Privacy Policy
Last updated: 2026 - 08 - 26
Contents
1. Preamble
EuroChef, publisher of the website www.toque360.com (hereinafter "the Site"), pays particular attention to protecting the personal data of its users, whether they are professionals from the hospitality sector (cafés, hotels, restaurants) or any other visitor to the Site.
The purpose of this privacy policy is to inform users of the Site about how their personal data is collected, processed, stored and protected, in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and French Act No. 78-17 of 6 January 1978, as amended, on information technology, data files and civil liberties.
2. Data controller
Company name: EuroChef
Legal form: SAS, simplified joint-stock company
Registered office: 50 AVENUE LOUIS LUC, 94600 CHOISY-LE-ROI
SIRET number: 45240154000045
Data Protection Officer (DPO): Nicolas PANSARD
Data protection contact: admin@toque360.com
EuroChef acts as data controller for all data collected in connection with the operation of the Site and the Toque360 platform.
3. Data collected
In connection with the use of the Site, EuroChef may collect the following categories of data:
Identification data: last name, first name, job title, company name of the hospitality establishment, postal address, email address, telephone number;
Account and order data: login credentials, order history, product preferences, data relating to the Toque360 loyalty programme (points earned, tiers reached);
Billing data: bank details required to pay for orders, the customer establishment's intra-Community VAT number, billing history;
Connection and browsing data: IP address, browser type, pages viewed, visit duration, cookies and trackers (see dedicated section);
Contact data: information submitted via the contact form, exchanges with customer service, or when posting a product review or a review of the Site.
The Site does not collect any so-called "sensitive" data within the meaning of Article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, health data, etc.).
Data exchanged with the virtual assistant: messages entered in the Site's AI assistant and the responses generated. We advise you not to enter sensitive personal data, bank details or passwords.
4. Purposes and legal bases for processing
Purpose | Legal basis |
|---|---|
Management of customer accounts and order processing | Performance of the contract (Toque360 T&Cs) |
Invoicing and accounting management | Legal obligation (retention of accounting records) |
Management of the Toque360 loyalty programme | Performance of the contract / legitimate interest |
Commercial prospecting and sending newsletters | User consent |
Improvement of the Site, audience measurement | Legitimate interest / consent (non-essential cookies) |
Responding to enquiries submitted via the contact form | Legitimate interest / performance of pre-contractual measures |
Fraud prevention and securing the Site | Legitimate interest / legal obligation |
Virtual assistant (product advice and guidance on the Site) | Legitimate interest (assistance with browsing and equipment selection) |
5. Data retention periods
Personal data is retained for no longer than is necessary for the purposes for which it is processed, in accordance with the following periods:
Customer account data: retained for the entire duration of the business relationship, then archived for 24 months for evidentiary purposes;
Billing data: retained for 10 years in accordance with accounting and tax obligations (Article L. 123-22 of the French Commercial Code);
Loyalty programme data: retained in accordance with the point expiry rules set out in the Toque360 T&Cs;
Prospecting data: retained for 24 months from the last contact, unless the user objects or unsubscribes;
Cookies and trackers: retained for a maximum of 13 months, in accordance with CNIL recommendations.
Exchanges with the virtual assistant: these are not kept in our databases beyond 6 months. The history remains in your browser for the duration of the session and is deleted when the tab is closed.
Our AI provider processes them to generate the response and retains them only for a period of 6 months, for security purposes, without using them to train its models.
6. Data recipients
The data collected is intended for EuroChef's internal departments authorised within the scope of their duties (sales department, customer service, accounting department, logistics department). It may also be passed on to the following categories of recipients, strictly to the extent necessary for the performance of the services concerned:
Technical providers (hosting, Site maintenance);
Online payment providers;
Carriers and logistics providers responsible for delivering the equipment ordered;
Partners and suppliers in the EuroChef network, as part of order fulfilment;
Administrative or judicial authorities, upon formal request and under the conditions provided for by law.
A detailed list of the processors involved with the Site may be obtained on simple request from the data controller, using the contact details given in the "Contact us" section.
Artificial intelligence provider (Anthropic), for the operation of the virtual assistant.
7. Transfers outside the European Union
Some of the technical providers used by EuroChef may be established outside the European Union. In such cases, EuroChef ensures that these transfers are governed by appropriate safeguards, such as the standard contractual clauses adopted by the European Commission, or any other safeguard recognised as sufficient under the GDPR.
Stripe: payment management partner
Google: marketing
Meta: marketing
Anthropic: virtual assistant (AI)
Vercel: Site hosting
Supabase: database and authentication
Resend: transactional emails
Klaviyo: newsletter
8. Data security
EuroChef implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in particular to protect personal data against loss, alteration, disclosure or unauthorised access. These measures include, but are not limited to, encryption of sensitive data during transmission, restriction of access to authorised personnel only, and regular database backups.
In the event of a data breach likely to create a risk to the rights and freedoms of the data subjects, EuroChef undertakes to notify the CNIL of the breach within the timeframes set by the GDPR and, where necessary, to inform the users concerned.
9. Cookies and trackers
The Site uses cookies intended to ensure its technical operation, to measure its audience and, subject to the user's consent, to offer tailored content. The arrangements for managing these cookies, as well as details of the trackers used, are set out in the Site's Cookie Management Policy, accessible from the consent banner or the footer.
10. Your rights
In accordance with the GDPR and the French Data Protection Act, every user has the following rights regarding their personal data:
Right of access: to obtain confirmation that data concerning them is being processed, and to obtain a copy of it;
Right to rectification: to have inaccurate or incomplete data corrected;
Right to erasure: to request the deletion of their data, under the conditions provided for by the GDPR;
Right to restriction of processing;
Right to object, in particular to commercial prospecting;
Right to portability of the data provided;
Right to issue directives regarding the fate of their data after their death.
These rights may be exercised by writing to the address given in the "Contact us" section, enclosing proof of identity. EuroChef undertakes to respond to any request within one month of its receipt, possibly extended by a further two months in the case of a complex request.
11. Lodging a complaint with the CNIL
If, after contacting EuroChef, a user considers that their rights have not been respected, they may lodge a complaint with the French Data Protection Authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via the website www.cnil.fr.
12. Changes to this policy
EuroChef reserves the right to amend this privacy policy at any time, in particular in order to comply with any legal, regulatory, case-law or technical developments. Any amendment will be brought to users' attention by updating the date shown at the top of this page. Users are advised to consult this page regularly.
13. Virtual assistant
The Site offers a conversational assistant powered by artificial intelligence. You are informed, as soon as the assistant opens, that you are interacting with an AI system and not with an adviser. Its responses are generated automatically and may contain errors; they have no contractual value. The applicable prices, availability and conditions are those displayed on the product pages and in the T&Cs. You may contact an adviser at any time via the Contact page.
14. Contact us
For any question relating to this privacy policy, or to exercise your rights regarding your personal data, you may contact EuroChef using the following details:
Postal address: 50 AVENUE LOUIS LUC, 94600 CHOISY-LE-ROI
Email: admin@toque360.com
Telephone: +33 (0)1 48 92 40 58
Contact form: www.toque360.com/contact