Privacy policy

At GAULT&MILLAU, we know that you are concerned with protecting your personal data. That is why we are committed to ensuring the highest level of protection of your data, in accordance with the personal data protection regulations to which we are subject. This Privacy Policy describes our processes of collecting and processing your personal information.

Who is the “controller” of your personal data?

The controller is the company that defines how and why your personal data will be used.

Personal data collected for Belgium on the website and the mobile application (hereinafter referred to as the "Website”) shall be processed by: see Legal notice.

Hereinafter referred to as “GAULT&MILLAU”.

What data is collected about me?

GAULT&MILLAU collects only personal data that allows us to offer you the most suitable services. As part of these services, we may differentiate between two different profiles: the Website user and the professional working for a business.

A user has an account on the Website, can use the Website and its associated services and can leave comments on businesses and/or products.

A professional works for one or more businesses referenced on the Website.

The types of information we collect are explained below. Whenever entry of the data item is mandatory, it is marked by an asterisk; otherwise, it is optional.

Concerning users

We collect and store your first and last names, e-mail address, password, user ID, nickname, profile picture, cookie ID, IP address, login data, favourite language, favourites and comment(s).

Concerning professionals

We collect and record your first and last names, date of birth, gender, e-mail address, telephone number, awards, start and end date of contract with a business, and position in that business.

How and when is data collected?

Concerning users

We collect the information you supply, particularly when you create or change your user account. Certain information (e.g., about your use of our services) may also be collected when you browse the Website (see “About cookies”).

Concerning professionals

We collect the available information when the business is added to our database or afterwards.

How do we use the data and for what purposes?

We collect the information so that you can use the Website and related services, including:

  • searching and viewing businesses and/or products;
  • the option of rating businesses and/or products;
  • reading the news.

Concerning the user, we only collect such information as is strictly necessary. Your information is never shared with third parties and remains confidential unless you explicitly authorize its publication when you post a comment. It should be noted that the publication of a comment will make public your nickname, profile image, the comment in question and the associated rating. Such publication is entirely under your control and not mandatory in any case.

Concerning the professional, we collect only data that allows users to understand which business you work for and your position there. We may also collect information allowing you to be contacted, if that is possible. Your last name, first name, position in the business and any awards that you may have received will be published and visible, always in connection with a business.

How do we store and protect data?

The automated services and processes are provided by a subcontractor: Gault & Millau International SA – Rue du Jeu-de-Arc 15, 1207 Geneva.

All the information we collect is stored in a database hosted by Amazon Web Services, a subcontractor in Germany. The account passwords are encrypted and the connections secured by SSL protocol.

Our servers are physically protected and not accessible to the public. Access by professionals is strictly controlled and limited to authorized technical staff.

How long do we store your personal data?

Concerning users

The data is stored for the duration of your account and will be deleted within one (1) month after the account is closed. To close an account, you may exercise your rights at any time as described under the section “Your rights and how to exercise them”, or contact us.

Moreover, if we do not detect any account activity for more than 5 years, your data will be automatically deleted.

Concerning professionals

The information will be stored throughout its period of validity, that is, for as long as it is accurate. A GAULT&MILLAU administrator will update your information and delete it when it becomes obsolete. Regarding your personal information, you may exercise your rights described below in the section “Your rights and how to exercise them”. The statutory time allowance for rectification applies in such cases.

Your rights and how to exercise them

As required by the regulations on personal data protection, you may exercise your rights (access, rectification, deletion, opposition, limitation and portability, where applicable) and define the manner of disposal of your personal data by sending us an e-mail at [email protected]

To ensure that we can reply as soon as possible, please tell us your first name, last name, email address and, if possible, your nickname. Certain requests to exercise your rights (right of access) must be accompanied by a photocopy of an identity document bearing your signature, to enable an identity check, and specify the address to which you wish the reply to be sent. The reply will then be sent to you within one (1) month after receipt of the request.

About cookies

We use different cookies on the Website to improve the interactivity of our Website and our services.

What is a cookie?

A “cookie” is a set of information, usually a small text file identified by a name, which can be sent to your browser by a website you are logged into. Your web browser will keep it for a certain period and send it back to the web server each time you log in. Cookies have many uses: they can be used to store your client ID in order to track your browsing patterns for statistical purposes, to remember your preferred language, etc.

How do we use cookies?

Strictly necessary cookies

These cookies enable the Website to function optimally. You may object to such cookies and delete them in your browser settings, but your user experience may be downgraded as a result.

  • cookieConsentShown — Stores your cookies choices — Lifetime: 90 days
  • geoTime, geoLat, geoLng — Stores your location (if you have given permission)  — Lifetime: 10 minutes

Analytical cookies

These are cookies that keep us informed of the usage and performance levels of our Website (e.g., the pages most often viewed, the web users’ searches on the engine, etc.). Such services are provided by Google and are not mandatory. You can accept or reject them by going to the cookies management page at the link provided below.

  • _ga — Identifies the Google Analytics session and the user — Lifetime: 24 months
  • _ga_[KEY] — Enables running the Google Analytics session — Lifetime: 24 months

Cookies in connection with the mobile GAULT&MILLAU app

When you use the GAULT&MILLAU app on your mobile devices, GAULT&MILLAU uses cookie-like tracking technologies to help us identify you better and customise our services. When you install the GAULT&MILLAU app, we collect information about your use of the application. We use that information to find out which services you use and to optimise them. As on the web, we may use these technologies to store an identifier or other information on your device. Depending on the operating systems, you can disable such cookies in the mobile phone settings that let you manage your applications.

Privacy policy for external websites

Our Website features dynamic links that can redirect you to external websites unaffiliated with GAULT&MILLAU. Since our Privacy Policy covers only the GAULT &MILLAU platform and the related domain names, any use of a third-party website will be covered by their own privacy policy.

Changes to this Policy

This Policy may be amended by GAULT &MILLAU at any time, particularly in order to bring us into line with possible regulatory, legal, editorial and/or technical developments. If so, we will replace the present Policy on the Website to grant you free access to the latest version at all times.

Latest update: 8 December 2021.

Contact us

Any questions or comments? You can contact us by e-mail using the following address: [email protected]

Contact the appropriate authorities

If you feel that your rights have not been respected or we have not managed to deal with your requests to your satisfaction, you may contact the supervisory authority in your country of residence or domicile. The competent authority depends on the country from which you obtain access to our services. The following website will help you to determine the competent supervisory authority: https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080