PRIVACY POLICY

1. INTRODUCTION

SARL Riviera 1955 (hereinafter “we”, “us”, or “our”), operating the website www.riviera1955.com (the “Site”), is committed to protecting the privacy and personal data of its users.

This Privacy Policy explains what personal data we collect, why we collect it, how we use, store and protect it, and what rights you have in relation to your personal data. It applies to all visitors and users of the Site, in particular customers placing an order through the online store and those submitting a bespoke cake enquiry, a franchise enquiry, or a request for franchise presentation materials.

This Policy has been prepared in accordance with Monegasque Law No. 1.565 of 3 December 2024 on the protection of personal data and Regulation (EU) 2016/679 (GDPR) where applicable.

2. DATA CONTROLLER

The data controller for personal data collected through the Site is:

SARL RIVIERA 1955, a Monegasque limited liability company with share capital of EUR 15,000, registered with the Monaco Trade and Industry Register under number RCI 25S09975, whose registered office is located at 14 rue Hubert Clerissi, 98000 Monaco, represented by Nikolai Zhur, Director.

For any question relating to your personal data, you may contact us at info@riviera1955.com or by post at the address above.

3. DATA WE COLLECT

We only collect personal data that is necessary for the purposes described in this Policy.

3.1. Online orders

When you place an order through the online store, we collect:

• First name and last name
• Email address and phone number
• Delivery address and, where different, billing address
• Order details: products purchased, order amount, delivery method and any comments you add to your order
• Payment status and transaction reference
• Correspondence relating to your order, including withdrawal requests, returns and damage claims, and any photos you send us in that context

You can place an order without creating an account.

Your payment card details are entered directly on the secure payment page of our payment service provider, Société Générale (Sogecommerce). We do not receive or store your full card details.

3.2. Marketing communications

If you tick the corresponding box when placing an order, we collect your name and email address to send you news and offers from Riviera 1955.

3.3. Custom cake enquiry form

When you submit a custom cake enquiry, we collect:

• First name and last name
• Email address and phone number
• Country and city
• Event date and details about the cake (number of guests, design preferences, dietary requirements, allergies)
• Any other information you provide voluntarily in the message field

Dietary requirements and allergies should only be provided where relevant to the enquiry. Where such information may reveal health-related data, it is processed only on the basis of the user’s explicit consent.

3.4. Franchise application form

When you submit a franchise application, we collect:

• First name and last name
• Email address and phone number
• Country and target city for the franchise
• Professional background and relevant experience
• Indicative investment capacity
• Any additional information you provide in the message field

3.5. Technical data collected automatically

When you browse the Site, certain technical data is automatically recorded in server logs, including:

• IP address
• Browser type and version
• Device information and operating system
• Pages requested, date and time of access
• Cookies and similar technologies (see Section 11 below)

We do not currently use analytics or audience measurement tools.

4. HOW WE COLLECT PERSONAL DATA

We collect personal data directly from users when they voluntarily submit information through the Site, in particular when placing an order, and through contact forms, bespoke cake enquiries, franchise enquiries, and requests for franchise presentation materials.

Certain technical information is also collected automatically when users browse the Site through cookies and server logs.

4. WHY WE COLLECT IT AND LEGAL BASIS

We process your personal data only for specific purposes, each based on a legal ground recognised under GDPR and Monegasque law:

*Where users voluntarily provide information relating to allergies or dietary restrictions that may reveal health-related data, such data is processed on the basis of the user’s explicit consent where applicable under GDPR and Monegasque data protection law.

6. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as necessary for the purposes for which it was collected, and in any event no longer than the periods set out below:

After these periods, data is either deleted or anonymised so that it can no longer be linked to you.

7. WHO RECEIVES YOUR DATA: RECIPIENTS AND SERVICES PROVIDERS

Your data is accessed only by authorised staff within our organisation and by the following service providers and partners:

Hostinger and Google process personal data only on our behalf and in accordance with contractual data protection obligations. Société Générale and UPS receive only the data necessary to process your payment and deliver your order, and also process it in accordance with their own privacy policies.

We do not sell your personal data to third parties.

8. INTERNATIONAL DATA TRANSFERS

Personal data may be processed or accessed from countries located outside Monaco, including within the European Union and, for certain services, the United States.

Transfers to EU Member States are made on the basis that such countries are deemed to provide an adequate level of protection under Monegasque Law No. 1.565.

Where personal data is transferred outside Monaco and the European Union, including to the United States, SARL RIVIERA 1955 relies on safeguards permitted under applicable data protection laws, including contractual safeguards, standard contractual clauses or other transfer mechanisms recognised or approved by the competent authority, and, where the GDPR applies, the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses where applicable.

Where an order is delivered to an address outside the European Union, the data required for delivery is transferred to UPS in the country of delivery, as this is necessary for the performance of your contract with us.

You may request information about the safeguards applicable to international transfers by contacting us at info@riviera1955.com.

9. YOUR RIGHTS

Under Monegasque Law No. 1.565 of 3 December 2024 and GDPR where applicable, you have the following rights regarding your personal data:

• Right of access — obtain confirmation of whether we hold data about you and a copy of that data.
• Right of rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data, subject to legal exceptions.
• Right to restriction — ask us to limit processing in certain circumstances.
• Right to portability — receive your data in a structured, commonly used format, or have it transmitted to another controller.
• Right to object — object to processing based on legitimate interest, and at any time to the use of your data for marketing purposes.
• Right to withdraw consent — withdraw consent at any time, without affecting the lawfulness of past processing. You can unsubscribe from marketing emails via the link included in each email.
• Right to lodge a complaint — with the Autorité de Protection des Données Personnelles (APDP) in Monaco, or, where the GDPR applies, with the competent data protection authority in your country of residence.

To exercise any of these rights, contact us at info@riviera1955.com. We will respond within one month from receipt of your request, in accordance with applicable law.

10. THIRD-PARTY SERVICES AND EXTERNAL LINKS

The Website may contain links to third-party websites, platforms, or services, including social media platforms or external resources, provided for information or convenience purposes only.

SARL Riviera 1955 does not control such third-party websites or services and cannot be held responsible for their availability, content, policies, practices, or operation.

Access to and use of third-party websites or services are carried out under the sole responsibility of the user and remain subject to the terms and conditions and privacy policies applicable to such third-party services.

The inclusion of any link on the Website does not imply any affiliation, endorsement, approval, or partnership between SARL Riviera 1955 and the relevant third party, unless expressly stated otherwise on the Website.

11. COOKIES AND SIMILAR TECHNOLOGIES

The Site uses cookies and similar technologies to ensure its proper functioning and to remember your choices.

• Strictly necessary cookies — required for the Site and the online store to function: session, security, shopping basket and checkout, and storing your cookie preferences. These do not require consent.

We do not currently use analytics, audience measurement or marketing cookies, retargeting pixels, or third-party advertising trackers. Should we introduce them, they will only be set with your prior consent and this Policy will be updated accordingly.

When you pay for an order, our payment service provider may set its own cookies on its secure payment page, in accordance with its own policies.

When you first visit the Site, a cookie banner informs you about the cookies used. You may review your choice at any time via the cookie settings link in the footer. You can also block cookies through your browser settings, but parts of the Site, including the shopping basket and checkout, may not function correctly.

12. SECURITY

We apply technical and organisational measures appropriate to the risk to protect your personal data, including encryption in transit (HTTPS), access controls, secure backups, and regular reviews. Payments are processed on the secure payment page of Société Générale; your full card details are never transmitted to or stored on the Site. While no system is fully secure, we work to safeguard your data and will notify affected users and authorities of any personal data breach where required by law.

13. CHILDREN

We apply technical and organisational measures appropriate to the risk to protect your personal data, including encryption in transit (HTTPS), access controls, secure backups, and regular reviews. Payments are processed on the secure payment page of Société Générale; your full card details are never transmitted to or stored on the Site. While no system is fully secure, we work to safeguard your data and will notify affected users and authorities of any personal data breach where required by law.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The most recent version is always available on this page with the date of the last revision. Material changes will be communicated through the Site where possible.

15. CONTACT

For any question about this Privacy Policy or your personal data, please contact us at info@riviera1955.com or by post at SARL Riviera 1955, 14 rue Hubert Clerissi, 98000 Monaco.