Personal data
In the context of the Website, EPMO, as data controller, may have occasion to collect and process personal data concerning you.
EPMO takes the necessary measures to ensure the protection and confidentiality of the personal data that it holds or processes in compliance with the provisions of law No. 78-17 of January 6, 1978 as amended on IT and Freedoms and of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, the General Data Protection Regulation (GDPR).
EPMO’s Data Protection Officer (DPO) is AESATIS, 79 bis Boulevard de l’Europe, 13127 Vitrolles
Collection of personal data
EPMO is likely to collect personal data concerning users of its Website in the context of:
- the sale of tickets;
- subscription to newsletters;
- updating of profile for newsletter;
- contact forms made available.
These data are collected directly from the Website’s users. Users are informed of the purposes for which their data are collected by means of the various online forms for collecting data. Mandatory data are distinguished from optional ones by an asterisk. Refusal to provide mandatory data may lead to restrictions on or exclusion from the benefits of a functionality or service.
EPMO also collects data relating to the services used, by means of cookies (browsing habits, pages visited, IP addresses, etc.). This information enables EPMO to improve the content of the Website and the user’s browsing experience.
Processing of personal data
Data collected in the context of online ticket sales
For the reservation of tickets via our online ticket office, we collect particulars of your identity, contact details, invoicing details and such other details as may be necessary to deliver your tickets or confirm the reservation.
The purposes of the processing carried out by EPMO in this context are:
- the management of your ticket purchase and the regulatory traceability;
- the delivery of your ticket;
- keeping you informed and managing your relationship with EPMO;
- sending information and invitations from EPMO and/or its cultural partners;
- carrying out satisfaction surveys;
- performing statistical studies;
- handling complaints
As regards particulars of identity, you are asked to provide your title, surname, first name, date of birth, postal address, cellphone number and email address.
The data recorded are reserved to the use of the information and ticketing department and the reservation, advance sales and marketing department of EPMO, and may be communicated to our service provider Vivaticket, subcontractor for the development and maintenance of the ticketing system. EPMO makes sure that these companies do not sell, share or rent out your data.
- The personal data thus collected will be kept for the following periods:
identification particulars are kept for three years from the last contact; - invoicing particulars are kept for ten years in accordance with the provisions of Article L123-22 of the French Commercial Code;
- data relating to payments made are kept for a maximum of 15 months in order to allow any claims or complaints to be dealt with.
Data collected in the context of your subscribing to or renewing EPMO’s Carte Blanche season ticket
The personal data requested on the registration forms are necessary in order to create and manage your subscription and the associated relationship. They allow EPMO to send newsletters by email and museum brochures by post.
In this respect the lawful basis for processing is either contractual or based on your consent as regards your subscribing to the newsletter. The data recorded are intended for the authorized departments of EPMO and may be communicated to our service provider DoList, subcontractor only for sending newsletters and brochures. They are kept for a maximum of three years from your last contact with EPMO and for ten years in the case of invoicing particulars.
Data collected in the context of subscription to newsletters
Newsletters are sent to everyone indicating a wish to receive information on EPMO’s programming and subscribing to this service, when buying a ticket or a Carte Blanche, through the dedicated subscription channel or on the occasion of online communication operations.
When you subscribe to the newsletter, you are asked to provide your email address and your main interests (exhibitions, concerts, family activities, events and performances, etc.).
The personal data are collected on the basis of your consent and are necessary to be able to send information and invitations.
They are reserved to the use of the Development and International Relations Department and the Visitor Services Department and may be communicated to their subcontracted service providers (online mailing campaign for example). EPMO makes sure that these companies do not sell, share or rent out your personal data.
The personal data collected are kept for the duration of your subscription. You can unsubscribe at any time by clicking on the unsubscribe link at the end of each newsletter.
Data collected through contact forms
The collection of these data is based on your consent and allows your request (reservations, complaint, miscellaneous questions) to be handled.
The purpose of EPMO’s processing is to manage relations with users of its Website and visitors and members of the Musée d’Orsay and the Musée de l’Orangerie.
The data recorded are reserved to the use of the EPMO division concerned by the user’s request and are kept in a form allowing identification only for as long as necessary for the purposes for which they are collected and processed.
Security of personal data
EPMO takes all technical and organizational measures to ensure the security and confidentiality of the processing of personal data.
In this respect EPMO takes all reasonable precautions in view of the nature of the data and the risks involved in their processing, in order to safeguard the security of the data and, in particular, to prevent their being altered or damaged or accessed by unauthorized third parties (physical protection of premises, authentication procedures for personal access secured by confidential usernames and passwords, logging of connections, encryption of certain data, etc.).
The hosting servers on which EPMO processes and stores the databases are situated exclusively in France.
EPMO undertakes to inform you immediately, to the extent that we are legally authorized to do so, in the event of an order from an administrative or judicial authority relating to your data.
Rights concerning personal data
In accordance with the laws on IT and Freedoms and the GDPR, you have the rights of access to and rectification, limitation, portability and erasure of your data. You can thus require the information concerning you to be rectified, completed, clarified, updated or erased.
You also have the right to object at any time to your data being used for purposes of sales prospecting. Lastly, you can lay down in advance instructions as to what is to happen to your personal data in the event of your death.
To exercise these rights or for any questions about the processing of your data, you can contact EPMO’s Data Protection Officer:
- By email: dpo@musee-orsay.fr
- By post: Établissement public des musées d'Orsay et de l'Orangerie - Valéry Giscard d'Estaing, service des affaires juridiques, Esplanade Valéry Giscard d'Estaing 75007 Paris
If you ask to exercise your rights, EPMO may ask you for a photocopy of an identity document with your signature.
You have the possibility of filing a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL, the French Data Protection Authority), the supervisory authority in charge of compliance with the obligations regarding the protection of personal data.
Cookies
When you visit the Website, cookies may be placed in your browser or on your device (PC, tablet, smartphone). EPMO, some of its partners and other third parties use cookies on the Website to analyze traffic on the Website, to remember users’ preferences and settings and in general to understand the online behavior and the interests of the people who interact with the Website.
Cookies are tiny files in alphanumeric format which are stored in your browser or your device by the server of the site visited or by a third-party server (audience measurement service for example). Cookies allow status information on when a user accesses different pages of a website or when the user subsequently returns to this website to be kept for as long as the validity of the cookie lasts. They contain several items of information such as the domain name, the ISP, the operating system and its IP address, as well as the date and time of access. The cookies used on the Website, their purposes and how long they are kept, are detailed hereunder.
As soon as you access the Website, you have the choice of accepting all cookies, refusing them or parameterizing them (deciding one by one which ones to accept or reject) using our preference management module which can be found in the section marked “Personalize” on the information banner relating to our use of cookies.
This parametrization is also available at any time by clicking on the link marked “Cookies management” at the bottom of each page of the Website.
Technical cookies
These cookies are necessary for the proper functioning of the Website and cannot be disabled in our systems. You can however object to them and dispense with them using your browser settings, but your user experience is likely to deteriorate as a result.
Name of the cookie |
Type |
Purpose |
Time kept |
tarteaucitron |
Management of privacy |
Saves your choices as regards consent to cookies |
6 months maximum |
These cookies do not store any personal identification information.
The Website uses the Google Tag Manager solution. This solution allows us to manage the cookies and scripts necessary for the proper functioning of AT Internet (web analytics services), YouTube and Google’s ad personalization tool. This solution does not place a cookie.
Audience measurement cookies
Cookies published by our service provider AT Internet
These cookies allow us to measure exclusively the number of visits, the number of pages viewed, visitors’ activity on the site and how often they return to our Website.
These cookies are exempt from consent in that they are strictly necessary for the functioning of the Website (deliberation No. 2020-091 of the CNIL, the French Data Protection Agency).
You can object to the processing of your personal browsing data hereunder:
Audience measurement cookies exempt from consent:
[[[[INCLUDE THE OPT-OUT CODE]]]]]
If you disable these cookies, you will be recorded as a user refusing to be audited and your browsing data will be excluded from the data reported by our service provider AT Internet.
If you reactivate this cookie, a new AT Internet cookie will be placed to allow the collection of audience measurement data on the Website.
The data exempt from consent are:
- Type of operating system used by your device (Microsoft Windows, Apple Os, Linux, Unix, BeOS, Android, iOS, etc.),
- Type and version of the browser used by your device (Microsoft Internet Explorer, Apple Safari, Mozilla Firefox, Google Chrome, etc.),
- Dates and times of connection to our services,
- Geolocation of the visitor
- Address of the last website visited before ours (“referrer”),
- Browsing data (pages, browsing events, entry pages)
- In-house research
- Status of respect for privacy
The data requiring your consent are:
- Statistics on viewing of videos (subject to your having accepted the use of the YouTube cookie)
- Statistics on marketing campaigns
- Statistics on in-site purchase
You can consult AT Internet’s privacy policy
Cookies placed by AT Internet
Name of the cookie |
Type |
Purpose |
Time kept |
atidvisitor |
Audience measurement |
List of numsites encountered by the visitor and storage of identified visitor information. |
25 months maximum |
atuserid |
Tracking |
Visitor ID for client-side cookie sites |
25 months maximum |
atauthority |
Audience measurement |
Stores the visitor’s privacy mode in the memory. |
25 months maximum |
atsession |
Audience measurement |
List of new campaigns encountered during a visit, so as to avoid counting the same campaign more than once |
30 minutes |
Third-party cookies
These cookies are intended to improve the interactivity of our Website.
Cookies placed by YouTube
The cookies placed by the YouTube video player allow you to view the multimedia content directly on the Website.
Via these cookies, the YouTube video player will also collect and use your browsing data on its own behalf in order to offer targeted advertising and content based on your browsing history. For more information, please consult Google’s privacy policy.
These cookies are placed only after your consent has been obtained. You can consent to this tracer’s being placed in the “Cookies management” window at the foot of each page of the Website.
Name of the cookie |
Placed by |
Purpose |
Time kept |
VISITOR_INFO1_LIVE |
Functioning |
Tries to estimate the users’ bandwidth on pages with integrated YouTube videos. |
179 days |
YSC |
Audience measurement |
Registers a unique ID to keep statistics of what videos from YouTube the user has seen. |
Session |
yt-player-headers-readable |
Functioning |
Used to determine the optimal video quality based on the visitor's device and network settings. |
Persistent |
yt-remote-cast-installed |
Functioning |
Stores the user’s video player preferences using embedded YouTube video |
Session |
yt-remote-connected-devices |
Functioning |
Stores the user’s video player preferences using embedded YouTube video |
Persistent |
yt-remote-device-id |
Functioning |
Stores the user’s video player preferences using embedded YouTube video |
Persistent |
yt-remote-fast-check-period |
Functioning |
Stores the user’s video player preferences using embedded YouTube video |
Session |
yt-remote-session-app |
Functioning |
Stores the user’s video player preferences using embedded YouTube video |
Session |
yt-remote-session-name |
Functioning |
Stores the user’s video player preferences using embedded YouTube video |
Session |
Google ad personalization cookie
Based on information collected by this cookie, visitors are likely to be shown, on other websites, ads relating to things in which they have shown interest on the EPMO Website.
For more information, please consult Google’s privacy policy.
Name of the cookie |
Placed by |
Purpose |
Time kept |
|
|
|
13 months |