PRIVACY POLICY – FORKCAST

(GDPR)

Last updated: January 15, 2025

1. DATA CONTROLLER

The data controller is:

Code Alain
23 rue de l'Abbaye, 94100 Saint-Maur-des-Fossés, France
Email: support@forkcast.space

2. PERSONAL DATA COLLECTED

When using the Forkcast platform, the following personal data may be collected:

End users (guests):

• First name and last name
• Email address
• Phone number
• Reservation details (date, time, number of guests)
• Technical data (IP address, timestamps, logs, device/browser information)

Restaurant partners:

• Restaurant name
• Professional contact details
• Technical identifiers
• Reservation and policy configuration settings

Forkcast does not store or process full payment card numbers. All payment-related data is processed exclusively by the restaurant's payment service provider.

3. PURPOSES OF PROCESSING

Personal data is processed for the following purposes:

• Managing and transmitting reservation requests
• Preventing no-shows and abusive reservations
• Ensuring platform security and traceability
• Providing customer support
• Facilitating communication between users and restaurants
• Complying with legal and regulatory obligations

4. LEGAL BASES FOR PROCESSING

Personal data is processed on the following legal bases:

• Performance of a contract (Terms of Use)
• Legitimate interest (platform security, fraud prevention, dispute management)
• Compliance with legal obligations

5. DATA RECIPIENTS

Personal data may be disclosed to:

• The restaurant concerned by the reservation
• Technical service providers (hosting, email delivery, analytics)
• The restaurant's payment service provider (e.g. Stripe)
• Public authorities, where required by law

6. DATA RETENTION PERIODS

Personal data is retained:

• For the duration of the contractual relationship
• Then archived for up to three (3) years for evidentiary and legal purposes
• Certain technical logs may be retained longer in the event of a dispute

7. DATA SUBJECT RIGHTS

In accordance with the General Data Protection Regulation (GDPR), data subjects have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability, where applicable

Requests may be submitted at any time by email to: support@forkcast.space

8. DATA SECURITY

Forkcast implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data, and to protect it against unauthorized access, loss, or alteration.

9. INTERNATIONAL DATA TRANSFERS

Personal data may be processed by service providers located outside the European Union, subject to appropriate safeguards, including standard contractual clauses approved by the European Commission.

10. COMPLAINTS

Data subjects have the right to lodge a complaint with the competent supervisory authority. In France, this is the CNIL (www.cnil.fr).