Privacy policy
This policy sets out what fadalille.fr does with your personal data: what we collect, why, who we entrust it to, how long we keep it and what you can require of us.
It covers the website only. What happens in the restaurant itself — a table booked over the phone, an application handed in at the door, video surveillance where it applies — is covered by a separate notice, given on the premises.
The site is intended for adults. We do not knowingly collect data about a child under fifteen, and we delete any that reaches us.
Last updated: September 13, 2026
Who is responsible
The data controller is:
- FADA, a French SAS with share capital of 100 000 €
- Registered office: 10 rue de Pas, 59800 Lille
- SIRET: 884 519 695 00024 — RCS Lille Métropole 884 519 695
- VAT: FR34 884 519 695
- Telephone: 06 70 33 85 29
- Email: contact@socialgroup.fr
The company has appointed a data protection officer, who can be reached at the same address.
One exception to the above: for table bookings, we determine the purposes and means of the processing jointly with Zenchef SAS. We are joint controllers for that activity, and you may address either of us — see "What we process" and then "Your rights".
What we process
The site creates no account, sells nothing online and builds no advertising profile. You can read every page — the menu, the agenda, the spaces we hire out — without giving us anything at all.
The only data we process is therefore what you deliberately hand us by filling in a form, and what simply putting a site on the internet makes unavoidable. Each is set out below with its purpose, its legal basis and how long we keep it.
Contact form
- Data: first name, surname, email address, telephone number if you give one, the content of your message, the language of the page, and the date and IP address of the submission.
- Purpose: to receive your message and answer it.
- Legal basis: our legitimate interest in answering enquiries addressed to us (GDPR art. 6(1)(f)). The date and IP address rest on the same legitimate interest, applied here to preventing abuse.
- What is required: first name, surname, email address and message. Without them we know neither who is writing nor what to answer, and the form does not send. The telephone number is optional.
- Retention: three years from our last exchange.
- Delivery: Brevo SAS, which carries the message to our inbox. Your address is set as the reply-to, so that we can write back to you.
Newsletter
- Data: your email address, the date of the request, the IP address it came from, and which form it came from.
- Purpose: to send you our news — the programme, the nights, what is new.
- Legal basis: your consent (GDPR art. 6(1)(a)), taken as double opt-in. Your subscription does not exist until you click the confirmation link emailed to you, so an address entered by someone other than you never joins the list. The date and IP address are kept as proof of that consent, as GDPR art. 7(1) requires.
- Retention: until you unsubscribe, and at most three years after our last contact. Every email carries an unsubscribe link, which takes effect immediately.
- Delivery: Brevo SAS, which hosts the list and sends the mailings.
Booking a table
- How it works: the booking module is provided by Zenchef SAS and opens in a frame served from their systems. What you enter there is collected by Zenchef SAS and passed back to us; we intercept nothing along the way.
- Data: name, contact details, date, time, number of guests, and whatever you choose to add.
- Purpose: to hold your table and welcome you.
- Legal basis: steps taken at your request prior to entering into a contract (GDPR art. 6(1)(b)).
- Joint controllers: FADA and Zenchef SAS (63 avenue de Villiers, 75017 Paris). You may exercise your rights with either of us; their data protection officer is at privacy@zenchef.com and their policy is published on their site.
- Retention: three years from your last visit.
Private hire enquiry
- Data: the date and number of guests you have in mind, the time of day and type of event, the budget if you give it, first name, surname, email address, telephone number, anything else you add, the language of the page, and the date and IP address of the submission.
- Purpose: to prepare a quotation and organise your event.
- Legal basis: steps taken at your request prior to entering into a contract (GDPR art. 6(1)(b)). The date and IP address rest on our legitimate interest in preventing abuse.
- What is required: the date, the number of guests, the type of event, first name, surname, email address and telephone number — an event gets settled on the phone. Everything else is optional and only helps us quote more accurately.
- Retention: three years from our last exchange.
- Delivery: Brevo SAS, which carries the enquiry to our inbox. Your address is set as the reply-to, so that we can write back to you.
Site security and bot protection
- Data: your IP address, your browser's User-Agent header, its TLS fingerprint, and the technical logs any web server produces.
- Purpose: to check that a form was sent by a person rather than a program (Cloudflare Turnstile), to cap how many submissions one IP address may make, and to keep the site available.
- Legal basis: our legitimate interest in protecting the site, our inboxes and our mailing list (GDPR art. 6(1)(f)).
- Retention: technical logs are kept for no more than six months.
- Worth knowing: the bot check runs only at the moment you submit a form, never on simply reading a page. Cloudflare, Inc. states that it does not use this information to identify, profile or target visitors.
Who receives your data
Your data is not sold, rented or traded, and is passed to no one for advertising purposes.
It is available to the restaurant's team, for what they need to handle, and to the providers below, who act on our instructions and on our behalf alone:
- Zenchef SAS (France) — table bookings. Joint controller for that activity rather than a mere processor. Privacy policy
- Brevo SAS (France) — delivery of contact-form messages and quotation enquiries, hosting of the mailing list and sending of the newsletter. Privacy policy
- Cloudflare, Inc. (United States) — site hosting, bot protection and form rate limiting. Privacy policy
- Sanity AS (Norway) — the editorial content management tool and delivery of the images it publishes. Privacy policy
Finally, we may be required to disclose data to an administrative or judicial authority where the law compels us. We do not do so otherwise.
Transfers outside the European Union
Zenchef SAS and Brevo SAS are French companies and keep the data within the European Union. Sanity AS is established in Norway, a member of the European Economic Area, where the GDPR applies in the same way.
Cloudflare, Inc. serves the site from European points of presence, but the company is established in the United States and access from there remains possible, in particular for operations and support. That transfer is covered by the standard contractual clauses adopted by the European Commission and by Cloudflare, Inc.'s certification under the EU–U.S. Data Privacy Framework.
A word on what the site does not do, since it is a common source of unintended transfers: the typefaces are served from our own domain. No request goes to a third-party font provider when you open a page.
How we protect this data
The site is served over HTTPS only. Forms are accepted only when they come from the site itself, pass a bot check, and stay within a cap on submissions per IP address. The keys that give access to our providers are held server-side and are never handed to your browser. Messages that reach us go to a named mailbox, open only to the team members who have to answer them.
No measure is infallible. Were an incident to affect your data and pose a high risk to your rights and freedoms, you would be informed in accordance with GDPR art. 34.
Your rights
Within the conditions and limits set by the GDPR, you hold the following rights:
- access — to confirm whether we process data about you, and to receive a copy of it;
- rectification — to have what is inaccurate corrected and what is incomplete completed;
- erasure — to ask that your data be deleted;
- restriction — to ask that processing be frozen while a dispute is resolved;
- portability — to receive, in a machine-readable format, the data you provided to us, for processing based on your consent or on a contract;
- objection — to object, on grounds relating to your particular situation, to processing based on our legitimate interest. For direct marketing the right is absolute: it applies at any time and needs no justification;
- withdrawal of consent — to withdraw it at any time where it is the basis of the processing, without affecting what was done beforehand;
- post-mortem directives — to determine what becomes of your data after your death.
How to exercise them. Write to us at contact@socialgroup.fr, or by post to the registered office given above. The same address reaches our data protection officer.
We answer within one month of receiving the request. That may be extended by two months where the request is complex or where there are many of them, in which case we will tell you. If we have serious doubt about your identity we may ask for something that establishes it; the deadline is then suspended until it arrives.
For table bookings, your rights may be exercised with us or with Zenchef SAS, at privacy@zenchef.com.
If that is not enough. You may lodge a complaint with the French data protection authority — CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr. We would be grateful if you wrote to us first: most requests are settled in one email.
Changes
This policy changes with the site and with the law. The date of the last update is shown at the top of the page, and it is the one that governs.
Where a change touches processing based on your consent, we will tell you and, if needed, collect fresh consent — we will not reuse the old one for a purpose it did not cover.