Your data
Privacy policy
What the site collects, why, for how long, and how to take back control of your information.
Data controller
Data collected on this site is processed by the Nola restaurant, operated by VIZIONR (SARL, Abidjan · RCCM CI-ABJ-03-2022-B12-04297), represented by Dominique Kouamé K.
For any question about your data: donnees@nolarooftop.ci
What is collected
The site only collects what you type into its forms. Nothing is inferred, bought or cross-referenced with another source.
- Reservation: name, phone, and optionally party size, preferred date and a message.
- Private hire: name, phone, and optionally email address, event type, date, guest count, indicative budget and a message.
- Newsletter: email address and reading language.
No sensitive data is requested. Please do not include any in the “message” field.
What it is used for
- handling and confirming reservations;
- answering private-hire and general enquiries;
- sending the newsletter, only to those who confirmed their subscription;
- keeping the site running and secure.
Your data is never used for profiling, targeted advertising or list resale. You will receive nothing you did not agree to.
Legal basis
Depending on the case, processing is based on:
- pre-contractual steps taken at your request, for a reservation or a private-hire enquiry;
- your consent, for the newsletter · signing up is not consent in itself, only confirming it by email is, and it can be withdrawn at any time;
- the legitimate interest of the venue in answering its guests and protecting its site.
Retention
Reservation and private-hire enquiries are kept for 36 months from the last contact, then deleted, unless a longer retention is legally required.
A newsletter subscription is kept for as long as you remain subscribed. After unsubscribing, only the minimum record needed to avoid re-subscribing you by mistake is retained.
Who has access
Your data is accessible only to the Nola team members authorised to handle enquiries, through a management area with restricted, individually named access.
It may pass through the technical providers strictly necessary to run the site (hosting and email delivery), acting as processors, on instruction and under a duty of confidentiality.
It is never sold, rented or passed on to third parties for commercial purposes.
Where it is hosted
Data is hosted on servers located in France, within the European Union, whose personal data protection framework is recognised as providing appropriate safeguards.
Security
Reasonable technical and organisational measures protect your data against loss, alteration and unauthorised access: encryption of the exchanges between your browser and the site, access restricted to authorised and authenticated people, and access logging.
As no system is infallible, any incident affecting your data would be notified as promptly as possible, in accordance with the applicable regulations.
Cookies
The public site sets no advertising cookies and no analytics trackers. It uses no statistics tool, no social network pixel and no ad network.
Only strictly necessary cookies are used:
- reading language · set if you choose a language other than French, so it can be served to you on your next visit;
- management session · reserved for the venue’s team, it maintains and protects their connection to the site’s management area.
None of these cookies follows you across sites and none serves any profiling purpose. As they are essential to providing the service, they are exempt from consent · you may nonetheless refuse them in your browser settings, without access to the public site being prevented.
Your rights
Under law no. 2013-450 of 19 June 2013 on the protection of personal data in the Republic of Côte d’Ivoire, you have the right to access, rectify, object to, restrict and erase data concerning you.
These rights are exercised in writing at donnees@nolarooftop.ci. Proof of identity may be requested, for the sole purpose of confirming the request comes from you; it is destroyed as soon as the answer is given.
You may also lodge a complaint with ARTCI, the Telecommunications/ICT Regulatory Authority of Côte d’Ivoire, which acts as the personal data protection authority.
Users residing in the European Union
People residing in the European Union additionally benefit from the rights provided by Regulation (EU) 2016/679 (GDPR), in particular the right to data portability and the right to give directions on the fate of their data after death. These rights are exercised through the contact given above.
Changes to this policy
This policy may be adapted to follow changes to the site or to the regulations. The date of the last update appears at the foot of this page; any substantial change would be signalled through the usual contact channels.
Last updated · 3 August 2026