Book a table

Privacy policy

This policy describes the personal-data processing actually carried out on restaurantincasa.fr. It is provided in accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act.

Data controller

The data controller is IN CASA PARIS 15, a French simplified joint-stock company (société par actions simplifiée) with registered office at 23 rue Desaix, 75015 Paris, France (see legal notice).

To exercise your rights or for any question about your personal data, please write to contact@restaurantincasa.fr.

No data protection officer has been appointed. For any question regarding your data, write to contact@restaurantincasa.fr.

Contact form

Data collected: name, email address, phone (optional), preferred visit date (optional), number of guests (optional), free-text message.

Purpose: respond to your enquiry and manage the relationship with the restaurant.

Legal basis: performance of pre-contractual measures taken at your request (article 6.1.b of the GDPR).

Recipients: only the In Casa restaurant team, at contact@restaurantincasa.fr.

Processor: Resend, Inc. is used to deliver the email. No message content is stored persistently on the website: it is sent by email and is not kept in any website-side database.

Retention period: emails received are kept in the restaurant’s mailbox for as long as necessary to handle your request. [Maximum retention period to be confirmed by the restaurant — typically 3 years from last contact.]

Anti-spam measure: the form uses a hidden honeypot field. No tracking cookie is set.

Nina virtual assistant (AI)

Nature of service: Nina is a conversational virtual assistant (AI) integrated into the site as a bar at the bottom of the screen. The technical service is provided by Paradeyes through the IRIS solution (cdn.bonjouriris.fr).

Data exchanged: the content of messages you send to Nina, your session identifier (technical, generated client-side), the language of navigation.

Purpose: provide you with self-service answers about the restaurant (menu, hours, booking, address) without human intervention.

Legal basis: the controller’s legitimate interest in offering contextual self-service help (article 6.1.f of the GDPR).

Local storage: an entry iris:cache:v1:in-casa is written to your browser’s localStorage. It contains the assistant’s technical configuration (message limits, session duration) — no personal conversational data. It is strictly necessary for the service to work.

Conversation retention: [Retention period for IRIS conversation history being documented by Paradeyes — provided on request at contact@restaurantincasa.fr.]

Sub-processors and AI model: [Language-model provider and conversation hosting location being documented by Paradeyes — provided on request at contact@restaurantincasa.fr.]

Transfers outside the European Union: [Safeguards for any transfers outside the European Union being documented by Paradeyes — by default, Standard Contractual Clauses of the European Commission.]

Booking

The booking service is provided by Zenchef. When you click “Book”, a Zenchef widget opens and your booking data (name, contact details, date, number of guests) is collected and processed by Zenchef under its own privacy policy. In Casa Paris 15 is a recipient of the information related to your booking.

Delivery

The link to Uber Eats opens the platform’s website, which applies its own privacy policy to any order placed. In Casa Paris 15 does not have access to the personal data collected by Uber Eats from you as a platform consumer.

Hosting

The site is hosted by Vercel Inc. (see legal notice). Vercel automatically collects technical logs (IP address, user agent, timestamp, requested URL) for service delivery, security and abuse prevention. These logs are kept for a limited period by Vercel and are not used for advertising tracking by In Casa Paris 15.

Fonts

The typefaces used on the site (Young Serif, Newsreader, Instrument Sans) are self-hosted: they are downloaded at build time and served directly from the site’s own domain. No request is made to Google Fonts when loading pages (in line with CNIL recommendations).

Cookies and local storage

The site uses only strictly necessary cookies plus an anonymous audience measurement (Google Analytics 4) conditional on your explicit consent. No advertising cookies, no third-party ad-network trackers are set.

Strictly necessary cookies (no consent required, CNIL-exempt)

  • NEXT_LOCALE cookie: keeps your preferred language (fr or en) between visits. Strictly necessary for the site’s multilingual behaviour. Retention: 1 year.
  • Local storage iris:cache:v1:in-casa: technical configuration cache for the Nina assistant (see above). Strictly necessary for the service to work.

Google Analytics 4 audience measurement (consent required)

When audience measurement is active on the site, Google Analytics 4 (provided by Google Ireland Limited) may be used to understand how our visitors use the site.

  • Purpose: anonymous audience measurement (pages visited, origin, device type, language). No profiling, no targeted advertising.
  • Legal basis: user consent (article 82 of the French Data Protection Act).
  • Deposit: the Google Analytics script and its associated cookies (_ga, _ga_*) are only set after you click “Accept” in the consent banner. As long as you have not accepted, no request is made to Google.
  • Anonymisation: the anonymize_ip option is always enabled. Advertising signals (Google Signals) are disabled.
  • Retention: 13 months (the maximum period recommended by the CNIL).
  • Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Transfers to the United States may occur under the Data Privacy Framework.
  • Withdrawing consent: at any time via the “Cookies” link in the footer, which reopens the banner and lets you refuse.

If audience measurement is not active (environment variable NEXT_PUBLIC_GA_ID absent from the deployment), no Google Analytics script is loaded and no consent banner is displayed: the list above is then limited to strictly necessary cookies.

No other cookie or storage item has been detected in production.

Your rights

Under articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:

  • right of access to the data we hold about you;
  • right to rectification of inaccurate data;
  • right to erasure of your data;
  • right to object to processing on grounds relating to your particular situation;
  • right to restrict processing;
  • right to data portability of the data you have provided to us.

To exercise these rights, please write to contact@restaurantincasa.fr describing your request. A response will be provided within one month at the latest.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr.

Last updated: 7 October 2026.