Thank you for visiting our website.

Compliance with data protection regulations is a particularly important issue for our company. The purpose of this data protection policy is to inform you, the user, about the nature, scope and purpose of the processing of personal data and about your rights if you are considered a data subject as defined in Article 4, point 1) of the General Data Protection Regulation (GDPR). The data protection policy presented here already takes into account the new developments related to the General Data Protection Regulation (GDPR), which entered into force on May 25, 2018.


The communication agency in Toulouse NRV realized our website cosmopolitan. The web agency in Toulouse is specialized in website creation in Toulouse, but also in video design, natural referencing or social networks management. You can find the different realizations on the site


Simplified joint stock company ARENA (LE COSMOPOLITAIN) with a capital of 9 000,00 €.

SIRET : 80341977900019

R.C.S. : Toulouse B 803 419 779

APE code : Traditional catering (5610A)

VAT number : FR51803419779


Director of publication

Person in charge of the treatment

Simplified joint stock company ARENA (LE COSMOPOLITAIN)



2 rue Kellermann

59100 Roubaix - France


General information

Our website has been designed to collect as little data about you as possible. In principle, it is possible to visit our website without entering any personal data. The processing of personal data is only necessary if you decide to use certain services (e.g. when using the contact form). In this way, we ensure at all times that we process your personal data in accordance with a legal basis or the consent you have given. We comply with the provisions of the General Data Protection Regulation (GDPR), applicable as of 25/05/2018.


In accordance with the GDPR, the terms used in this data protection policy are defined as follows:

  • "Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity ;
  • "processing" means any operation or set of operations which may or may not be carried out by automatic means and which are applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction ;
  • "Limitation of processing" means the marking of retained personal data with a view to limiting their future processing;
  • "controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the controller may be designated or the specific criteria applicable to his designation may be laid down by Union law or by the law of a Member State;
  • "processor" means the natural or legal person, public authority, department or other body that processes personal data on behalf of the controller ;
  • "Recipient" means the natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the context of a particular investigation mission in accordance with Union law or the law of a Member State are not considered as recipients; the processing of such data by the public authorities in question is in accordance with the applicable data protection rules according to the purposes of the processing;
  • "third party" means a natural or legal person, public authority, department or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data ;
  • "Consent" of the data subject means any free, specific, informed and unambiguous expression of will by which the data subject agrees, by a declaration or by a clear positive act, to personal data relating to him being processed;

Purpose of data processing

We process the requested personal data in order to legitimize, execute or process our service offering, with Article 6(1)(b) of the GDPR as legal basis. If we use external service providers in the context of delegated data processing, the legal basis for data processing is Article 28 of the GDPR.
Our collection, processing and use of personal data is exclusively limited to the following purposes:

Purpose of data processing Legal basis for data processing
("why is the data processing necessary")
When making contact and related correspondence On the basis of your consent
Processing your request and providing any additional services you require On the basis of your consent
Sending our newsletter, subscription service On the basis of your consent
To ensure that our website is presented to you in the most efficient and attractive way (e.g. through anonymized evaluation) On the basis of legitimate interests
For the technical implementation of our services On the basis of legitimate interests
Register as a user of the site; share your opinion On the basis of your consent
Participation in competitions On the basis of your consent
For the processing, realization and shipment of your order after a purchase made on the website On the basis of your consent

Personal data collected and processed

We only collect and process your personal data when you voluntarily provide it, e.g. when you fill in forms or send e-mails.

The personal data you provide and their contents are stored exclusively by our company and our associated companies. We store and process your data only for the purposes stated in the section "Purpose of data processing". Any use outside the scope of the stated purposes requires your explicit consent, as does the transfer and communication of your data to third parties.

History files

The connection data of the requesting computer (IP address), the pages you visit on our site, the date and duration of your visit, the identification data of the browser and the type of operating system used, the web page from which your visit originated and the indication of a successful access are temporarily saved by the web server in history files. The technical management of the web pages and the anonymous collection of statistics allow an evaluation of the access to the service as well as an evaluation to improve the data protection and data security within our company in order to guarantee an optimal level of protection for the personal data we process.
The server history data is stored for analysis purposes separately from all personal data entered by you for a period of 12 months before being deleted.

Use of cookies and audience measurement

In accordance with Article 8.1 of the Google Analytics Terms of Service, we draw the attention of our visitors to the following statement: This website uses Google Analytics, a web analysis service provided by Google Inc.

What is a cookie?

Cookies are small text files that are placed on your computer or device when you visit our websites.

Purpose of the cookies

We use cookies to make your visits and purchases on our sites more efficient. Cookies also allow us to improve the navigation of our sites and to understand your purchasing behavior.

Our use of cookies

We use cookies to:

  • Remember your login information.
  • To identify you when you log on to our website.
  • Collect analytical information to, for example, count the number of visitors to our websites and identify the pages of our sites that you visit most often. We use the analytical data we collect for marketing and resource planning purposes.
  • Determine if our customers and visitors easily adapt to changes we may make to our websites.

Information collected through cookies

Cookies help us collect information about how you use our website, but we do not store any personally identifiable information in our cookie data about you. The maximum length of time we keep this information on your computer is 12 months for, and 4 years for Google Analytics.

Types of cookies

  • Session cookies: Cookies of this type are temporarily stored on your computer or device during a browser session. They are deleted from your computer or device at the end of the browsing session.
  • Permanent cookies: Cookies of this type remain on your computer for a longer period of time. Persistent cookies help us recognize you when we need to know who you are for more than one browsing session.

Cookie management

Most browsers have options in the menu that allow you to manage your cookies by adjusting or configuring your cookie settings. Typically, the browser will offer you the ability to:

  • to display your cookies;
  • to allow cookies;
  • to disable all cookies, or only specific cookies;
  • disable all cookies when you close your browser;
  • to block cookies;
  • to be notified when you receive a cookie.

Please note that unless you have set your browser to refuse cookies, our system will issue cookies whenever you visit one of our sites. If you choose to block our cookies, most of the functionality of this site will be disabled (including registration, posting comments, and other interactions) and your navigation may also be affected. If you set your browser options to delete all cookies, your browsing preferences will be erased when you close your browser.
Refusal to install a cookie may result in the inability to access certain services.
However, the user can configure his or her computer in the following way to refuse the installation of cookies:

  • In Internet Explorer: Tools tab (cog-shaped icon in the upper right corner) / Internet options. Click on Privacy and choose Block all cookies. Validate on Ok.
  • In Firefox: At the top of the browser window, click the Firefox button, then go to the Options tab. Click on the Privacy tab. Set the Retention Rules to: use custom settings for history. Finally uncheck it to disable cookies.
  • In Safari: Click on the menu icon (symbolized by a cog) at the top right of the browser. Select Settings. Click on Show Advanced Settings. In the "Privacy" section, click on Content Settings. In the "Cookies" section, you can block cookies.
  • In Chrome: Click the menu icon (symbolized by three horizontal lines) at the top right of the browser. Select Settings. Click on Show Advanced Settings. In the "Privacy" section, click on preferences. In the "Privacy" tab, you can block cookies.

More information about cookies

To learn more about cookies, we invite you to consult the CNIL page:

Integration of third-party content and services

Our website uses content and services from other providers. The user's IP address must be transmitted to ensure that this data can be accessed and displayed in the user's browser. The providers (hereinafter referred to as "third-party providers") therefore use the user's IP address.
Although we endeavor to use only third-party providers who only request the IP address to provide content, we have no influence on whether the IP address is stored, especially for statistical purposes. If we become aware that the IP address is being stored, we will inform you.

Rights of the person concerned

If you are considered a data subject as defined in Article 4, point 1 of the GDPR, you have the following rights under the GDPR regarding the processing of your personal data. The legal act corresponding to the rights presented below is available at

Right to confirmation and access

In accordance with the provisions of Article 15 of the GDPR, you have the right to request confirmation as to whether or not your personal data are being processed, and you have the right for the controller to give you access to the personal data stored about you at any time and free of charge, as well as to receive a copy of it.

Right of rectification

In accordance with the provisions of Article 16 of the GDPR, you have the right to request the rectification, as soon as possible, of personal data concerning you that are inaccurate. In view of the purposes of the processing, you also have the right to have incomplete personal data completed, including by providing an additional declaration.

Right to erasure

In accordance with the provisions of Article 17 of the GDPR, you have the right to request us to erase your personal data as soon as possible, provided that one of the grounds referred to in Article 17 of the GDPR applies and that the processing is not necessary.

Right to limit processing

In accordance with the provisions of Article 18 of the GDPR, you have the right to request the restriction of processing where one of the conditions referred to in Article 18 of the GDPR applies.

Right to data portability

In accordance with the provisions of Article 20 of the GDPR, you have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to pass this data on to another controller without us interfering with it, provided that the additional conditions of Article 20 of the GDPR apply.

Right to withdraw consent

You have the right to withdraw your consent to the processing of your personal data at any time and without retroactive effect. Please communicate the withdrawal of your consent by using the contact information provided above.

Right to object

In accordance with the provisions of Article 21 of the GDPR, you have the right to object to the processing of your personal data at any time. If the conditions for an effective objection are met, we are no longer authorized to process the data.

Right to lodge a complaint with a supervisory authority

Irrespective of any other remedy in administrative or judicial proceedings, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or where the alleged breach took place, if you consider that the processing of personal data concerning you constitutes a breach of the provisions of the GDPR.

Transmission of your personal data

Your personal data will be transmitted in the manner described below.
The website is hosted by an external service provider in the EU. This is necessary for the operation of the website as well as for the justification, realization and implementation of the existing terms of use and can also take place without your consent.
Data is also transferred if we are entitled or obliged to transfer data on the basis of legal provisions and/or on the orders of authorities or courts. This may include, in particular, communication for the purposes of legal proceedings, urgent intervention or the enforcement of intellectual property rights.
If your data is passed on to the service provider to the extent necessary, the service provider may only access your personal data to the extent necessary to fulfill its obligations. Service providers are obliged to handle your personal data in accordance with the applicable data protection regulations, in particular in accordance with the GDPR.
Apart from the circumstances mentioned above, we do not pass on your data to third parties without your consent. In particular, we do not pass on any personal data to an entity located in a third country or to an international organization.

Length of time personal data is kept

With regard to the retention period, we delete personal data as soon as their retention is no longer necessary for the fulfilment of the original purpose and the statutory retention periods have ceased to apply. The final storage period for personal data is determined by the statutory storage period. After the expiry of this period, the data concerned is regularly deleted. If retention periods must be observed, processing is restricted by blocking the data.

Note on the entry of personal data by the data subject

We would also like to point out that the collection of personal data is legally required under certain circumstances (e.g. payment data for services to be invoiced) or may result from contractual provisions. In order to make full use of the services offered on the website, you must enter into a corresponding contract with us (general terms of use) by logging in. The execution of this contract requires that you provide us with certain personal data (e.g. user name, e-mail address), which we process in the context of the execution of the contract. If you do not provide us with such personal data, we will not be able to enter into the contract with you or, if only part of the data is provided, we will not be able to provide the entire service.

References and links

When you access web pages from our website, you may be asked to re-enter information such as your name, address, e-mail address, browser credentials, etc. This data protection policy does not govern the collection, disclosure or management of personal data by third parties.
Third-party providers may have different rules regarding the collection, processing and use of personal data. Therefore, when you visit the web pages of third parties, we advise you to inquire about their personal data management practices before entering such data.

Changes to the data protection policy

We are constantly developing our website in order to provide you with better services. We keep this data protection policy up to date and adapt it if and when necessary.
We will, of course, inform you in good time of any changes to this data protection policy, including by sending an e-mail to the address you have provided. If it is necessary to obtain additional consent in relation to our handling of your data, we will of course obtain your consent before such a change applies.
You can access the latest version of our data protection provisions online at any time at this address.

Intellectual property, copyright

The content of this site is subject to French and international legislation on copyright and intellectual property. ARENA (LE COSMOPOLITAIN) retains all economic and moral rights related to the documents on this site, subject to the rights enjoyed by the authors of works published on this site. Thus, all reproduction rights, on electronic or paper media, are reserved, including for downloadable documents and iconographic and/or photographic representations. Visitors to the site shall refrain from collecting, capturing, distorting or using the information to which they have access. ARENA (LE COSMOPOLITAIN) will take legal action against any attempt to misuse the site's documentation.

Automated processing of personal data

The personal data collected is intended to provide the user with the services offered by ARENA (LE COSMOPOLITAIN), and will not be used for purposes not provided for in this legal notice. We undertake to take all precautions to preserve the security of the data and in particular to prevent them from being distorted, damaged or communicated to third parties.

Rights of access, modification, rectification and deletion of data

Users have a right to access, modify, portability, rectify and delete data concerning them in accordance with what is stated in Articles 39 and 40 of the Act of January 6, 1978 as amended by the Act of August 6, 2004, as well as the recommendations of the LCEN, and the Data Protection Regulation of May 25, 2018. To exercise this right, you may contact ARENA (LE COSMOPOLITAIN). Users' personal data are protected in particular by Law No. 78-87 of January 6, 1978, Law No. 2004-801 of August 6, 2004, Article L. 226-13 of the Penal Code, the European Directive of October 24, 1995, and the Data Protection Regulation of May 25, 2018. In any case, ARENA (LE COSMOPOLITAIN) only collects personal information about the user for the purpose of certain services offered by the site.
The user provides this information with full knowledge of the facts, in particular when he/she proceeds by himself/herself to their input. It is then specified to the user of the site the obligation or not to provide this information.
In accordance with the provisions of articles 38 and following of the law 78-17 of January 6, 1978 relating to data processing, the files and freedoms, any user has a right of access, of correction and opposition to the personal data relating to it, by carrying out its written and signed request, accompanied by a copy of the title of identity with signature of the holder of the document, while specifying the address to which the answer must be sent.

Accessibility of the site

Accessibility is essential in the consultation of a website and we make every effort to ensure that the site is as accessible as possible. We do our best to respect the Web standards (XHTML, CSS) published by the World Wide Web Consortium (W3C).


These conditions are governed by French law and any dispute or litigation that may arise from the interpretation or execution of these conditions shall be under the exclusive jurisdiction of the courts on which the registered office of the company ARENA (LE COSMOPOLITAIN) depends. The reference language for the settlement of any disputes is French.


Your personal data are confidential and will not be communicated to third parties except for the proper execution of the service. No personal information of the user of the site is published without the user's knowledge, exchanged, transferred or sold on any medium to third parties. Only the assumption of the repurchase of ARENA (LE COSMOPOLITAIN) and its rights would allow the transmission of the said information to the eventual purchaser who would in turn be bound by the same obligation of conservation and modification of the data with respect to the user of the site. The databases are protected by the provisions of the law of July 1, 1998, transposing the directive 96/9 of March 11, 1996, relating to the legal protection of databases.

Data security

We cannot guarantee the security of computer equipment used by visitors, such as PCs, tablets, smartphones, Wi-Fi connections, etc., used to access the website. We remind you that it is the users' responsibility to ensure the security of their own computer equipment.
We take technical and organizational measures to protect our website against the loss, destruction, alteration or dissemination of your data by unauthorized persons, as well as against access by such persons to such data.
In particular, we transfer your personal data in encrypted form. For this purpose, we use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption system. Our security measures are constantly being improved in line with technological advances.