Your data

In short

Who is responsible

SAS JIM ET LOD, 28 boulevard de l’Hôpital, 75005 Paris, which operates the U Mulinu restaurant, is the data controller. Contact: u.mulinu.paris@gmail.com or 01 43 37 78 76.

What we ask for, and why

For a table booking: your name, telephone number, email address, the date, the time, the number of guests and, if you wish, a note about your visit (an allergy, a pushchair, a special occasion). This is used only to hold your table, to send you the confirmation and a reminder on the morning itself, and to reach you if something goes wrong at our end.

For a catering or exclusive hire quote: your name, email address, telephone number, whether you are an individual or a business, the date you have in mind, the time of day (lunch, evening or all day), the number of guests, the venue, any budget and a description of your event. This is used only to put a proposal together for you.

To hear about our upcoming nights: your email address, and nothing else, left on the What’s on page or on the schedule page. It is used only to announce the dates. Every mailing will offer a way to unsubscribe, and writing to us does it at any time.

Legal basis: steps taken at your request before a contract is formed, and our legitimate interest in organising the service. News from the house, where offered, relies on your consent, which you can withdraw at any time.

How long we keep it

• Bookings: three years after your last visit, then erased.
• Quote requests: three years after the last exchange.
• Consent to receive news: until you withdraw it, and at most three years after the last contact.

Who can see it

Your data is seen by the restaurant team. It is kept on the server that hosts this site and in the restaurant’s mailbox. Quote requests arrive there directly and are followed up in our group bookings diary, both of them Google services; a drafting tool prepares the replies, which the team reads over and approves before anything is sent. These services may process your data outside the European Union, in particular in the United States. When a booking comes from a partner platform, or has to be passed on to one, only your name, the time, the number of guests and your telephone number are sent: your email address is never passed on to them.

Cookies and trackers

This site uses no Google Analytics, no advertising pixel and no tracking cookie. The site keeps only three technical values, inside your own browser. Two last only for the length of your visit: one avoids replaying the opening animation, the other remembers which site you arrived from, so that we know how many bookings come from Google, from Instagram or from elsewhere. That count is anonymous and aggregate: it is tied neither to your booking nor to you, it is passed on to no one, and both values disappear the moment you close the tab. The third keeps your choice about Instagram on the home page and the schedule page for six months (see below).

Instagram on the home page and the schedule page. On the home page (our account) and on the schedule page (the post for the next evening), Instagram only loads with your consent, given in the banner shown on your first visit or with the “Show our Instagram account” and “Show the Instagram post” buttons. Instagram (Meta Platforms Ireland) then sets its own cookies, governed by its own policy. Without your consent, nothing is requested from Instagram. Your choice is kept for six months in your browser, then you are asked again, and you can change it at any time with the “Cookies” link at the bottom of every page. Cookies already set by Instagram stay on its own domain: we cannot erase them for you, but you can delete them in your browser settings, under cookies and site data (instagram.com).

The site’s typefaces are served from our own server. Apart from Instagram on the home page and the schedule page, if you accept it, no request goes to Google or to any other third party while you are here: your IP address never leaves the premises.

Your rights

You have the right to access, correct, erase, restrict, object to and port your data. To exercise it, write to u.mulinu.paris@gmail.com or call 01 43 37 78 76. We reply within one month.

If our answer does not satisfy you, you can contact the French data protection authority, the CNIL, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or file a complaint at cnil.fr.

Last updated: September 2026.