Who is responsible
The data controller is the restaurant itself. Write to it or call it using the details below.
Basta
- Address
- 101 rue Ney, 69006 Lyon
- Phone
- +33478260931
- Email address
- hello@basta.restaurant
What we collect, and why
Only what the service needs, and only when you use it.
- Booking a table: your name, your phone number or email address, the date, the time, the number of guests and any note you leave. They are used to hold the table and to warn you if anything changes.
- Ordering: what you ordered, the table or the pickup slot, and the name left at the counter. They are used to make the order and hand it over.
- Paying online: the payment is handled by Stripe. Your card details never pass through our servers or through this page; we keep only the amount, the date and the payment reference.
- Leaving a review: the name you display and the text you publish, which become public on the site.
- Browsing the site: technical logs, including your IP address and the page requested, kept for security and for keeping the site running.
How long we keep them
- Bookings: for the service, then three years after your last contact with the restaurant.
- Orders and payments: ten years, because French law requires accounting records to be kept.
- Published reviews: until you ask for yours to be taken down.
- Technical logs: twelve months at most.
Who has access
- The restaurant's own team, to do its job.
- Stripe, the payment provider, to take online payments.
- Scaleway SAS, which hosts the site and its database inside the European Union.
- Brevo, which sends the e-mails about your bookings and orders on our behalf.
- Our software provider, which runs this site, the menu and the orders on our behalf, as a processor.
Your data is not sold, not rented and not passed to advertisers.
What your browser keeps
- Your light or dark theme choice, saved in your browser.
- Your basket and your table session on the menu, kept for the length of your order.
- Two technical cookies: the one protecting the forms against fraud, and the one giving you back access to your booking.
All of this is strictly necessary for the service you asked for. There is no advertising cookie and no analytics tracker, which is why this site shows no consent banner.
The OpenStreetMap map
The map showing where to find us is a frame served by OpenStreetMap. When it loads, your IP address is disclosed to OpenStreetMap, which is a third party. The map loads with the page, without you having to click.
Your rights
- See the data the restaurant holds about you.
- Have it corrected if it is wrong.
- Ask for it to be erased.
- Ask for its use to be restricted.
- Object to it being used.
- Receive a reusable copy of it.
- Leave instructions about what happens to it after your death.
To exercise one of these rights, contact the restaurant using the details above. Proof of identity may be asked for, and the answer reaches you within one month.
If the answer does not satisfy you, you can complain to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
This text is being checked by the restaurant; some retention periods will be confirmed.