The data controller is JF4 (PAP'Y J) (Le Bistrot Pap'y J), 31 Quai de la Résistance, 34340 Marseillan. For questions about your data, email Marielaure11@hotmail.fr, call 04 67 21 36 51, write to this address or use the website contact form.

• Contact form

The contact form processes your name, email, optional phone number, message and chosen language. Your name, email and message are required to handle your request; the form cannot be submitted without them.

Online table booking is currently disabled in favour of telephone booking. Bookings recorded by staff may include your first and last names, phone number, email, party size, date, time and remarks supplied to organise your visit.

If rental enquiries are made publicly available, the service processes supplied contact details, stay dates, numbers of adults, children and pets, an optional message, language and the estimated amount of the request. This service is not currently offered to the public.

Administrator accounts include email, name if supplied, role, a hashed password, account management dates and the last login date. These forms do not collect bank or card details.

Data is used to answer requests, organise and manage bookings, allow authorised people to administer the website and keep the service secure. IP addresses and technical request information are also processed to limit abuse and measure traffic as described below.

Data needed for a booking or pre-contractual request is processed to carry out that request (GDPR Article 6(1)(b)). Other contact exchanges, administrator access management, security and internal statistics rely on the operator’s legitimate interests in answering requests, protecting the service and understanding its traffic (Article 6(1)(f)).

Technical authorisation to connect TikTok is distinct from the legal basis for processing personal data. The specific legal basis for processing the administrator’s connected TikTok account data remains to be confirmed by the operator. Contact the operator using the details in “Your rights”.

Authorised restaurant staff and necessary providers can access data: Vercel for hosting and imported-media storage, Neon for the database, Resend for sending emails, Google Cloud Text-to-Speech for narrating videos prepared in the PapyJ Social administration, and the email service used to receive and handle your messages. Data is not sold or passed to third parties for commercial prospecting.

When you display an embedded Google Maps map, your browser contacts Google, which receives your IP address and connection information. Links to social networks and external services take you to services governed by their own policies.

Some providers, including TikTok, are established outside the European Union. Processing countries and applicable safeguards remain to be specified by the operator according to the actual configurations and agreements; contact us for the information available. We do not claim transfer safeguards that have not been verified.

Retention criteria are the time needed to handle a request, organise and follow up a booking, or maintain an administrator’s authorisation, followed by any applicable legal obligations. Contact messages are forwarded to the restaurant’s mailbox; they are not stored in a website contact table.

The operator still needs to specify detailed retention periods for messages, bookings and administrator accounts. The website currently provides no automatic deletion of these records after a defined period. Contact the restaurant to find out what data is held about you and request deletion where applicable.

Audience measurement has a mechanism to delete events older than 396 days, approximately thirteen months. Cleanup occurs during collection of new visits, so deletion exactly at that threshold is not guaranteed.

Under the conditions set by the GDPR, you may request access, rectification, erasure or restriction, and object to processing based on legitimate interests. Data portability applies where its conditions are met. Where processing relies on consent, you may withdraw it without affecting prior lawful processing.

To exercise your rights, email Marielaure11@hotmail.fr, use the contact form, call 04 67 21 36 51 or write to JF4 (PAP'Y J), 31 Quai de la Résistance, 34340 Marseillan. Explain your request and provide information to identify the relevant records, without sending passwords or tokens. Proportionate identity verification may be needed if there is doubt. You may also lodge a complaint with the CNIL, the French data protection authority.

• Contact form
• CNIL

The site does not use advertising or analytics cookies for its internal analytics tool. Technical cookies required for authentication and security are used in the administration area. Connecting TikTok uses a temporary ten-minute security cookie and TikTok’s services, whose practices are described in its privacy policy.

The internal audience-measurement tool operates without cookies. It processes the IP address and browser information to calculate a pseudonymised fingerprint that changes daily. The raw IP address is not recorded in this tool’s event database. The fingerprint can link page views within the same day; it is not a permanent identifier.

The daily fingerprint, page path without query parameters or fragments, device type, referring domain where available and timestamp are recorded. This data supports internal statistics, is hosted by our technical providers and is not shared for advertising. Hosting services may process their own technical logs.

Administration access is authenticated and administrator passwords are hashed. Request limits are used to reduce abuse. Booking cancellation links use a unique identifier. We take reasonable measures to protect data against unauthorised access.

An authorised owner administrator can connect an account authorised in the TikTok Sandbox, view available account information and manually publish a test MP4 through the official Direct Post API. Browsing the public site does not require TikTok. No video is uploaded before explicit consent and a click on the publish button.

The requested permissions remain user.info.basic, video.publish and video.upload. Manual Direct Post uses video.publish; video.upload is not used for a draft upload. No daily posting or other automatic publishing is provided. The manual preparation of a video with voice narration is described below. Processing is limited to permissions actually granted and features actually enabled.

The owner administrator can prepare a vertical MP4 video from four dish names they enter. The images, music and video are assembled in their browser; the resulting video can be downloaded to their device and is not published on any network without a separate action on their part.

For the narration, after the owner administrator account has been verified, the text to be spoken is sent from the server hosted by Vercel to the Google Cloud Text-to-Speech service, which returns synthetic French voice audio. This text consists of fixed introductory sentences, the dish names entered, and the restaurant’s address and phone number. It contains no visitor data, bookings or contact messages.

The service does not store the text or the audio in its database: it only keeps usage counters (number of characters and requests) to limit consumption. Google processes the texts it receives under the terms applicable to the operator’s Google Cloud project; the place of this processing, its retention periods and the transfer safeguards remain to be specified by the operator.

• Google Cloud Privacy Notice

To establish and maintain the connection, the temporary authorisation code, access and refresh tokens, technical account identifier, granted permissions and their expiry dates are processed on the server. Tokens and the account identifier are stored encrypted in the service database. An account fingerprint prevents linking the same account to multiple administrators. PapyJ Social neither requests nor stores your TikTok password.

To display the connected account in the administration area, the technical identifier, display name and avatar URL are requested from TikTok using user.info.basic. The display name and avatar URL are not stored in a service database table. Displaying the avatar makes your browser contact the image service designated by TikTok. The service does not request the username or account statistics with the current permissions.

A random security identifier, stored as a hash and bound to the administrator and browser, validates the OAuth return and prevents replay. To prepare a post, the server requests the creator’s name and identifier, available privacy and interaction settings and maximum video duration from TikTok. After the authorised publish click, the service processes the selected MP4, its filename and technical properties, caption, selected settings and consent confirmation. These are used only to check the file, send it to TikTok and track its processing. The publication identifier, status and useful error codes/messages without secrets inform the administrator of the result. Contact and booking information is not sent to TikTok.

Data required for authentication, renewal, profile retrieval and revocation is exchanged with TikTok’s official API. Vercel hosts server processing and Neon hosts the encrypted connection database; access is limited to authorised persons. TikTok processes received data under its own terms and privacy policy.

An authorisation attempt expires after ten minutes and becomes unusable after its first valid return. Consumed attempts are deleted; expired attempts are cleaned up when a new connection starts. Token expiry dates are those returned by TikTok. Tokens are replaced upon renewal and cleared when the service detects an expired or rejected authorisation. The saved connection is deleted after successful disconnection or a deletion request handled by the operator. There is no automatic periodic cleanup of unused connections; retention periods for these connections and technical backups remain to be specified by the operator.

The selected MP4 stays local during preview. After the publish click, its segments are temporarily stored in the private Neon database, checked by the Vercel server and sent directly to TikTok’s upload servers. Local segments are deleted after confirmed upload or a final result. They expire after one hour; cleanup runs when opening or starting a publication session, without a guarantee of deletion exactly at expiry. The TikTok upload URL is encrypted on the server and cleared after upload or expiry. Attempt history, including caption, settings, consent and statuses, expires after thirty days and is cleaned up during these same operations. Backup retention remains to be specified by the operator. Published videos are managed by TikTok; remove them from the TikTok account.

• TikTok privacy policy

Use “Déconnecter TikTok” in PapyJ Social’s administration area to request revocation from TikTok and deletion of the saved connection. If TikTok is temporarily unavailable, a message asks you to retry and the connection is retained. An already expired or rejected grant is deleted locally. You can also remove PapyJ Social’s permissions in TikTok’s security settings and connected applications; the official instructions are linked below.

To request access, rectification or deletion of data held by PapyJ Social, use the contact details in “Your rights”. Revoking permissions and deleting data held by the service are separate requests. Revocation does not erase content already published on TikTok; manage its deletion directly on TikTok.

• Manage connected apps on TikTok