Data protection policy

Open the cookies acceptance tool.

This Personal Data Protection and Cookie Management Policy details the policy of WAGRAM FOOD SERVICE, a public limited company with a capital of €3,327,700, whose registered office is located at 103 rue La Fayette, 75010 Paris, registered with the Paris Trade and Companies Register under number 339 592 685, regarding privacy protection, personal data collection, and cookies.

It applies to data collected on the COLUMBUS CAFE website (hereinafter referred to as “the Website” or “the Site”).

The purpose of this policy is to inform you:

About the means we use to collect your data, while strictly respecting your rights,

About the data that may be collected on our Site,

About the use that may be made of the data collected and the rights you have over this data.

WAGRAM FOOD SERVICE hereby specifies, through this charter and/or whenever you are asked to provide personal data, the purposes of the processing and the means of any operation (collection, recording, modification, etc.).

WAGRAM FOOD SERVICE undertakes to:

Ensure compliance with the principles of personal data protection,

Inform individuals of their rights of access, rectification, and objection,

Complete legal and/or regulatory formalities.

We inform you that, in the collection and management of your data, we comply with Law No. 78-17 of January 6, 1978, relating to information technology, files, and civil liberties, as amended and in its current version, as well as the General Data Protection Regulation, adopted on April 27, 2016 by the European Parliament, and the resulting laws and regulations.

I. Data protection

1. Definition and nature of personal data
“Personal data” means any data that allows you to be identified, directly or indirectly (by grouping information), such as your last name, first name, pseudonym, date of birth, photograph, postal and email addresses, telephone numbers, profession, educational background, qualifications, career path and professional experience, data relating to your transactions on the website, details of your purchases and subscriptions, bank account details, etc.
When you use our website, and through it, we may collect personal data, which is communicated to us when:
You complete an information form to apply to us at our head office via the “Apply” tab or as a franchisee of the network in the “Become a franchisee” section.
You create a customer account and order coffee from our e-shop.
You share your ideas with us in the “suggestions box”.
You can contact customer service via the “Contact Us” tab.

The following data we may collect about you:

Identification data: title, last name, first name, postal address, password
Contact data: billing and delivery address, email address, telephone number
Financial data: bank details
Commercial data: preferred point of sale, purchase history

2. Your rights
Following the French Data Protection Act No. 78-17 of January 6, 1978, and the provisions of the General Data Protection Regulation, adopted on April 27, 2016, by the European Parliament, you have the following rights:

Right to withdraw your consent: As your consent is never final, you may withdraw the consent you have given us at any time. Any processing previously carried out on this basis will, however, remain valid.

Right of access: You have the right to request information about whether we hold data about you and, if so, to request disclosure of this data.

Right of rectification: To ensure we never process inaccurate information, you have the right to have any inaccurate or incomplete information we hold corrected and/or completed.

Right to erasure: You can request the deletion of your data.

Right to restriction of processing: You can, in certain cases strictly provided for by the GDPR, ask us to temporarily suspend the use of some of your data.

Right to object: You can object to all or part of the processing of your data.

Right to portability: When the processing of your data is based on consent or on the performance of a contract or pre-contractual measures, and when the processing is carried out using automated processes, you can request that we retrieve this data in an easily usable format.
To exercise your rights, you can send a written request either:
by email to the following address: contact@columbuscafe.com
by post to the following address: WAGRAM FOOD SERVICE,
COLUMBUS CAFE, retail service, 103 rue La Fayette, 75010 PARIS.

Your request must specify your identity. In case of reasonable doubt as to the identity of the person making the request, you may be asked for proof of identity.

We will endeavor to respond to your requests within a maximum of one month. However, complex requests may be processed within a maximum of three months.
You also have the right to file a complaint with the French National Commission for Information Technology and Civil Liberties (CNIL).
Management of personal data by WAGRAM FOOD SERVICE

3.1 Legal basis for processing
The processing carried out is based on the following legal bases:
The execution of contractual or pre-contractual measures;
Our legitimate interest;
Compliance with legal obligations; or
When required with your consent.

3.2 Purpose of data processing
Your data is collected to meet one or more of the following purposes:
Create customer accounts to process your (online) orders, manage and process your orders, and communicate with you regarding this management.
Reimburse you if necessary, issue invoices, manage, and process deliveries.
Monitor customer relations, particularly in the management of your complaints and requests.
For applications submitted online, we to review your application and be able to contact you if an opportunity arises in our network or a position becomes available or is created within our company.
To process your suggestions in the suggestion box and respond to you if necessary.
Based on your consent, send you newsletters, information letters, and promotional offers to keep you informed of new products.
Manage your subscriptions and unsubscriptions to newsletters and satisfaction surveys;
Offer you prizes through competitions;
Prepare reports, commercial statistics, market and behavioral studies, in particular to improve our products and better meet your expectations by offering you products adapted to your needs;
Manage your requests for the right to access, rectify, and object to your data;
Retain your data per accounting standards for the legally required period, to respond to requests from tax authorities and social security bodies, if necessary.
We undertake to collect your data by limiting ourselves to the data strictly necessary for the purpose of the intended processing, to be able to process your requests and offer you the services offered on our website.

3.3 Data Retention
We ensure that your data is only retained for a period that does not exceed that necessary for the purposes for which it is processed.

Please note that all data collected to create your customer account is retained for 3 years, and that—unless you choose otherwise—we may send communications regarding our products and our network to anyone who has consented to it for 3 years from the last contact, and communications regarding products similar to those purchased to anyone who has placed an order via our website or in-store for 3 years from the last purchase.

If you have consented to our retention of your bank details:
To pay for your subscription, your data will be retained until the last payment due date.
To facilitate your future purchases, until you withdraw your consent or until the expiry of the validity period of your bank card details.

You can also take any action you deem appropriate directly with our payment service providers.
If you used Stripe, you can close your account or contact the privacy team at privacy@stripe.com.
Please also note that Stripe may retain certain personal data when required to do so by applicable law, including under anti-terrorism and anti-money laundering laws.
If you signed up for Link when you made your purchase, you can delete your account by visiting the settings page on the Link website (http://app.link.co/login), or by following this guide (https://support.link.co/how-to-delete-your-saved-payment-information).
After this period:
We will contact you to determine whether or not you wish to continue receiving marketing solicitations.
Failing this, the data will be archived and anonymized or destroyed.
At any time, you may object to the processing of your personal information, as you have the right to access, rectify, delete, and object to the processing of your personal information, as described above.

3.4 Data Recipient
The personal data collected about you is intended for WAGRAM FOOD SERVICE’s internal departments (financial, purchasing and marketing, and development) and, for services requiring third-party intervention, to our service providers.
This data may be shared with our service providers for credit card processing, website hosting, email and mail delivery, location tracking, product and service delivery, and analytical services.
Other service providers may also assist us, with your consent and where required by applicable law, to evaluate, develop, and provide you with promotions and special offers that may be of interest to you, to administer contests, sweepstakes, and events, or for any other promotional purposes. The data we collect about you is not intended to be transferred outside the European Union. However, should this be the case, we guarantee that, should your data be transferred outside the European Union and the European Economic Area (EEA), we will implement all appropriate measures to ensure an adequate level of protection for your data.
To this end, we will ensure that we contract with organizations established in countries recognized, under an adequacy decision within the meaning of Article 45 of the GDPR, as ensuring an adequate level of protection.
Failing this, we will take all “appropriate safeguards” within the meaning of Article 46 of the GDPR to regulate the transfer of your data, such as the implementation of standard contractual clauses approved by the European Commission.

3.5 Security and confidentiality of personal data collected
The security and confidentiality of the personal data you entrust to us is a priority for us.
Indeed, we ensure that we take all necessary technical and organizational measures given the nature of the personal data you provide to us and the risks posed by its processing.
This is to preserve the security of your data and, in particular, prevent it from being distorted, destroyed, damaged, or accessed by unauthorized third parties. The security and confidentiality of personal data also rely on everyone’s best practices. Therefore, we invite you not to communicate your username and password to third parties, to systematically log out of your profile and your customer account (particularly in the case of linked accounts), to close your browser window at the end of your session, particularly if you access the Internet from a computer shared with other people, and not to save your username and password in your browser. This will prevent other users from accessing your personal information.

II. Data management policy

The term “cookies” covers all the tracers placed when you visit a website, read an email, or use software or a mobile application, among other things. These are text files that the website you are visiting saves to your hard drive or in your browser’s memory. A cookie allows your computer to store various technical data that allows for general control of public access to our sites (number of visits, frequency of exposure to an advertising banner, connection to other sites, etc.) or the personalization of the pages displayed for your future interactions with this site.
When you browse our Site, information about your browsing may be recorded in “Cookie” files installed on your computer, tablet, or smartphone.
Cookies are important for the proper functioning of a site. Cookies are used to store login information and provide a secure connection, collect statistics to optimize the site’s functionality, and adapt the content to your interests.
Therefore, when you visit our Website for the first time, cookies may be installed on your device. We inform you that cookies are used by the Website, via a window that opens on the page visited. Based on this information, you can access this Policy and accept or reject cookies.
Types of Cookies
Several types of cookies exist and allow you to access a number of features, once you accept them.
Cookies Used
By Directive 2002/58/EC, as amended in 2009, known as “e-privacy,” cookies whose use is strictly necessary for the provision of an online communication service expressly requested by the user or whose sole purpose is to enable or facilitate electronic communication are exempt from obtaining the consent of the website user.

Cookies that cannot be classified as necessary may not be installed on your browsing device without your express prior consent.

III. Contact us

We welcome your questions, comments, and concerns regarding privacy. You can contact COLUMBUS CAFE customer service by email at contact@columbuscafe.com or by writing to us by post at WAGRAM FOOD SERVICE, COLUMBUS CAFE, retail department, 103 rue La Fayette, 75010 PARIS.

IV. Updating the charter

We reserve the right to modify this Charter at any time, in whole or in part, taking into account changes and developments in our internal practices and procedures. The latter will ensure that they are always in compliance with any changes to French and European legislative and regulatory provisions. We invite you to regularly consult this Charter before collecting any of your data, for a better knowledge and understanding of the use of your data. We may ask you, at regular intervals, to confirm your knowledge of this charter.

Date of update and last update of this Charter: August 6, 2025

To learn more about cookies, we invite you to visit the CNIL website.