PRIVACY POLICY – MAYABAY WEBSITE

1. Introduction

Maya Collection is committed to protecting your privacy and respecting your rights regarding personal data protection. This privacy policy explains how we collect, use, and protect the personal information you provide when visiting our website www.mayabayrestaurant.com . By using this site, you agree to the practices described in this privacy policy.

Collection and Use of Information

When you use our website, you may provide data such as your first and last name (individual), business name (legal entity), residence or business address, personal or business phone number, personal or business email address, occupation, job title, company, age, and gender, as well as your banking information and the IP address used to access the site. You may also provide any other information voluntarily, for example, when booking a table or event, subscribing to our newsletter, or submitting a contact form. We use this information to: Inform you about the status of your reservation, Communicate with you in a personalized manner, Respond to your requests for information, Send newsletters about our MayaBay restaurants and Maya Collection establishments (if you opted to receive them), Improve our customer service and your user experience on our website. Data protection is a top priority for us. This privacy statement aims to help you understand how we may use the information you provide as a user of our website. In accordance with the French Data Protection Act (“Informatique et Libertés”) of January 6, 1978, you have the right to access, rectify, or delete your personal data. To exercise this right, please contact: contact@mayacollection.mc

2. Legal Basis

This privacy policy is based on the French Data Protection Act (“Informatique et Libertés”) of January 6, 1978, and the General Data Protection Regulation (GDPR), which came into effect on May 25, 2018.

3. Updates

Our privacy policy may require periodic updates, particularly as the legal framework for data protection evolves. We encourage you to check this page regularly to ensure you have read the latest version. Last updated: 01.11.2025

4. Website URL

https://www.mayabayrestaurant.com/

5. Definitions
Personal Data

Any information relating to an identified or identifiable individual (data subject), in particular by reference to an identifier such as name, first name, address, email, phone number, etc.

CMS

CMS stands for Content Management System. It is the system used to manage the content displayed on a website.

Consent

Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement, by a statement or by a clear affirmative action, to the processing of their personal data.

Cookies

A cookie is a text file that a website stores on the hard drive or in the browser memory of the device used to access the Internet. Cookies store technical data used for public access control or page customization.

Purpose of Processing

The purpose of processing corresponds to the reason why data is collected.

Plugins

A plugin (or plug-in) is a software component designed to add functionality to another software program (the host application). Example: social media sharing buttons. Equivalent terms: “plug-in”, “add-in”, “add-on.”

Data Subject

Any individual whose personal data is being processed.

Data Controller

The data controller is the natural or legal person on whose behalf data processing is carried out. They determine, alone or jointly, the purposes of processing.

Processor

The processor is any natural or legal person, public authority, service, or other entity processing personal data on behalf of the controller. For example: a web host or an online service provider.

Tag

Tags or HTML elements are the basic building blocks of a web page’s HTML code. They are invisible to the user (unless the source code is displayed). Tags are interpreted by the browser to structure the page and are sometimes used by search engine algorithms to determine page ranking.

Processing

Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organization, storage, adaptation, modification, retrieval, consultation, use, disclosure, dissemination, or any other form of making data available, as well as restriction, erasure, or destruction. We process only the data you choose to provide and for which you have given explicit consent.

6. Processing of Your Data

We only process the data you choose to provide and for which you have given explicit consent.

7. Purposes of Processing

We process your data solely to meet your needs. By collecting certain personal information, we pursue two main purposes:

• Operational purposes

o Responding to contact or information requests

o Preparing one or more offers

• Reservation purposes

o Ensuring follow-up and proper execution of your reservation

o Assessing customer satisfaction after your visit

8. Data Retention Period

Your data is stored in our systems for as long as necessary to complete the intended processing. Once processing is complete, the data is archived, anonymized, or deleted.

9. Transfer of Personal Data

For data processing, as well as for system maintenance and IT support, we use processors (service providers) based in Switzerland and abroad. When our processors’ servers are located outside of Switzerland, we ensure that they are in a country whose data protection laws are equivalent to the French Data Protection Act and GDPR, and that our processors apply measures compliant with these regulations.

10. Data Protection Measures

We strive to maintain a high level of security in data collection, processing, and storage by relying on appropriate organizational and technical measures.

11. Cookies and Plugins

Our website uses plugins and cookies that may automatically store certain information. Their use is intended to make the site more user-friendly by improving its usability and may also be used for statistical purposes, behavioral analysis, and geolocation analysis to personalize our commercial offers. When you browse our site, the device you use interacts with a server that provides all requested resources and automatically logs each operation in a specific file, identifying the device by its IP address. Your browser transmits standard data such as browser type and features, the operating system of the computer, tablet, or smartphone used, referring third-party sites (e.g., Instagram, Facebook, TikTok), and the dates and times of access to our site. This data, including your IP address, does not allow us to identify you personally.

Marketing Analytics and Targeting Plugins

Our site uses marketing analytics and targeting services. These services use cookies. The data generated by cookies about your site usage, including your IP address, may be transferred to and stored on servers located abroad, possibly in countries with a lower level of data protection than Monaco, France, or the European Union. The provider uses this information to evaluate your site usage, produce activity reports, and provide other services related to website activity and Internet usage. The provider may share this data with third parties when legally required or when those parties process data on their behalf, including the website publisher. Our site uses the following analytics and advertising services:

• Google Maps

• Google reCAPTCHA

• Google Analytique 4

• Pixel Meta

Social Media Plugins

Our website uses social media plugins (“plugins”). These plugins are identified by their respective logos. When you open a page on our website containing such a plugin, your browser establishes a direct connection with the relevant social network’s servers. The plugin content is transmitted directly from the social network to your browser and integrated into the webpage. Because cookies are embedded on our site’s pages, the relevant social network is informed that you have visited one or more pages of our website. If you are logged in to a social network during your visit to our site, that network may link your visit to your account. If you interact with plugins, for example by clicking the “Like” button or posting a comment, the corresponding information is transmitted directly from your browser to the social network and stored on their servers. For details on how social networks collect and process data, as well as your rights and privacy settings, we recommend consulting their respective privacy policies.

12. Control Options

You can disable plugins and cookies through the cookie banner that appears at the bottom of the homepage when you visit our website. To customize or disable cookies, click “Customize.” Most modern browsers allow you not only to block cookies but also to start private browsing sessions where all cookies installed during the session are automatically deleted afterward—offering enhanced protection against tracking.

13. Your Rights
Right to Information

You have the right to be informed about your personal data, including the nature of the data collected and the purpose of processing.

Right of Access

You may request access to your personal data at any time.

Right to Rectification

You have the right to request correction or updates to your data.

Right to Erasure (Right to be Forgotten)

Under the GDPR, EU residents may request the complete and permanent deletion of their data. To apply the most favorable measures, we extend this right to Swiss residents.

Right to Restrict Processing

You have the right to restrict the processing of your data, especially regarding its nature, purpose, or duration.

Right to Data Portability

Under the GDPR, EU residents may request that their data be transferred to third parties. To apply the most favorable measures, we extend this right to Swiss residents.

Right to Object to Processing

You may object to the processing of your data at any time.

Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you. Profiling is expressly included.

14. Exercising Your Rights and Further Information

You can exercise your rights or request additional information by contacting us at: 📧 contact@mayacollection.mc or by post at: Data Controller: Richard Maria – Maya Collection Address: 31 Bd Princesse Charlotte, 98000 Monaco