1. Who is responsible for your data?
The data controller is YUZUO SRL
(Rue Grétry 57, 1000 Bruxelles, Belgique, company number 1039.949.272),
which runs the Shodai Matcha restaurant.
For any question about your data:
shodaimatchabxl@gmail.com.
2. What data, why and for how long?
Contact form
- Data: your name, your e-mail address, the subject (optional) and the content of your message.
- Purpose: to answer your request.
- Legal basis: our legitimate interest in answering the requests we receive (Art. 6(1)(f) GDPR) or, if your request concerns a booking, steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
- Retention: 12 months after our last exchange.
Booking by phone
- Data: your name, your phone number, the date, the time and the number of guests.
- Purpose: to record and manage your booking.
- Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
- Retention: until the date of the booking, then for no more than 3 months.
If you tell us about an allergy or a dietary restriction, this information is used only to
prepare your meal safely.
Online booking (TheFork)
The booking calendar on the Reservations page is provided by our partner TheFork. The
information you enter there is processed by TheFork under its own privacy policy, which we
invite you to read, and is passed on to us so that we can honour your booking.
This calendar is only shown if you have accepted third-party cookies in the cookie banner.
Technical data
- Data: pages viewed, date and time, response code and processing time, recorded automatically in the server log. The website does not record your IP address or your browser there; our hosting provider may process them for the security of its network.
- Purpose: to keep the website running and secure.
- Legal basis: our legitimate interest (Art. 6(1)(f)).
- Retention: a few weeks at most (the log is automatically replaced beyond 30 MB).
Wheel of fortune
- Data: your e-mail address, your language, the dates you played, the prizes you won and the use of your gift vouchers, as well as your choice to receive our offers or not.
- Purposes: applying the game rules (one entry per person and per period), sending you your gift voucher and a reminder before it expires.
- Legal basis: performance of the game rules you take part in (Art. 6(1)(b) GDPR).
- Retention: 13 months after your last entry (and at least until your vouchers expire), then automatic deletion.
E-mail offers: if you tick the optional box, we also use your address to send you our offers
and news, based on your consent (Art. 6(1)(a)). You can withdraw it at any time by writing to us or via the
unsubscribe link in our e-mails. Your data is then kept until you withdraw your consent, and at most 3 years after your last entry.
Google reviews
The home page shows a selection of reviews published on Google (name or first name as it
appears on Google, rating and text). If you wrote one of these reviews, you can ask for it to
be removed at the address above.
We do not sell your data, we do not profile you, and we only use your address for marketing offers if you agreed to it.
3. Who receives your data?
- Our hosting provider: OVH SAS – 2 rue Kellermann – 59100 Roubaix – France.
- TheFork: online booking management, if you have accepted third-party cookies.
- Brevo (Sendinblue SAS, France): forwarding of contact form messages and sending of the game e-mails (gift voucher, reminder before expiry).
- Google: display of the map on the Contact page, only if you have accepted third-party cookies.
Some of these providers may process data outside the European Economic Area, for example in
the United States. In that case, these transfers are covered by the safeguards provided for by
the GDPR (European Commission adequacy decision or standard contractual clauses).
4. Your rights
You have the following rights over your data:
- access, to find out what data we hold;
- rectification of inaccurate data;
- erasure, in the cases provided for by law;
- restriction of processing;
- objection to processing based on our legitimate interest;
- portability of your data, where applicable.
To exercise these rights, write to us at
shodaimatchabxl@gmail.com. We reply within one month. We may
ask you to prove your identity in order to protect your data.
5. Complaints
If you believe your rights are not being respected, you can lodge a complaint with the Belgian
Data Protection Authority (DPA), rue de la Presse 35, 1000 Brussels,
contact@apd-gba.be,
www.dataprotectionauthority.be.
6. Security
We implement reasonable technical and organisational measures to protect your data against
unauthorised access, loss or alteration.
7. Changes
We may update this policy. The date of the last update is shown at the top of the page. For
cookies and third-party content, see our cookies page.
This translation is provided for convenience. In case of discrepancy, the French version
prevails.
