INTRODUCTION
As part of its commercial activity, the company SAS L'atelier des Chefs, operating under the brand The Workery (hereinafter, "The Workery"), is required to process information concerning you. For example, by requesting a training brochure, scheduling an appointment with our sales representatives, placing an order on our website or mobile applications, contacting our Customer Service, or browsing our websites and mobile applications, you transmit information to us, some of which is capable of identifying you. This constitutes your personal data (hereinafter, "Data").
The Workery is committed to protecting the privacy of all Users of our websites and mobile applications. This Privacy Policy informs you about how we collect and process your personal data. We invite you to read it carefully. This privacy policy applies to all Users, registered or not, of our website and our mobile applications (iOS or Android).
THE DATA CONTROLLER
The data controller mentioned in this document is L'atelier des Chefs (operating the brand The Workery), a simplified joint-stock company (société par actions simplifiée) with a capital of 113,987.55 euros, whose registered office is located at 10 rue Pergolèse 75016 Paris, France, registered in the Paris Trade and Companies Register under number 451 906 317.
THE WORKERY AND DATA PROTECTION REGULATIONS
This privacy policy aims to inform Users of the websites and platforms operated by The Workery of the means implemented to ensure the security of data collection and processing. This Policy may be modified at any time by The Workery, notably to update it in accordance with changes in applicable regulations, subject to informing Users. In case of doubt, the latest version available on the Site prevails.
The Workery complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Regulation (EU) 2016/679 (EU GDPR) where applicable, ensuring cross-border compliance for our UK and European activities.
1. DATA COLLECTED AND PURPOSES OF USE
When creating an account on the Site, The Workery requires the transmission of the following Data: Last Name, First Name, email address, and password. This information is strictly confidential and will never be disclosed outside of our authorized processors and service providers.
Context / Activity | Collected Data | Purposes | Legal Basis
|
|---|---|---|---|
Browsing the Site, consulting offers and recipes | "Cookies" data; IP address (last connection date, last order date, country, region); Connection logs | Ensure the proper functioning and security of the Site; Optimize user navigation based on needs/tastes; Comply with analytics frameworks. | Free and informed consent of the User. |
Browsing training offers, account creation | Last name, first name, email address, login, password | Allow sending marketing newsletters; Optimize class schedules and inventory management. | Free and informed consent; Legitimate interest of The Workery to develop its commercial offerings. |
Customer relations (requests, complaints, incidents reported via mail, phone, email, chat) | Last name, first name, email address, order and reservation history, conversation history | Customer relationship management; Management of outstanding payments and litigation; Service improvement. | Free and informed consent; Legitimate interest within anti-fraud frameworks, legal procedures, or disputes. |
Training appointment request, purchasing an à la carte course | Last name, first name, socio-professional status, phone number, email address, billing address, encrypted payment details | Respond to prospect requests; Fulfill orders. Note: Bank details are directly collected by the provider Alma and are not directly collected by The Workery. | Performance of a contract; Legitimate interest of The Workery to fulfill its business role. |
Sensitive Data: The Workery does not collect any sensitive data concerning you (racial/ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, health data, sexual orientation). If such information were communicated to us, it would be deleted.
2. DATA RECIPIENTS
Data collected on the site is intended for The Workery and is strictly partitioned by department within the company. It may be transmitted to subcontractors for service execution (payment, anti-fraud, order delivery). Only the information strictly necessary for executing the service is transmitted.
Subcontractor Category | Basis of Transmission | Providers Involved
|
|---|---|---|
Online Payment Services | Processing payment details, sending confirmation/failure and transaction ID. No bank details are shared with The Workery. | Stripe |
CRM | Managing contact information, order details, prospect follow-up, newsletter management, and customer relationship. | Hubspot |
Messaging Providers | Contact details used for transactional or marketing messaging services. | Vonage, Hubspot, Sendgrid |
Online Call Management | Contact details used within the framework of our online call service. | AWS Connect |
Invoicing & Recovery | Contact details (postal address, email, phone) used for billing and invoicing management. | NRC, Sage |
Audience & Advertising | Anonymized IP, service tokens, and shopping cart info transmitted via cookies to manage advertising. | Google Analytics, Google Ads, Facebook Ads, Tiktok Ads |
Logging Services | Information used exclusively to debug and fix technical issues (retained for 30 days). | Datadog |
The Workery undertakes not to communicate collected Data to any third party other than those specified above without obtaining the client's consent, except when requested by a state authority or legal body in compliance with current regulations.
3. DATA HOSTING
Your Data is hosted by the following providers in data centers located in Europe:
Provider | Registered Office
|
|---|---|
Amazon Web Services, Europe | 38 AV JOHN F KENNEDY L 1855, LUXEMBOURG |
Box 81226 Seattle, WA 98108-12266 |
4. SECURITY
We implement measures to protect your information against unauthorized access, unlawful processing, accidental loss, destruction, or damage. A username and password are required to access accounts on the Sites or mobile applications. The Workery enforces a complex password requirement in line with competent authority recommendations, or you can use Google's SSO (Single Sign-On) service. Each account holder is responsible for the confidentiality of their password.
As internet transmission is not fully inviolable, we cannot guarantee total security; any transmission is carried out at your own risk. However, strict security procedures are utilized to minimize unauthorized risks.
5. RETENTION PERIODS
The Workery retains Data only for the duration strictly necessary for the purposes processed:
Site Navigation Data (Cookies): Maximum 30 days from placement on the user's terminal.
Connection Logs: Retained for 2 weeks.
Transactional Email Logs: Retained for 1 week.
Account Creation Data: Retained for the duration of the relationship, and up to a maximum of three (3) years from the last active contact from the User.
Order Data: Retained for a duration not exceeding three (3) years from the end of the commercial relationship.
Litigation / Legal Proceedings Data: Retained in accordance with statutory limitation periods or the duration necessary to establish facts or handle judicial inquiries.
Server Logs: Retained for thirty (30) days from registration.
6. COOKIES
A cookie is a text file placed on your terminal during navigation. It records information regarding navigation and stores details entered during the visit so you do not have to enter them again. A banner allows you to configure your choices upon visiting. Your preferences are saved via a cookie for 30 days. Disabling cookies may affect site functionality. The maximum retention period for cookie information on a terminal is one (1) year.
7. YOUR RIGHTS
In accordance with current regulations, you benefit from the following rights regarding your personal data:
Right of access and rectification (to modify, complete, or update data).
Right to erasure of inaccurate, incomplete, or outdated data.
Right to object to data processing for legitimate reasons.
Right to object without justification to commercial prospection.
Right to define directives regarding the fate of data after death.
Right to data portability in a structured, machine-readable format under automated processing conditions.
Right to restriction of processing under applicable law.
Right to lodge a complaint with the competent supervisory authority. For the United Kingdom, users have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. CONTACT US
Users can exercise their rights at any time by reaching out to the privacy team:
By Mail: L'atelier des Chefs / The Workery - Privacy Service, 10 rue Pergolèse 75016 Paris, France
By Email: dpo@theworkery.co.uk
To exercise your rights, you must provide the origin of data collection (via the site, order, etc.) along with your identity and contact details. We have one (1) month from receipt to reply, subject to the validity and non-excessive nature of the request.