Privacy policy

Last updated: 23 avril 2026

This privacy policy describes how CRUMBLES (SAS (Societe par Actions Simplifiee)) collects, uses and protects the personal data of users of its website crumbles-paris.fr.

1. Data controller

Company name: CRUMBLES — SAS (Societe par Actions Simplifiee)
Registered office: 3 Rue Pierre Fontaine, 75009 Paris, France
SIRET: 944 967 124 00016
Email: velyarnaud@crumbles-paris.com
Phone: 06 84 18 27 02

2. Data collected

Depending on your use of the site, we may collect:

Identity : first name, last name
Contact : email address, phone number
Message content : entered in the contact and event forms
Technical data : IP address, connection logs, browser type, pages visited, cookie identifiers

3. Purposes and legal bases

Respond to your contact requests
Legal basis : legitimate interest
Organize group events or private bookings
Legal basis : pre-contractual measures
Ensure site security and proper operation
Legal basis : legitimate interest

4. Mandatory nature of data

Fields marked as mandatory in our forms are necessary to process your request. Without this information, we will not be able to respond to you.

5. Data recipients

Your data is accessible:

to authorized staff of CRUMBLES
to technical providers (subcontractors) acting on our behalf:
- Hosting : OVHcloud (OVH SAS) — servers located in France
- Site design and maintenance : BE HYPE
- Sending contact emails : Mail Hub (internal service) via Amazon SES
- Instagram widgets and customer reviews : Elfsight
- Mapping : Google Maps (Google LLC)

6. Transfers outside the European Union

Some third-party services integrated into the site (Google Maps, Elfsight, Amazon SES) may involve a transfer of data outside the European Union / European Economic Area. These transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission, Data Privacy Framework).

7. Retention periods

Contact data and exchanges : 12 months after the last exchange
Data related to an event / group quote : 3 years after the end of the service
Technical logs : 6 to 12 months
Cookies and trackers : 13 months maximum (see Cookies section)

8. Your rights

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights over your personal data:

right of access
right to rectification
right to erasure (right to be forgotten)
right to object
right to restrict processing
right to portability

To exercise these rights, contact us by email at velyarnaud@crumbles-paris.com or by postal mail at the registered office address.

9. Cookies and trackers

The site uses different types of cookies:

Strictly necessary cookies

Essential for the operation of the site (session, security, display preferences). They do not require your consent.

Third-party service cookies

Placed by widgets integrated into the site (Google Maps, Elfsight). They are subject to your consent and can be managed via the dedicated banner.

You can manage your preferences at any time from your browser settings or the site's consent banner.

10. Security

CRUMBLES implements appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, disclosure, modification or destruction. Exchanges with the site are encrypted via the HTTPS protocol.

11. Policy modifications

CRUMBLES reserves the right to modify this privacy policy at any time. The version in force is the one published on this page. We invite you to consult it regularly.