Privacy Policy

Privacy Policy




Aware of the need to ensure the confidentiality of personal data, the company CAFE COTON wished to formalize the commitments it intends to take with regard to the protection of personal data by adopting this privacy policy.

This privacy policy applies to all personal data processed by CAFE COTON, when acting as data controller.  


I. Presentation of the data controller

CAFE COTON is a simplified joint stock company with capital of 1,301,566.99 euros, whose registered office is located at 11 Rue Christophe Colomb, 75008 Paris. It is registered in the Paris Trade and Companies Register under number RCS 378 617 245. Its telephone number is 01 55 87 79 00. You can contact CAFE COTON at the following e-mail address


II. Purposes, "active basis" retention periods and legal bases

Your personal data may be processed by authorised CAFE COTON staff for a number of purposes.  

Each of these purposes is associated with a "legal basis", which justifies our processing.  

Your data is also stored for a predetermined period, which depends on the purpose for which it was collected.

purpose of the processing. This period is expressed on an "active basis", which corresponds to the stage at which your data is actually processed in order to achieve the purpose described in the table. Please note that following this "active basis" storage, CAFE COTON may keep your personal data in intermediate storage for additional periods (with regard to the applicable rules and periods of prescription and legal or regulatory storage obligations), in order to comply with a legal obligation and/or to enable us to defend our legal rights, if necessary.  

The purposes, legal bases and "active basis" retention periods are detailed in the table below:


Purpose of processing

Legal basis

Retention period for "active base" data

Management of requests you send to our contact e-mail address

Our legitimate interest in responding to your requests and queries

Until the request is processed

Accounting management

Our legal accounting obligations

During the current tax year


Pre-contractual measures taken at the request of a candidate

During the recruitment process

Managing a CV library

Our legitimate interest in keeping your CV in order to contact you about a job vacancy t

2 years from the date on which we ruled on your application

Management of prospect relations, including the sending of our newsletter, the organisation of competitions, promotions, surveys, etc.

The pursuit of our legitimate interest in expanding our business

3 years following the last action taken by you, or until you unsubscribe from our newsletter

Retention of connection data for security and maintenance purposes

Our legitimate interest in ensuring the security of our website

1 month from recording of data

Improve our service (customer service in particular)

Our legitimate interest in improving our services on the basis of information and comments received via the Internet.

The time needed to process your return

Management of our video surveillance system

Our legitimate interest in ensuring the security of our premises

1 month from recording of images

Customer relationship management

The contract we have concluded with our customer

During the term of the contract

Supplier management

The contract we have signed with our supplier

Indirect collections

We receive certain personal data about you indirectly from non-public sources. For example, when you submit your e-mail address to express your interest in becoming our customer, we receive information from a third party that provides us with automated fraud detection services. We also occasionally collect publicly available information from social media websites. You can control the amount of information that social media websites make public by visiting those websites and changing your privacy settings.  


With whom do we share your personal data?  

We may transfer and disclose your data to :

- our promotional and marketing partners, advertisers, competition sponsors, service providers responsible for canvassing sales, developing advertising networks and conducting commercial or market research;

- any company with which we have direct or indirect capital links;

- our IT service providers, for example as part of the hosting of this site, software hosting (e.g. CRM), maintenance, as well as our service providers in charge of web analysis and application development;

- regulators, the TRACFIN unit, independent administrative authorities or dispute resolution bodies, in order to comply with their requests;

- any other person involved in a dispute;

- judicial or administrative authorities.


Some of these recipients are located outside the European Union, in the following countries: France, Italy, Spain, the UK and Germany. Where this is the case, we rely on

the European Union's standard contractual clauses.



What are your rights with regard to personal data?  

Depending on the circumstances, you may have rights in relation to your personal data, in particular:

  • the right to obtain information on the processing carried out and the data we hold on you, as well as a copy of the latter; the right to withdraw your consent to the processing of your personal data at any time; the right to obtain rectification of your data; the right to obtain confirmation that your personal data is or is no longer being processed; the right to ask us to delete your data; the right to ask us to restrict or object to the processing of your data.

You can exercise your rights by contacting us at  


You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés, at the following address: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 Paris - Cedex 07 or via the CNIL's dedicated website.  

Layer 1