Last updated: 24 September 2026
Definitions
- “Personal Data” means any information relating to an identified or identifiable natural person, namely anyone who can be identified directly, for example by their first name and surname, or indirectly by reference to an identifier, including a telephone number, vehicle registration number, social security number, postal address or email address.
- “CNIL” means the Commission nationale de l’informatique et des libertés.
- “Publisher” means the company MRT Troca.
- “GDPR” means the European regulation on the protection of personal data, more precisely known as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
- “Website” means the website https://caretteparis.com.
- “User”, “Internet User” or “You” means the internet user who uses and visits the Website.
Introduction and Purpose of the Personal Data Protection Policy
When a User uses the Website, MRT Troca may collect certain information about you that may qualify as Personal Data within the meaning of the GDPR.
This Personal Data Protection Policy aims to inform Users of MRT Troca’s commitments regarding the processing of Internet Users’ Personal Data, with respect for their privacy and in accordance with the applicable laws and regulations, namely the French Law of 6 January 1978 known as the “Informatique et Libertés” Law and the GDPR. Accordingly, MRT Troca respects the privacy of Internet Users who visit the Website and complies with the provisions governing the protection of Personal Data.
This Personal Data Protection Policy may be amended, particularly in response to changes in the applicable laws and regulations and any developments in case law.
Personal Data Processed on the Carette Paris Website and Its Purpose
When you use the Website, MRT Troca may process Personal Data in the following circumstances.
Website Browsing and Security
Technical data, such as your IP address, browser, device, requested pages and security logs, may be processed to display the Website, ensure its availability, prevent misuse and diagnose incidents. This processing is based on MRT Troca’s legitimate interest in securing its Website.
It should be noted that a cookie identifier or an IP address stored by a tracker may constitute personal data within the meaning of the GDPR, as it can be used to distinguish an individual User or their device.
Audience Measurement
With your consent, Google Analytics 4 measures Website traffic, pages viewed, device type and the general source of visits. The service associated with measurement ID G-M5QRN4ZFJL is loaded only after you have given your consent.
Google Maps
With your consent, the maps provided by Google Maps on the tea room pages are loaded. Google may then receive technical information and place or read its own trackers in accordance with its privacy rules.
Direct Contact
The Website has no contact form. If you contact MRT Troca by telephone or post, the information you provide is used to respond to your request. This processing is based on legitimate interests or, depending on the request, on pre-contractual measures.
The lawful basis for processing is what legally authorises it, namely what gives an organisation the right to collect or use Personal Data. This may also be referred to as the “legal grounds” or “legal basis” for processing. In this case, when a User uses the Website, the lawful basis is the User’s consent and the security of the Website.
Data Controller
The controller responsible for the processing described in this policy is MRT Troca, a simplified joint-stock company (SAS) with its registered office at 4 place du Trocadéro et du 11 Novembre, 75016 Paris, registered with the Paris Trade and Companies Register (RCS Paris) under number 927 710 285.
Recipients and Data Processors
Personal Data is accessible to authorised MRT Troca personnel and, to the extent necessary for their duties, to technical service providers responsible for the hosting, security and operation of the Website.
- Google Analytics 4 is used for audience measurement only if you consent to it.
- Google Maps is loaded only if you allow maps.
MRT Troca does not sell your Personal Data.
Retention Periods
MRT Troca retains Personal Data only for the periods strictly necessary for the purposes described above for which it was collected, and in accordance with the applicable legal and regulatory provisions on retention periods or the rules arising from CNIL recommendations.
Where a minimum retention period is established by law, MRT Troca has no choice but to comply with that period. Beyond that period, and where the law does not specify a retention period, Users’ Personal Data is not retained for longer than is strictly necessary for the purposes for which it is collected and processed.
To determine the retention period for Personal Data, MRT Troca takes into account the interests of the data subjects and its own interests, with the understanding that the data subjects’ interests will always take precedence, as well as the nature of the data concerned and the purposes of the processing.
| Data / Processing | Retention Period |
|---|---|
| Consent preferences | 6 months, after which you are asked to make your choice again. |
| Google Analytics 4 | Data is retained for the period necessary for audience measurement purposes, within the limits of the retention settings configured in Google Analytics and the periods applicable under the regulations. |
| Google Maps | The associated data and trackers are processed in accordance with Google’s settings and policies, following consent where it is required. |
| Correspondence and requests | Up to 3 years after the last contact, followed by deletion or archiving where justified by a legal obligation or the defence of a right. |
| Technical and security logs | Generally 6 to 12 months, unless longer retention is necessary and justified by a legal obligation, a security incident, litigation or a specific documented need. |
Cookies and Trackers
On your first visit, a banner allows you to accept, reject or customise optional trackers. Rejecting them is as simple as accepting them.
No audience measurement tracker or Google Maps service requiring your consent is loaded before you have expressed your choice.
| Category | Purpose | Status | Duration |
|---|---|---|---|
| Necessary | Remembering your consent choice and interface preferences. | Always active | 6 months for your consent choice. |
| Audience Measurement | Understanding Website traffic and usage through Google Analytics 4. | Optional | According to the retention setting configured in Google Analytics 4, within the limits of the applicable periods. |
| External services | Displaying maps provided by Google Maps on the tea room pages. | Optional | According to the retention settings and rules applicable to the Google Maps service. |
You can change or withdraw your consent at any time. Withdrawal prevents the services concerned from being loaded in future. Third-party trackers already placed can also be deleted through your browser settings.
International Transfers
Some services used on the Website, including Google Analytics 4 and Google Maps, may involve the processing or transfer of Personal Data outside the European Economic Area.
Where such transfers take place, they are governed in accordance with Chapter V of the GDPR, in particular, as applicable, by an adequacy decision, the EU–US Data Privacy Framework where the recipient is certified, or standard contractual clauses (SCCs) adopted by the European Commission, together with any applicable supplementary measures.
For more information on the safeguards Google implements for international transfers, you can consult its privacy policy and the information on its data transfer frameworks.
Your Rights
Under the conditions set out in the GDPR, you may request access to, rectification or erasure of your Personal Data, restriction of processing, or data portability. You may also object to certain processing and withdraw your consent at any time.
Send your request by post to MRT Troca, 4 place du Trocadéro et du 11 Novembre, 75016 Paris. Proof of identity may be requested only where necessary to confirm your identity.
If, exceptionally, you are unable to exercise your rights through requests sent to the address above, you are entitled to lodge a complaint directly with the competent administrative authority, namely the Commission nationale de l’informatique et des libertés (CNIL).
Jurisdiction and Governing Law
This Personal Data Protection Policy is governed by French law. Any difficulty concerning its interpretation or implementation shall fall within the exclusive jurisdiction of the competent French courts in the judicial district where MRT Troca has its registered office.
Policy Updates
This policy may be amended to reflect changes to the Website, service providers or regulations. The update date at the top of the page identifies the applicable version.
The Publisher’s identification details are available in the Legal Notice & Terms of Use.