Cité de la musique-Philharmonie de Paris takes the protection of personal data seriously and agrees to ensure an adequate level of protection of the personal data it processes in accordance with the regulations in force.
This Confidentiality Policy describes the commitments made to this effect to the persons whose personal data it collects and processes (hereinafter, the “User”).
Responsibility for data processing
The personal data are collected and processed by the Cité de la musique - Philharmonie de Paris.
Data protection delegate
Cité de la musique-Philharmonie de Paris has appointed a Data Protection Delegate whose contact information is as follows: (postal address) Philippe Fonteneau, data protection delegate, Cité de la musique–Philharmonie de Paris, 221 avenue Jean Jaurès 75019 Paris, France; or (email address) firstname.lastname@example.org.
The personal data processed
The personal data liable to be processed include the following:
- Personal and professional email addresses
- Title (Mrs, Ms, Mr, etc.)
- First Name
- Date of Birth
- Full home and workplace addresses
- Telephone number
- Record of orders
- Preferences, hobbies, interests
- Login and pseudonym
- Socio-professional category
Personal data that must imperatively be provided are indicated by an asterisk. If these data are not provided, Cité de la musique-Philharmonie de Paris will be unable to process the User’s request. Certain personal data are collected automatically as a result of the User’s actions on the website.
Purposes and legal grounds for data processing
Personal data are processed for the following purposes:
- Creating and managing access to the account opened by the User,
- In accordance with the User’s choices, sending newsletters, communications on programming or information and special offers from Cité de la musique-Philharmonie de Paris,
- In accordance with the User’s choices, transfer to cultural partners so that they can receive special offers,
- Customising the services offered and messages sent,
- Responding to User contact requests,
- Managing orders placed by the User and customer relations.
The legal grounds for the processing carried out is the User’s consent, with the exception of processing for the purpose of managing orders placed and customer relations necessary to fulfilling a contract to which the User is a party.
Personal data used for the purpose of managing orders are retained for as long as necessary to manage the commercial relationship, extended by the period needed to establish proof of a right or contract.
Personal data used for commercial prospecting purposes are retained for three years from the end of the commercial relationship or the last contact from the User.
Personal data relating to credit/bank cards are deleted as soon as the transaction is complete.
Personal data relating to a prospect/contact who is not a customer are retained for three years from the date they are collected or the last contact from the prospect.
Recipients of personal data
The recipients of the personal data collected are the departments of the Cité de la musique-Philharmonie de Paris tasked with processing, including the following departments:
- Public relations,
- Communication and Patronage,
- Education and digital resources,
- Museum and exhibitions,
- Culture Information Network (RIC),
within the limits of their respective roles.
The data are also submitted to service providers acting as subcontractors for Cité de la musique-Philharmonie de Paris, for the above-mentioned purposes.
Subject to the User’s consent, the data may also be transferred to third-party cultural partners, including Les Amis de la Philharmonie de Paris.
Transfer outside the UE/EEE
The User is informed that personal data pertaining to them may be transferred to a company based in Switzerland that handles the maintenance and hosting of the ticket sales system, and as such, acting as a subcontractor for Cité de la musique-Philharmonie de Paris.
The adequacy of the protection of personal data in Switzerland was recognised by European Commission decision 2000/518/EC of 26 July 2000.
The User has the right to access, correct and delete information concerning them, as well as the right to data portability and to oppose and withdraw consent they may have given, under the conditions and within the limits provided for by the regulations.
Moreover, in accordance with Article 40-1-II of the French Data Protection Act (“Loi Informatique et Liberté”), the User may submit to Cité de la musique-Philharmonie de Paris directives on the retention, deletion and disclosure of data concerning them following their death.
To exercise any of these rights, the User can contact Cité de la musique-Philharmonie de Paris by post at the postal address: Philippe Fonteneau, data protection delegate, Cité de la musique–Philharmonie de Paris, 221 avenue Jean Jaurès 75019 Paris, France or at the email address: email@example.com.
The User is informed that if they exercise a right of opposition or the right to withdraw consent they may have given before completion of the order, Cité de la musique-Philharmonie de Paris will be unable to ensure proper fulfilment of the order.
In accordance with Article L223-2 of the French Consumer Code, it is specified that the User has the right to register as being opposed to telephone solicitation, through the Bloctel service.
Finally, the User can file a claim with the supervisory authority, i.e., the French National Data Protection Commission (CNIL).
The Confidentiality Policy and any dispute that may arise from the collection or processing of personal data by the Cité de la musique-Philharmonie de Paris, are subject to French law and the jurisdiction of the Paris courts.
Changes to the Confidentiality Policy
The Confidentiality Policy may be modified at any time by the Cité de la musique-Philharmonie de Paris.