Privacy policy

1. Data controller

Couvio, a company now being set up in Paris. Contact: mail@couvio.app.

Once registered, the company will become the controller and this page will be updated.

2. Restaurant waiting list

If you fill in the form, we store: the restaurant’s name, the city, the contact person’s name, the e-mail address, an optional note (500 characters at most), the page language, the consent sentence shown, and the date and time of sign-up and of consent. We do not store your IP address.

Purpose: contacting you about your request, and nothing else. Your data is never sold, rented or used for advertising.

Legal basis: your consent (GDPR art. 6(1)(a)). You can withdraw it at any time by writing to mail@couvio.app; your data is then deleted.

The same e-mail address is stored only once.

3. Protection against abuse

To tell people from bots, the form uses Cloudflare Turnstile, which analyses technical browser signals and your IP address when you submit. Cloudflare also limits submissions per IP address (5 per minute) without storing it. Legal basis: our legitimate interest in protecting the site and the form (GDPR art. 6(1)(f)).

4. Visiting the site

To serve the site, our host technically processes your IP address. Any video on the site is hosted on couvio.app, with no third-party player.

5. Cookies and analytics

The site sets no cookies and uses no analytics tool, which is why it shows no cookie banner. If that changes, this page will be updated first.

6. Recipients

Cloudflare, Inc.: site hosting, form handling, database, bot protection and sending an alert e-mail. Sign-ups are stored in a database located in the European Union. The alert e-mail sent for each sign-up contains no personal data, only the words “New waiting-list sign-up” and the time.

No other recipient.

7. Transfers outside the European Union

Cloudflare, Inc. is based in the United States and takes part in the EU–US Data Privacy Framework recognised by the European Commission.

A co-founder currently lives in Iran and views sign-ups from there, on the controller’s behalf. Iran is not covered by a European Commission adequacy decision. Access to sign-ups is limited to the two co-founders.

8. Retention

12 months from sign-up, then automatic deletion. Sooner if you ask. If your restaurant becomes a customer, you will receive new information.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent at any time, and the right to give instructions on what happens to your data after your death. Write to mail@couvio.app; we answer within one month.

You can also complain to the CNIL (French data protection authority): www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

10. Changes

Any change is published on this page with its date.