Privacy policy

> Data Protection Policy


The Meeting of National Museums - Grand Palais builds with its visitors and customers strong and lasting relationships, based on mutual trust. That is why guaranteeing the security and confidentiality of the personal data that you communicate to us is a strong issue for us.


We apply a strict policy of managing your personal data that complies with the Data Protection Act of January 6, 1978 (hereafter "IEL Law") and the General Data Protection (EU) Regulation of April 27, 2016 (hereinafter "RGPD") and is based on the following principles:


1. You remain in control of your data

2. Your data is treated in a clear, confidential and secure manner

3. We are committed to a continuous process of protecting your data

4. Providers involved in the processing of your data all meet our level of requirement in the management of personal data


This privacy policy outlines our commitments regarding Your personal data that We collect in connection with our activity of promotion and sale of derivative products: by filling a subscription form online or in shop, by consulting our site Boutiquedemusées (hereinafter "the Site" and / or by purchasing a product online or in Shop, participating in a game / contest or when You contact our customer service.


This policy is intended to inform you about:

- The data we collect;

- The reasons why We need it;

- The way We process your personal data;

- The rights you have in this matter and how to exercise them.


It is likely to be modified at any time to take into account any regulatory, editorial or technical changes. In this case, We will notify You by additional notifications (statement on the homepage of Our Site or by sending you an e-mail). We invite you to regularly review our Data Protection Policy for the latest version.

> Who is responsible for processing your data?


The Public Establishment of the Réunion des Musées Nationaux and the Grand Palais des Champs-Elysees


Registered office: 254/256 rue de Bercy - 75570 Paris cedex 12 - France


RCS Paris B 692 041 585

> What personal data do we collect?


Personal data is information relating to an identifiable natural person directly or indirectly.


In the course of our activities, we may collect the following personal data: Surname, first name, civility, date of birth, postal address, e-mail address, telephone number (mobile or landline), username and password encrypted used to identify you and allow you to access your account or personal space, order data (order number and order history), encrypted information about your means of payment (eg credit card numbers, data of connection and navigation data.

This is the personal data that:

- You provide us voluntarily to benefit from a service


This is particularly the case when you create a customer account, You make an online order, You subscribe to the Museum Shop Club (online or in Shop), You subscribe to our newsletter, You wish to be informed of the availability of an article, You contact our customer service or You participate in a contest.


Some information is essential to benefit from the service concerned (indicated by an asterisk). If We do not communicate them, We will not be able to make You benefit from this service.


Our products and services are exclusively for adults who are able to subscribe to contractual obligations.


Attention - When You give us the data of a third party in order to make it benefit from a service (eg gift option during an online purchase), You must Make sure that the person concerned agrees that his personal data (name , first name and postal address) are communicated to us.


- We collect on the occasion of our relationship with You:

* The history of your purchases

* Transactions (billing and payment),

* Requests made to our customer service (delivery incidents, product returns, information on the availability of an item, etc.)

* General statistics from anonymised data


- We collect automatically when you access the Site:

* Your login details (eg type of internet browser used, operating system used, domain name of your internet service provider). This information does not make it possible to establish a link with You and We are necessary to provide You technically with the desired information on our Site.

* Your browsing data by means of cookies, tags, tags and any other appropriate technical means.

Cookies are computer files that are automatically deposited on the hard drive of your computer, tablet or mobile when You browse our Site. They are managed by your internet browser (Internet Explorer, Firefox, Safari or Google Chrome).

- On our Site, we use different types of cookies:

* Cookies necessary for the operation of the site: They allow you to use the main features of our site. Without these cookies, You will not be able to use our Site normally. It is for example:


- Cookies that allow you to access reserved and personal areas of our Site through identifiers

- Cookies that allow certain data to be communicated from page to page for an improved experience (eg: once connected to "my account", you can leave this space and return to it without having to log in);


* Analytical cookies or cookies measuring audience of the Site that allow us to know the use and audience performance of our site and improve the functioning for our visitors; for example, to establish statistics and volumes of use and use of the various elements composing our Site (headings and contents visited, routes), in order to improve the interest and the ergonomics of our Site;


* So-called advertising cookies that allow Us to choose in real time which advertising to display on third-party sites according to the articles you have consulted on our Site.


- We collect from social networks:


* You can log in to your customer account and / or personal space with your Facebook / Twitter / Instagram / Pinterest accounts. When You connect to our Site with these third party accounts, We may access certain information that You have transmitted to such social networks. We invite you to manage your privacy settings on these social networks before logging into your account or personal space via the social connect function

* You can also join our Facebook page from our Site and to follow our news. The data that We are likely to collect in this context are anonymous and processed for purely statistical purposes (in particular to track the number of subscribers who follow this page.


We are not responsible for the treatment of your personal data by Facebook and social networks. We invite you to visit their privacy page to know your rights to each of them.

> Why We collect your personal data?


The collection and processing of your personal data is only possible for a specific purpose that You are aware of at the time of collection and from which You derive an identified and tangible benefit.

We are committed to Your data being collected to fulfill the following purposes:


1. Execution and follow-up of a contract We have with you:


* Customer Account Management

* Order management: deliveries, order tracking and after-sales service

* Management of your online personal space and your benefits resulting from your membership in the Museum Shop Club,

* Management of the requests carried out with our customer service (ex: return of products, incidents of delivery, request for information on the availability of an article etc ..)

* Managing your participation in a quiz


In this context, we may have to send you service e-mails. For example, you can receive:


* For the management of accounts and personal spaces: an account creation confirmation message or personal space

* For the management of an order, an e-mail of confirmation of order, information on the delivery of parcels or a message of taking into account of a claim or confirming the refund of your order

* Information necessary to the execution and the good management of your membership of the Museum Shop Club (number of points appearing on your loyalty account, privilege party reserved for members)

* An alert on the availability of an item

* An alert to inform you that you are part of the list of winners of the game / contest


The collection and use of your data for this purpose does not require the collection of your consent.


And or

2. Compliance with our legal obligations or to assert our rights (data collected and kept as evidence)


* Reminder of an article (product safety)

* Control of competent authorities

* Management of unpaid bills and litigation


The collection of this data does not require the collection of your consent.

And or

3. Sending personalized communications


Personalized communications are sent to you only if You have clearly given your consent.


We are thus brought to send you: the museum shop newsletter and information in case of abandoned shopping cart.


Your consent is collected in a clear and unambiguous manner via a check box (opt-in system).


To ensure that the registration has been completed by the holder of the e-mail address, we have, resort to the procedure of the "double opt-in" which consists of sending you an e-mail confirming your registration to the newsletter. Only if you confirm with us will you receive our Newsletter.


We measure the opening rate of our Newsletter and limit our mailings according to your general profile (age and place of residence) in order to adapt them to your needs.


You may withdraw your consent at any time by clicking on the unsubscribe link in the communication or by sending us an e-mail to that effect. (See: "How to exercise your rights").

4. The realization of statistics.


The statistics are made on anonymous data and allow us to improve the knowledge of our activities and to carry out market research

> The specific case of minors


In principle, our products and services are aimed at adults who are able to subscribe to contractual obligations.


By exception, for registration to our newsletter, the age of 16 is accepted. A visitor aged between 16 and 17 at the time of their subscription to the museum shop newsletter has a specific right to erase their data. For any information, please contact our customer service.

> Who has access to your personal data?


Your personal data are intended only for the Meeting of the National Museums-Grand Palais and are accessible only by our employees authorized to manage them, according to the purposes of the collection (commercial, administrative services, services in charge of the control, marketing services).


As an exception, they can be sent to:


- Our service providers to ensure the effectiveness of the services subscribed and / or the execution of orders made on the Site. The terms of access and the scope of intervention of Our Providers are then strictly governed by a contract with the Meeting of National Museums Grand Palais.

- Third parties in the context of the respect of a legal obligation or in order to guarantee our rights (authorities and courts, lawyers, tax inspector etc.)

- Social networks


Your personal data are never transmitted to commercial or advertising actors.

> Where are your data stored? How are they protected?


Your personal data is stored in servers located in the European Union, either internally on our secure servers or externally by a duly selected provider.


Your personal data is protected :


- As a data controller, We implement the necessary security and privacy procedures to prevent any risk of fraudulent access, theft or accidental loss or loss of your data

- When a service provider intervenes in the processing of personal data, we attach paramount importance to the technical and organizational measures that he undertakes to take to preserve the security and confidentiality of the data. Thus, We reserve the right to conduct audits with our service providers.

> How long and how do we keep Your data?


The retention periods of your data are defined by us in light of the legal and contractual constraints that weigh on us. These deadlines are set according to the aims pursued. After these deadlines, the data are either deleted or preserved after being anonymized.


Customer Account and Personal Space Data

The data collected during the creation of the customer account or personal space are kept in current archive (that is commonly accessible by our services) as long as You are active on the customer account or personal space on the Site (as the case may be). In case of inactivity of the account or the space, your data is deleted.


Data relating to the commercial relationship

The data are kept in current archive during the period of the commercial relation (exercise of the legal guarantees included) then archived with a restricted access and preserved during the additional duration necessary to respect our legal obligations or for the purposes of defending or asserting our rights. At the end of this period, your personal data are anonymised or deleted.


Data collected as part of our newsletters

These data are kept in current archive for 3 years from the subscription to the newsletter or the last contact of your part. After this period, we delete them unless you have clearly and expressly wished to re-register.


Data collected via audience and advertising cookies

These data are kept for a maximum of 13 months from their deposit. After this time, they are deleted.

> What are your rights? How to exercise them?


Right of information

You have the right to be informed about why We collect Your data, how We treat it, what rights you have and how to exercise it.

We hope that this data protection policy will answer your questions. However, if you have any questions, you can contact us at: boutiquesdemusees@rmngp.fr


Permission to access

You have the right to ask us if We hold You data and request a copy in an understandable format. This right allows you to control the accuracy of the data and, if necessary, to have it corrected or deleted, or to have your data erased.


Right of rectification

You have the ability to rectify / update or directly complete your online data on your customer account and personal space.

You also have the right to ask us to rectify / update or supplement your personal data.


Right to withdrawal of consent

You have the right at any time to withdraw your consent to receive our commercial solicitations and / or for the placement of analytical and advertising cookies.


Right of opposition

You have the right, for legitimate reasons, to object to your data being disseminated, transmitted or stored. The right of opposition allows you to oppose that we use your data for a specific purpose subject to highlighting reasons related to your particular situation.


Right to erase your data

You have the right at any time to obtain the erasure of your personal data in the following cases:


* The data are not or no longer necessary for the purposes for which we initially collected or processed them;

* You have withdrawn your consent to the use of your data;

* Your data must be erased to meet a legal obligation.

We may refuse to delete your data when necessary:

* To respect our legal obligations,

* At the finding, exercise or defense of rights in court,

* For scientific or historical research purposes or for statistical purposes for their use in the public interest.


Right to portability

You have the right to obtain a copy of the data that you have submitted to us under a contract or that we have collected with your consent in a structured, commonly used and machine readable format. This format may be sent to you or sent to another party at your request.

The right to portability concerns, for example, information that you have declared (eg contact details) but also data drawn from your activity (eg purchase history).


Right to communicate post-mortem directives

You may at any time make instructions regarding the storage, deletion and communication of your personal data after your death.

For more information on your rights: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles

> How to exercise your rights?


You can exercise all of your rights:


- By e-mail: boutiquesdemusees@rmngp.fr

- By mail: Public Establishment of the Réunion des Musées Nationaux and the Grand Palais des Champs-Elysees - E-Commerce Department, office 715 - 254/256 rue de Bercy - 75570 Paris cedex 12 - France


For the withdrawal of your consent for our commercial solicitations and for the placement of analytical and advertising cookies, We invite You to:

- Click on the unsubscribe link at the bottom of the newsletter.

- Set the internet browser of your computer, tablet or mobile phone - (See section How to accept or refuse cookies?)


In order to allow us to understand your request and answer it quickly, we thank you to specify us in your request:

- The right you wish to exercise and if applicable the reasons for your request (ex: deletion of the customer account / personal space, updating of your data)

- Your first and last names, e-mail and your postal address (if you want a return by mail)


The rights you enjoy are rights of an individual nature and can only be exercised by the data owner. To fulfill this obligation, we ask you for the exercise of your rights, to communicate to us a copy of a valid identity document bearing your name, first name and signature. The copy of your identity document will of course be deleted by our services as soon as the identity verification has been carried out.

We will endeavor to comply with your request within a reasonable time and in any event comply with the law.


Complaint with the CNIL

If you consider that your rights are not respected or that the protection of your personal data is not ensured in accordance with the applicable regulations, You can file a complaint with the National Commission for Data Protection and Freedoms. : https://www.cnil.fr/fr/cnil-direct/question/844

> The specific case of cookies: acceptance and management of cookies


The cookies deposited:


To help you better understand the cookies posted by our Site on your computer / tablet, please refer to the table below:



How to set cookies?


What choices do you have in terms of managing cookies?

You have the choice to configure your browser to accept or reject all cookies, delete cookies periodically or to see when a cookie is issued, its validity, and its content, and refuse registration on your hard drive.


How to accept or refuse cookies?

You may at any time choose to block or disable these cookies by setting the web browser of your computer, tablet or mobile, in accordance with the instructions set by your internet browser provider and appearing on the websites mentioned below.


On Internet explorer

Open the "Tools" menu, then select "Internet Options"; click on the tab "Confidentiality" then the tab "Advanced" choose the desired level or follow the following link:

http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies


On Mozilla Firefox

Open the "Tools" menu, then select "Options"; click on the "Privacy" tab then choose the desired options or follow this link:

http://support.mozilla.org/fr/kb/activer-desactiver-cookies


Safari

Choose "Safari> Preferences" and then click "Security"; In the "Accept cookies" section choose the desired options or follow this link:

http://support.apple.com/kb/index?page=search&fac=all&q=cookies%20safari


On Google Chrome

Open the setup menu (wrench logo) and select "Options"; click on "Advanced Options" then in the "Privacy" section, click on "Content Settings", and choose the desired options or follow the link below:

https://support.google.com/chrome/answer/95647?hl=fr



On iOs

http://support.apple.com/kb/HT1677?viewlocale=fr_FR

You can also type "cookies" in the "help" section of your browser to access the setting instructions.


For more information, you can also consult the CNIL website:

https://www.cnil.fr/cnil-direct/question/198>