li><\/ul><p>Unless an exception is provided for by the General Data Protection Regulation, the controller shall respond to the user's request without undue delay and at the latest within one month and shall provide reasons for its decision when it intends not to comply with such a request.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Right to data portability\u00ab<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The user may at any time, request to receive their personal data free of charge in a structured, commonly used and machine-readable format, in particular for the purpose of transmitting it to another controller when the processing of data is carried out using automated processes and when the processing is based on the user's consent or on a contract concluded between the latter and the controller.<\/span><\/h6><p>Under the same conditions and according to the same terms, the user has the right to obtain from the data controller that personal data concerning them be transmitted directly to another data controller, provided that this is technically feasible.<\/p><p>The right to data portability shall not apply to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Data recipients and disclosure to third parties<\/strong><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The recipients of the data collected and processed are, in addition to the data controller itself, its agents or other subcontractors, its carefully selected business partners, located within the European Union, who collaborate with the data controller in the context of marketing products or providing services.<\/span><\/h6><p>In the event that data is disclosed to third parties for direct marketing or commercial prospecting purposes, the user will be informed beforehand so that they can choose to accept the transfer of their data to third parties.<\/p><p>Once this transfer is based on the user's consent, they may withdraw their consent for this specific purpose at any time.<\/p><p>The data controller shall comply with the applicable legal and regulatory provisions and shall, in all cases, ensure that its partners, employees, subcontractors or other third parties with access to this personal data comply with this policy.<\/p><p>The data controller shall disclose the user's personal data if a law, legal process, or public authority order makes such disclosure necessary.<\/p><p>No personal data is transferred outside the European Union by the data controller.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Security<\/strong><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The data controller shall implement appropriate technical and organisational measures to ensure a level of security of processing and of the data collected that is proportionate to the risks presented by the processing and the nature of the data to be protected, taking the risk into account. The controller shall consider the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of users.<\/span><\/h6><p>The data controller always uses encryption technologies that are recognised as the industry standards within the IT sector when transferring or receiving data on the website.<\/p><p>The controller has implemented appropriate security measures to protect against and prevent the loss, misuse, or alteration of information received via the website.<\/p><p>In the event that the personal data controlled by the controller is compromised, the controller shall act quickly to identify the cause of this breach and take appropriate remedial measures.<\/p><p>The data controller will inform the user of this incident if the law requires them to do so.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Claim and complaint<\/strong><\/span><\/h6><h6><span style=\"font-size: 1rem;\">If the user wishes to object to any of the practices described in this policy, they are advised to contact the data controller directly.<\/span><\/h6><p>The user can also lodge a complaint with their national supervisory authority, the contact details for which can be found on the European Commission's official website: http:\/\/ec.europa.eu\/newsroom\/article29\/item-detail.cfm?item_id=612080.<\/p><p>In addition, the user has the option to lodge a complaint with the competent national courts.<\/p><p>\u00a0<\/p><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Contact details<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">For any questions and\/or complaints relating to this policy, the user may contact the data controller:<\/span><span style=\"font-size: 14px;\">\u00a0<\/span><\/h6><ul><li>Email: contact@barestho.com<\/li><li>Post: Rue Albert Libiez, 59 to 7340 P\u00e2turages<\/li><\/ul><div>\u00a0<\/div><div>\u00a0<\/div><h6><span style=\"text-decoration: underline; color: #dc0044;\"><strong>Modification<\/strong><\/span><\/h6><h6><span style=\"font-size: 1rem;\">The data controller reserves the right to amend the provisions of this policy at any time. Amendments will be published directly on the data controller's website.<\/span><\/h6><h6><span style=\"font-size: 1rem;\">\u00a0<\/span><\/h6><h6><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044; text-decoration: underline;\"><strong>Governing law and jurisdiction<\/strong><\/span><\/span><\/h6><h6><span style=\"font-size: 1rem;\">This policy is governed by the national law of the data controller's principal place of business.<\/span><\/h6><p>Any dispute relating to the interpretation or execution of this policy shall be submitted to the courts of this national law.<\/p><p>This version of the policy dates from 1 December 2019.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f9e346c elementor-widget elementor-widget-heading\" data-id=\"f9e346c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Privacy Policy for Online Booking<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a80b123 elementor-widget elementor-widget-text-editor\" data-id=\"a80b123\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\"><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044;\"><b>Processed data<\/b><\/span><\/span><\/p>\n<p class=\"p1\">Types of data processed:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">First name<\/li>\n<li class=\"li1\">Name<\/li>\n<li class=\"li1\">Telephone<\/li>\n<li class=\"li1\">E-mail<\/li>\n<\/ul>\n<p class=\"p3\">\n<\/p><p class=\"p1\">Data sources<\/p>\n<p class=\"p1\">The data comes from a user inputting a new reservation.<\/p>\n<p class=\"p1\">Mandatory character for data collection<\/p>\n<p class=\"p1\">In order to process your booking correctly, the introduction of your data is mandatory.<\/p>\n<p class=\"p1\">Use of your data<\/p>\n<p class=\"p1\">Notifications relating to your booking by email and\/or SMS. After your visit, and provided you subscribe to our newsletter, your email address and\/or telephone number may be used to inform you about our activities, promotions, or events.<\/p><p class=\"p1\"><br><\/p>\n<p class=\"p1\">\n<\/p><p class=\"p1\"><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044;\"><b>Data retention period<\/b><\/span><\/span><\/p>\n<p class=\"p1\">Data is kept until one day after booking. If you wish to be informed about new dishes and events at the restaurant, then Feeling Food will keep your data until you unsubscribe by contacting the restaurant as stated in the \u00abexercise your rights\u00bb section.<\/p><p class=\"p1\"><br><\/p>\n<p class=\"p1\">\n<\/p><p class=\"p1\"><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044;\"><b>Your rights<\/b><\/span><\/span><\/p>\n<p class=\"p1\">Right to access, rectify or delete your personal data. Right to object to the use of your personal data for the purpose of receiving information about new dishes and restaurant events. Right to withdraw previously given consent for the processing of your personal data.<\/p>\n<p class=\"p1\"><a href=\"mailto:contact@barestho.com\">In case of a problem, please contact Barestho by email:&nbsp;<\/a>contact@barestho.com<\/p>\n<p class=\"p1\">We will listen to you and find a solution to restore your rights.<\/p>\n<p class=\"p1\">Complaints should be submitted to the following address:<\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">Data Protection Authority<\/li>\n<li class=\"li1\">Rue de la Presse 35, 1000 Brussels<\/li>\n<li class=\"li1\">Tel. +32 2 274 48 00<\/li>\n<li class=\"li1\">Fax. +32 2 274 48 35<\/li>\n<li class=\"li1\">Email&nbsp;<a href=\"mailto:contact@apd-gba.be\">contact@apd-gba.be<\/a><\/li>\n<\/ul><div><br><\/div>\n<p class=\"p3\">\n<\/p><p class=\"p1\"><span style=\"text-decoration: underline;\"><span style=\"color: #dc0044;\"><b>Exercise one's rights<\/b><\/span><\/span><\/p>\n<p class=\"p1\">If you wish to exercise your rights, you can do so by contacting the restaurant. A legal timeframe of 30 calendar days may be required for proper processing.<\/p>\n<section class=\"rules__section\">\n<div class=\"wrapper\">&nbsp;<\/div>\n<\/section>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Politique de confidentialit\u00e9 Objet La pr\u00e9sente politique est \u00e9tablie par Barestho SRL situ\u00e9e Avenue de la Bourgogne, 96 \u00e0 7700 Mouscron, reprise sous le num\u00e9ro d\u2019inscription 0740.454.745 (ci-apr\u00e8s d\u00e9nomm\u00e9e \u00ab le responsable du traitement). L\u2019objet de la pr\u00e9sente politique est d\u2019informer les visiteurs du site web h\u00e9berg\u00e9 \u00e0 l\u2019adresse www.barestho.com (ci-apr\u00e8s d\u00e9nomm\u00e9 le \u00ab site [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3677","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/pages\/3677","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/comments?post=3677"}],"version-history":[{"count":40,"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/pages\/3677\/revisions"}],"predecessor-version":[{"id":4172,"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/pages\/3677\/revisions\/4172"}],"wp:attachment":[{"href":"https:\/\/pro.barestho.com\/en\/wp-json\/wp\/v2\/media?parent=3677"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}