Effective date : 17.11.2025
Last updated : 17.11.2025

 

1. Introduction

At GAULT&MILLAU, we attach great importance to the protection of your personal data. This privacy policy aims to inform you, when you visit our website or use our services, about how we collect, use, store and secure your data, in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

2. Data Controller

The data controller is:
GAULT&MILLAU INTERNATIONAL SA – Rue du Jeu de l’Arc 15, 1207 Geneva, Switzerland – CHE-391.304.412

3. Data we collect

We collect the personal data that you provide to us via the contact forms on our website: for example your name(s), surname(s), email address(es), telephone number(s), company name, website URL, and any other data that you choose to provide to us.

4. How and when we collect data

• When using a contact form on our website.
• When you subscribe to our newsletter (if applicable).
• No other automatic or manual collection of personal data will be carried out except with explicit consent or as part of an existing contract/license.

5. Purposes of processing & legal basis

We use the collected data to:

• We will contact you again with relevant information following your contact request.
• To send you occasional newsletters about our new products and services, and general information about our products and services, provided you have consented to this.

The legal basis for this processing is your informed consent (you provide us with your data via the form or you voluntarily subscribe to the newsletter) and, where applicable, the performance of a contract/license. You can withdraw your consent at any time, in particular via our contact form or by writing to us.

6. Cookies, trackers & advertising/analytics partners

We only use cookies that are strictly necessary for the operation of our site.

Some of our partners may place or access cookies or trackers on our site for functional, analytical or advertising purposes.

You can view and manage your cookie preferences at any time via our consent management solution.

We would like to inform you that:

• The display or activation of certain advertising or analytical tools will only take place after your consent via our CMP (managed by Didomi) and in compliance with the IAB’s Transparency & Consent Framework (TCF).
• You have the option to accept or refuse each of these trackers via the consent management interface.

 

Partners and categories (indicative list)

The following partners are involved:

• Facebook / Instagram (advertising, retargeting)
• TikTok
• Twitter
• YouTube
• Microsoft (via Microsoft Clarity)
• Google (via: Google Analytics Products, Google Advertising Products / IAB TCF, Google Publisher Tags)
• Geoapify

You will be informed of the use of these partners and can modify or withdraw your consent at any time via the cookie management window.

7. Shelf life

• Contact form: we retain your data for the period necessary for the operations for which it was collected
• Your email address will be kept as long as you are subscribed to the newsletter.
• You can unsubscribe at any time, and your email address will be deleted or anonymized within a reasonable timeframe after your request.

8. Your rights & how to exercise them

In accordance with applicable legislation, you have the following rights:

• Right of access: to know if we hold your email address, and to request a copy.
• Right to rectification or updating.
• Right to erasure (“right to be forgotten”): unsubscribe or request the deletion of your email address.
• Right to restriction of processing.
• Right to object.
• Right to withdraw your consent at any time (without affecting the lawfulness of prior processing).
• Right to lodge a complaint with a supervisory authority (e.g., in France, CNIL; in Switzerland, FDPIC).

To exercise these rights, please use our contact form via: https://www.gaultmillau.org/contact/?lang=en by indicating your relevant email address, the nature of the request, and where applicable, proof of identity may be required for verification.

9. Data transfers outside the European Economic Area (EEA)

Email addresses collected for our newsletters remain in the country concerned by the subdomain/licensee and are not transferred to other markets/licensees located outside the European Economic Area, except with explicit consent or contractual need with adequate safeguards.

 

10. Data Security

We implement appropriate technical and organizational measures to protect your email address: encryption, restricted access, and a secure infrastructure. Access is limited to authorized personnel.

11. Changes to this policy

We reserve the right to modify this policy at any time, particularly to reflect changes in regulations, our services, or our organization. The updated version will be published on our website, and the “Last Updated” date will be changed.

12. Contact & supervisory authority

If you have a question, a comment, or wish to exercise your rights, you can contact us at the following postal address:

GAULT&MILLAU INTERNATIONAL SA – Rue du Jeu de l’Arc 15, 1207 Geneva, Switzerland

If you wish to exercise your rights (access, rectification, erasure, restriction, objection, data portability) or ask a question regarding the protection of your data, you can use our contact form via: https://www.gaultmillau.org/contact/?lang=en

We are committed to responding to your request within a reasonable timeframe.

If you believe your rights have not been respected, you can file a complaint with the competent supervisory authority in your country.