Privacy
Personal
data.
1. Purpose
Fratellino places particular importance on protecting the personal data of its customers and visitors.
This privacy policy describes the data that may be collected when using the Fratellino website, the reasons for processing it, its recipients and the rights available to users under the General Data Protection Regulation (GDPR) and applicable French legislation.
2. Data controller
The data controller is:
FRATELLINO
French simplified joint-stock company (SAS) with share capital of 6 000 €
11 rue Saint-Lazare
75009 Paris – France
SIREN: 912 531 423
For any questions about personal data:
Email: [TO BE COMPLETED BY FRATELLINO]
3. Data that may be collected
Depending on how the website is used, Fratellino may collect, in particular:
- first and last name;
- email address;
- telephone number;
- billing address;
- delivery address;
- order information;
- order history;
- customer account information;
- requests submitted through contact forms;
- information needed to manage a reservation;
- technical data needed for the operation and security of the website.
The banking details needed for payment are processed by the payment provider and are not intended to be stored directly by Fratellino.
4. Purposes of processing
Personal data may be used, in particular, to:
- create and manage a customer account;
- record and process orders;
- process payments;
- prepare and arrange delivery of products;
- manage return and refund requests;
- provide after-sales service;
- process requests submitted through the website forms;
- manage restaurant reservations;
- comply with Fratellino’s accounting, tax and legal obligations;
- prevent fraudulent use;
- ensure the security and proper operation of the website.
Where regulations require it, certain processing activities are carried out on the basis of the user’s consent.
5. Payments – Stripe
Payments made through the Fratellino online shop are processed by Stripe.
During payment, certain data needed to process the transaction is transmitted to Stripe.
Information about the payment method is processed through the payment provider’s secure infrastructure. Fratellino’s role does not involve directly storing the customer’s complete card details.
Processing carried out directly by Stripe is also subject to that provider’s terms and privacy policy.
6. Reservations – TheFork
Table reservations offered on the Fratellino website are made through TheFork.
When a user makes a reservation, certain personal data needed to manage it may be processed by TheFork, including their first and last name, contact details, the date and time of the reservation, the number of guests and any information provided when making the reservation.
TheFork processes and manages reservations in accordance with its own terms and privacy policy.
Fratellino may have access to the information needed to manage the reservation and welcome the customer to the restaurant.
7. Manufacturing and dispatch of orders
Some products offered in the Fratellino shop are manufactured, prepared and/or dispatched by an independent professional partner.
Depending on the products, Fratellino may hold limited stock or use this partner to prepare the products needed to fulfil orders.
To enable an order to be fulfilled, Fratellino may transmit to this partner only the data needed to prepare and dispatch it, including:
- the recipient’s first and last name;
- delivery address;
- contact details needed for delivery;
- products ordered;
- information needed for the logistical processing of the order.
Information about the partner
[TO BE COMPLETED BY FRATELLINO BEFORE GOING LIVE]
Registered company name: [TO BE COMPLETED]
Address: [TO BE COMPLETED]
Country: [TO BE COMPLETED]
The partner must use the data provided only to the extent necessary to prepare, manufacture and/or dispatch orders, according to its actual legal role under the applicable regulations.
8. Data recipients
To the extent necessary for their duties, personal data may be disclosed to:
- authorised Fratellino staff;
- Stripe for payment processing;
- TheFork for reservation management;
- the partner responsible for manufacturing, preparing or dispatching products;
- the carriers responsible for delivery;
- technical service providers needed for hosting, maintenance and operation of the website;
- administrative or judicial authorities where required by law.
Fratellino does not sell its users’ personal data to third parties.
9. Retention period
Personal data is retained for a period proportionate to the purposes for which it was collected and to applicable legal obligations.
Order and invoice information may, in particular, be retained for the periods needed to comply with accounting and tax obligations and to manage guarantees and any disputes.
Customer account data is retained for the period needed to manage the commercial relationship, then deleted or archived in accordance with applicable legal obligations.
10. Hosting and security
The Fratellino website is hosted by OVHcloud on a virtual private server (VPS).
Fratellino implements technical and organisational measures designed to protect personal data against loss, alteration, disclosure or unauthorised access.
11. Cookies and third-party services
The website may use cookies that are strictly necessary for its operation, particularly to manage the user session, shopping cart, customer account and ordering process.
The website may also use third-party services, including Stripe for payments and TheFork for reservations.
[TO BE COMPLETED BY FRATELLINO: specify any audience measurement tools, advertising pixels, embedded Instagram content or other services that set trackers.]
Where cookies or trackers requiring the user’s consent are used, they are set in accordance with the choices expressed by the user.
12. Users’ rights
Under the applicable regulations, data subjects have, depending on the circumstances, in particular, the right to:
- access their data;
- rectification;
- erasure;
- restriction of processing;
- object;
- data portability;
- withdraw their consent where processing is based on it.
These rights may be exercised by contacting:
[GDPR EMAIL ADDRESS TO BE COMPLETED BY FRATELLINO]
Proof of identity may be requested where needed to verify the applicant’s identity.
In the event of an unresolved difficulty, users also have the right to lodge a complaint with the National Commission on Informatics and Liberties (CNIL).
13. Changes to the privacy policy
Fratellino may amend this policy to reflect changes to the website, its services or regulations.
Last updated: October 2026