Personal data collection
EPMO-VGE may collect personal data concerning the users of its Website in the context of:
Such data are collected directly from Website users. Users are informed of the purposes for which their data are collected using the various data collection forms online. The mandatory or optional nature of the data is indicated by an asterisk at the time of collection. Refusal to provide mandatory data may result in the prohibition from benefitting from or the restriction of a feature or service.
Furthermore, EPMO-VGE collects data relating to the services used via cookies (browsing data, pages viewed, IP addresses, etc.). Such information enables EPMO-VGE to improve the content of the Website and the user’s browsing experience.
Data collected in the context of an online group reservation
For the reservation of group tickets on our Website, EPMO-VGE collects data relating to the reserving person’s identity, their contact details and billing data, and the data required to confirm the reservation option, the final reservation, to issue the ticket and forward the relevant invoice.
The purposes of the processing carried out by EPMO-VGE in this context are:
- management of reservations and regulatory traceability;
- the issuance of the ticket;
- information and the management of relations between the reserving person and EPMO-VGE;
- where applicable, the sending of information and requests from EPMO-VGE and/or its cultural partners;
- the conducting of satisfaction surveys;
- the conducting of statistical studies;
- the management of complaints.
As regards identity data, the reserving person is asked to provide their title, surname, first name, cell phone number, professional phone number and email address.
The data recorded are stored for use by EPMO-VGE’s sales administration department, professional group reservation sales department, information department, ticketing and cloakroom department, and marketing department, and may be disclosed to its service provider, Ingenie, as its subcontractor for ticketing system development and maintenance. EPMO-VGE ensures that none of its subcontractors sell, share or lease the data of reserving persons.
Personal data thus collected are stored for the following periods:
- identification data is stored for 3 years as from the date of last contact;
- billing data is stored for 10 years, in compliance with the prescriptions of Article L123-22 of the French Commercial Code;
- data relating to payments made is stored for a maximum period of 15 months to allow for the management of any complaints.
Collected data are not the subject of any cross-border transfers outside of the European Union.
Data collected in the context of newsletter subscriptions
The purpose of the processing is to manage the sending of EPMO-VGE newsletters.
The personal data collected is the email address of the Website user. This collection is required in order to send newsletters.
Newsletters are sent to any person having indicated their desire to receive information on EPMO-VGE programming and having subscribed to this service either upon creating an account, purchasing a ticket or during online communication campaigns.
EPMO-VGE stores users’ email addresses for a period of 3 years as from the date of last active contact (active meaning a “click”).
The Website user may unsubscribe at any time using the subscription link embedded in the newsletters. In this case, the relevant data will automatically be erased.
Collected data are not the subject of any cross-border transfers outside of the European Union.
Data collected via contact forms
The collection of such data is based on the consent of the Website user and enables the processing of his/her request (reservations, complaints and miscellaneous questions).
The purpose of the processing carried out by EPMO-VGE is the management of relations with the users of its Website and the visitors and members of the Musée d’Orsay and the Musée de l’Orangerie.
The data recorded are reserved for use by the EPMO-VGE’s departments (Digital Department, Audience Department, Development and International Relations Department) concerned by the user’s request and are stored in a format enabling their identification only for a period of 3 years as from the last exchange between the user of the Website and EPMO-VGE.
Collected data are not the subject of any cross-border transfers outside of the European Union.
Personal data security
EPMO-VGE implements all technical and organizational measures appropriate to the level of sensitivity of the personal data, with a view to ensuring the integrity, security and confidentiality of personal data processing.
In this respect, EPMO-VGE takes all useful precautions, with regard to the nature of the data and the risks of the processing, to preserve the security of the data and, in particular, prevent their alteration and damage, or access by non-authorized third parties (physical protection of the premises, authentication processes with personal and secure access using logins and confidential passwords, connection logging, encryption of certain data, etc.).
The hosting servers on which EPMO-VGE processes and stores the databases are exclusively located on national soil.
EPMO-VGE chooses its processors and service providers with care and requires that they:
- provide a level of personal data protection equivalent to its own;
- use personal data only for the management of services they must provide;
- strictly comply with applicable legislation and regulations on confidentiality, banking secrecy and personal data;
- implement all appropriate measures to ensure the protection of the personal data they may be required to process;
- define the technical and organizational measures required to ensure security.
EPMO-VGE undertakes to immediately inform the users of the Website, insofar as it is legally authorized, in the event of any request made by an administrative or judicial authority relating to the personal data of the users of the Website.
Rights relating to personal data
Pursuant to the French Data Protection Act and the General Data Protection Regulation, the user of the Website has a right of access, rectification, restriction, portability and erasure over his/her data. The user of the Website may therefore require that any information relating to him/her be rectified, completed, clarified, updated or erased.
The user of the Website also has the right to object, at any time, to the use of his/her data for the purpose of commercial prospection. Lastly, he/she may define advance directives relating to the processing of his/her personal data after death.
To exercise these rights, or for any questions regarding data processing, the user of the Website can contact EPMO-VGE’s Data Protection Officer:
By email at:
dpo@musee-orsay.fr
By post to: Établissement public des musées d'Orsay et de l'Orangerie - Valéry Giscard d'Estaing, service des affaires juridiques, Esplanade Valéry Giscard d'Estaing 75007 Paris
During the exercise of his/her rights, EPMO-VGE may ask for a photocopy of proof of ID bearing the user of the Website’s signature. The user of the Website is entitled to lodge a claim with the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority in charge of ensuring compliance with personal data protection requirements.
