Home › Legal information
Privacy policy
Your data belongs to you. Here, in full transparency, is what we do with it.
This is a courtesy translation. In the event of any discrepancy, the French version prevails.
Last updated: [date]
1. Data controller
[Company name], [registered office address], is responsible for the data processing carried out through this website and the loyalty programme. For requests sent to a franchised store (contact, application), the franchisee concerned receives the data and is responsible for processing it for their store.
Data protection contact: [dpo@… or postal address]
2. Data collected, purposes and legal bases
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form | Name, email, subject, store, message | Legitimate interest (answering your request) | 3 years after the last exchange |
| Franchise application | Identity, contact details, area, contribution, project | Pre-contractual steps at your request | 3 years after the last contact |
| Job application | Identity, contact details, position, CV, message | Pre-contractual steps at your request | 2 years after the last contact (unless you object) |
| Loyalty programme | Phone number, purchase and points history | Performance of the contract (programme rules) | [3 years after last activity] |
| Promotional offers (SMS / email) | Phone number, email | Consent, which you can withdraw at any time (STOP SMS) | 3 years after the last contact |
| “Near me” (stores) | Approximate location | Consent (requested by your browser) | Not stored: the calculation happens only in your browser |
3. Recipients
Your data is intended for authorised Yogurt Factory staff and, where applicable, the franchisee of the store concerned. It may be processed by our subcontractors, strictly as needed for their work:
- Pongo — loyalty programme management ([data location]);
- [Host] — website hosting;
- [Email / form tool] — receiving forms.
Your data is never sold. No transfer outside the European Union takes place without appropriate safeguards (European Commission standard contractual clauses).
4. Third-party services
The store map displays OpenStreetMap map tiles: your browser contacts their servers to load the map images (your IP address is then sent to them). “Directions” links open Google Maps only if you click them. Links to our social networks (TikTok, Instagram, Facebook) and delivery platforms take you to those services, which have their own privacy policies.
Fonts are hosted on our own server: no data is sent to Google Fonts.
5. Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time and to set instructions for what happens to your data after your death.
To exercise these rights, write to [dpo@…] stating your request. We reply within one month. If you believe your rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority).
6. Security
The website is served over HTTPS. We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure.
7. Minors
The application forms and the loyalty programme are intended for people aged 15 and over. Below that age, the consent of a person with parental responsibility is required.