Skip to main content
    BOOKAFTERWORK
    Login

    Privacy Policy

    This page is also available in French. In the event of any discrepancy between the French and English versions, the French version shall prevail.

    1. Data controller and data contact

    Data controller:

    Antoine Cazals – BookAfterwork
    SIRET : 821 473 436 00029
    1 Passage des Acacias, 75017 Paris, France
    Email : contact@bookafterwork.com

    Data protection contact:

    For any question regarding your personal data:
    Email: contact@bookafterwork.com
    Response time: 30 days maximum

    2. Data collected

    For companies:

    • First and last name
    • Work email
    • Phone number
    • Company name
    • SIRET (if applicable)

    For bars:

    • Manager's first and last name
    • Work email
    • Phone number
    • Business name
    • SIRET and VAT number
    • Banking information (bank details for transfers)

    3. Purposes of processing

    • Management of afterwork bookings
    • Communication between companies and bars
    • Processing of secure payments
    • Improvement of our services
    • Compliance with legal and tax obligations

    4. Legal basis

    The processing of your data is based on:

    • Your explicit consent
    • Performance of the service contract
    • Compliance with our legal obligations
    • Our legitimate interest in improving our services

    5. Retention period

    • Account data: As long as your account is active + 3 years after deletion
    • Booking data: 10 years (accounting and tax obligations)
    • Banking data: Retained for as long as necessary for transfers

    6. Your GDPR rights

    In accordance with the GDPR, you have the following rights:

    • Right of access: Obtain a copy of your data
    • Right to rectification: Correct your inaccurate data
    • Right to erasure: Delete your data (subject to conditions)
    • Right to portability: Receive your data in a structured format
    • Right to object: Object to the processing of your data
    • Right to restriction: Restrict the use of your data

    To exercise your rights, contact us at : contact@bookafterwork.com

    7. Subprocessors and data sharing

    Your data is processed by the following subprocessors, all of which are GDPR compliant:

    • Supabase Inc. (EU hosting): Cloud hosting, database and authentication — DPA signed, standard contractual clauses
    • Stripe Payments Europe Ltd (Ireland): Secure card payment processing — transfers outside the EU governed by standard contractual clauses and the Data Privacy Framework
    • Resend Inc. (USA): Sending of transactional emails (confirmations, reminders, invoices) — DPA signed, standard contractual clauses
    • Google Ireland Ltd (Google Analytics 4, Google Tag Manager, Google AdSense): audience measurement and advertising display — deployed only after your consent
    • OVH SAS (France): Domain name and DNS management

    Sharing between users: Information necessary for the booking (contact details, event details) is shared between the Company and the Bar concerned.

    We never sell your data to third parties for advertising or commercial purposes.

    8. Security

    We implement technical and organizational measures to protect your data:

    • Encryption of data in transit (HTTPS/SSL)
    • Encryption of data at rest
    • Secure authentication
    • Restricted access to personal data
    • Regular backups

    9. Cookies and audience measurement

    9.1 Strictly necessary trackers (no consent required)

    Exempt from consent because they are essential to the operation of the site:

    • sb-*-auth-token: User authentication (local storage, duration: session)
    • bma-cookie-consent-v2: Stores your cookie choice (local storage, duration: 6 months)
    • language / theme: Language and display preferences (local storage, duration: 1 year)

    9.2 Audience measurement and advertising (consent required)

    These services are loaded only after your acceptance in the consent banner. As long as you have not accepted, or if you refuse, no Google script is deployed (Google Consent Mode v2 initialized to refuse by default):

    • Google Analytics 4 (_ga, _ga_* — 13 months): audience measurement
    • Google Tag Manager: loading of measurement tags
    • Google AdSense (__gads, __gpi — 13 months): display of advertisements

    We do not sell or transfer your booking data to advertisers.

    9.3 Managing and withdrawing consent

    You may change or withdraw your choice at any time via the "Cookie Preferences" link at the bottom of each page, or from your browser settings. Refusal has no impact on access to the platform's services.

    10. Changes

    This policy may be amended. The last update date is shown at the bottom of the page. We will inform you of any significant changes by email.

    11. Complaint

    If you believe your rights are not being respected, you may file a complaint with the CNIL:

    Commission Nationale de l'Informatique et des Libertés (CNIL)
    3 Place de Fontenoy - TSA 80715
    75334 PARIS CEDEX 07
    Phone : 01 53 73 22 22
    www.cnil.fr

    Your Ad HereClick to book

    Last updated : 17/10/2026