Privacy policy

Protecting your personal data is a priority. This policy explains what data is collected on this website, why, for how long, and what your rights are. It complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés). This English version is provided for information; the French version prevails.

1. Data controller

The website pavyllonlyon.com is published and operated by Institut Lyfe - Application, a limited liability company (SARL) with share capital of 6,883,340 euros, registered with the Lyon Trade and Companies Register under number 444 596 449 (EU VAT number FR74444596449), whose registered office is at Château du Vivier, 1A chemin de Calabert, 69130 Écully, France, for its establishment Restaurant Pavyllon, 20 Place Bellecour, 69002 Lyon.

For any question about your personal data: contact@pavyllonlyon.com.

2. Data collected

The data collected on this website is the data you voluntarily provide: your email address when you subscribe to our newsletter, and the information in the contact form (name, email, phone, subject and content of your request and, where applicable, preferred date, number of guests and service).

Table bookings are made through the Zenchef service, which collects the information needed to manage your booking under its own privacy policy. With your consent, browsing data is also collected for audience measurement purposes (see the Cookies section).

3. Purpose and legal basis

Your newsletter email address is used only to send you news about the restaurant (legal basis: your consent, confirmed by a validation email). Contact form data is used only to process and answer your request (legal basis: your consent and the performance of pre-contractual measures). Audience measurement is based on your consent, given through the cookie banner.

4. Recipients

Your data is intended solely for the Pavyllon Lyon teams in charge of communication and customer requests. It is processed by our subcontractors: Webflow Inc. (website and form hosting, United States, transfers governed by standard contractual clauses), Brevo (newsletter delivery, Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris), Zenchef SAS (table bookings) and Google Ireland Ltd (Google Analytics audience measurement, if you accept it).

Your data is never sold, rented or passed on to third parties for commercial purposes.

5. Retention period

Your newsletter email address is kept until you unsubscribe, and for no more than three years from your last contact with us. Requests sent through the contact form are kept for three years from the last exchange. Audience measurement cookies are kept for a maximum of thirteen months and your consent choice for six months, in line with the recommendations of the CNIL (French data protection authority).

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, as well as the right to withdraw your consent at any time. Every email we send includes an immediate unsubscribe link.

To exercise your rights, write to us at contact@pavyllonlyon.com. We will reply within one month.

You may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris, France. cnil.fr

7. Security

The website is protected by an SSL certificate and data is transmitted in encrypted form. Our service providers apply appropriate technical and organisational measures to prevent any loss, alteration or unauthorised access.

8. Cookies

This website uses cookies that are strictly necessary for its operation and security (exempt from consent) and, if you accept them through the dedicated banner, Google Analytics audience measurement cookies. You are free to accept or refuse these cookies: your choice is kept for six months and can be changed at any time via the “Cookies” link at the bottom of the page.

9. Changes to this policy

This policy may change. Any update will be published on this page.

Last updated: 31 August 2026.