Privacy policy

© Musée d'Orsay / Sophie Crépy

The purpose of this policy is to inform users of the Musée d’Orsay website https://www.musee-orsay.fr (hereinafter the “Website”) of the measures adopted and the commitments made by the Établissement public des musées d'Orsay et de l'Orangerie - Valéry Giscard d'Estaing (hereinafter “EPMO”) regarding the confidentiality of the personal data of users of the Website and of the cookies policy put in place by EPMO.

EPMO reserves the right to update or amend this policy in line with legislative and regulatory changes.

 

Personal data

In the context of the Website, EPMO, as data controller, may have occasion to collect and process personal data concerning you.

 

EPMO takes the necessary measures to ensure the protection and confidentiality of the personal data that it holds or processes in compliance with the provisions of law No. 78-17 of January 6, 1978 as amended on IT and Freedoms and of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, the General Data Protection Regulation (GDPR).

 

EPMO’s Data Protection Officer (DPO) is AESATIS, 79 bis Boulevard de l’Europe, 13127 Vitrolles

 

Collection of personal data

EPMO is likely to collect personal data concerning users of its Website in the context of:

 

These data are collected directly from the Website’s users. Users are informed of the purposes for which their data are collected by means of the various online forms for collecting data. Mandatory data are distinguished from optional ones by an asterisk. Refusal to provide mandatory data may lead to restrictions on or exclusion from the benefits of a functionality or service.

 

EPMO also collects data relating to the services used, by means of cookies (browsing habits, pages visited, IP addresses, etc.). This information enables EPMO to improve the content of the Website and the user’s browsing experience.

 

Processing of personal data

Data collected in the context of online ticket sales 

For the reservation of tickets via our online ticket office, we collect particulars of your identity, contact details, invoicing details and such other details as may be necessary to deliver your tickets or confirm the reservation.

 

The purposes of the processing carried out by EPMO in this context are:

  • the management of your ticket purchase and the regulatory traceability;
  • the delivery of your ticket;
  • keeping you informed and managing your relationship with EPMO;
  • sending information and invitations from EPMO and/or its cultural partners;
  • carrying out satisfaction surveys;
  • performing statistical studies;
  • handling complaints
      

As regards particulars of identity, you are asked to provide your title, surname, first name, date of birth, postal address, cellphone number and email address.

 

The data recorded are reserved to the use of the information and ticketing department and the reservation, advance sales and marketing department of EPMO, and may be communicated to our service provider Vivaticket, subcontractor for the development and maintenance of the ticketing system. EPMO makes sure that these companies do not sell, share or rent out your data.

 

  • The personal data thus collected will be kept for the following periods:
    identification particulars are kept for three years from the last contact;
  • invoicing particulars are kept for ten years in accordance with the provisions of Article L123-22 of the French Commercial Code;
  • data relating to payments made are kept for a maximum of 15 months in order to allow any claims or complaints to be dealt with.

 

Data collected in the context of your subscribing to or renewing EPMO’s Carte Blanche season ticket

The personal data requested on the registration forms are necessary in order to create and manage your subscription and the associated relationship. They allow EPMO to send newsletters by email and museum brochures by post. 

 

In this respect the lawful basis for processing is either contractual or based on your consent as regards your subscribing to the newsletter. The data recorded are intended for the authorized departments of EPMO and may be communicated to our service provider DoList, subcontractor only for sending newsletters and brochures. They are kept for a maximum of three years from your last contact with EPMO and for ten years in the case of invoicing particulars.

 

Data collected in the context of subscription to newsletters

Newsletters are sent to everyone indicating a wish to receive information on EPMO’s programming and subscribing to this service, when buying a ticket or a Carte Blanche, through the dedicated subscription channel or on the occasion of online communication operations.

 

When you subscribe to the newsletter, you are asked to provide your email address and your main interests (exhibitions, concerts, family activities, events and performances, etc.).

 

The personal data are collected on the basis of your consent and are necessary to be able to send information and invitations.

 

They are reserved to the use of the Development and International Relations Department and the Visitor Services Department and may be communicated to their subcontracted service providers (online mailing campaign for example). EPMO makes sure that these companies do not sell, share or rent out your personal data.

 

The personal data collected are kept for the duration of your subscription. You can unsubscribe at any time by clicking on the unsubscribe link at the end of each newsletter. 

 

Data collected through contact forms

The collection of these data is based on your consent and allows your request (reservations, complaint, miscellaneous questions) to be handled.

 

The purpose of EPMO’s processing is to manage relations with users of its Website and visitors and members of the Musée d’Orsay and the Musée de l’Orangerie.

 

The data recorded are reserved to the use of the EPMO division concerned by the user’s request and are kept in a form allowing identification only for as long as necessary for the purposes for which they are collected and processed.

 

 

Security of personal data

EPMO takes all technical and organizational measures to ensure the security and confidentiality of the processing of personal data.

 

In this respect EPMO takes all reasonable precautions in view of the nature of the data and the risks involved in their processing, in order to safeguard the security of the data and, in particular, to prevent their being altered or damaged or accessed by unauthorized third parties (physical protection of premises, authentication procedures for personal access secured by confidential usernames and passwords, logging of connections, encryption of certain data, etc.).

 

The hosting servers on which EPMO processes and stores the databases are situated exclusively in France.

 

EPMO undertakes to inform you immediately, to the extent that we are legally authorized to do so, in the event of an order from an administrative or judicial authority relating to your data.

 

Rights concerning personal data

In accordance with the laws on IT and Freedoms and the GDPR, you have the rights of access to and rectification, limitation, portability and erasure of your data. You can thus require the information concerning you to be rectified, completed, clarified, updated or erased.

 

You also have the right to object at any time to your data being used for purposes of sales prospecting. Lastly, you can lay down in advance instructions as to what is to happen to your personal data in the event of your death.

 

To exercise these rights or for any questions about the processing of your data, you can contact EPMO’s Data Protection Officer:

  • By email: dpo@musee-orsay.fr
  • By post: Établissement public des musées d'Orsay et de l'Orangerie - Valéry Giscard d'Estaing, service des affaires juridiques, Esplanade Valéry Giscard d'Estaing 75007 Paris

If you ask to exercise your rights, EPMO may ask you for a photocopy of an identity document with your signature.

 

You have the possibility of filing a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL, the French Data Protection Authority), the supervisory authority in charge of compliance with the obligations regarding the protection of personal data.

 

Cookies

When you visit the Website, cookies may be placed in your browser or on your device (PC, tablet, smartphone). EPMO, some of its partners and other third parties use cookies on the Website to analyze traffic on the Website, to remember users’ preferences and settings and in general to understand the online behavior and the interests of the people who interact with the Website. 

 

Cookies are tiny files in alphanumeric format which are stored in your browser or your device by the server of the site visited or by a third-party server (audience measurement service for example). Cookies allow status information on when a user accesses different pages of a website or when the user subsequently returns to this website to be kept for as long as the validity of the cookie lasts. They contain several items of information such as the domain name, the ISP, the operating system and its IP address, as well as the date and time of access. The cookies used on the Website, their purposes and how long they are kept, are detailed hereunder.

 

As soon as you access the Website, you have the choice of accepting all cookies, refusing them or parameterizing them (deciding one by one which ones to accept or reject) using our preference management module which can be found in the section marked “Personalize” on the information banner relating to our use of cookies.

 

This parametrization is also available at any time by clicking on the link marked “Cookies management” at the bottom of each page of the Website.

 

Technical cookies

These cookies are necessary for the proper functioning of the Website and cannot be disabled in our systems. You can however object to them and dispense with them using your browser settings, but your user experience is likely to deteriorate as a result.

Name of the cookie

Type

Purpose

Time kept

tarteaucitron

Management of privacy

Saves your choices as regards consent to cookies

6 months maximum

These cookies do not store any personal identification information.

 

The Website uses the Google Tag Manager solution. This solution allows us to manage the cookies and scripts necessary for the proper functioning of AT Internet (web analytics services), YouTube and Google’s ad personalization tool. This solution does not place a cookie.

 

Audience measurement cookies

Cookies published by our service provider AT Internet

These cookies allow us to measure exclusively the number of visits, the number of pages viewed, visitors’ activity on the site and how often they return to our Website.

 

These cookies are exempt from consent in that they are strictly necessary for the functioning of the Website (deliberation No. 2020-091 of the CNIL, the French Data Protection Agency).


You can object to the processing of your personal browsing data by unchecking this box :

If you disable these cookies, you will be recorded as a user refusing to be audited and your browsing data will be excluded from the data reported by our service provider AT Internet.

If you reactivate this cookie, a new AT Internet cookie will be placed to allow the collection of audience measurement data on the Website.


The data exempt from consent are:

  • Type of operating system used by your device (Microsoft Windows, Apple Os, Linux, Unix, BeOS, Android, iOS, etc.),
  • Type and version of the browser used by your device (Microsoft Internet Explorer, Apple Safari, Mozilla Firefox, Google Chrome, etc.),
  • Dates and times of connection to our services,
  • Geolocation of the visitor
  • Address of the last website visited before ours (“referrer”),
  • Browsing data (pages, browsing events, entry pages)
  • In-house research
  • Status of respect for privacy

The data requiring your consent are:

  • Statistics on viewing of videos (subject to your having accepted the use of the YouTube cookie)
  • Statistics on marketing campaigns
  • Statistics on in-site purchase

You can consult AT Internet’s privacy policy

Cookies placed by AT Internet

Name of the cookie

Type

Purpose

Time kept

atidvisitor

Audience measurement

List of numsites encountered by the visitor and storage of identified visitor information.

25 months maximum

atuserid

Tracking

Visitor ID for client-side cookie sites

25 months maximum

atauthority

Audience measurement

Stores the visitor’s privacy mode in the memory.

25 months maximum

atsession

Audience measurement

List of new campaigns encountered during a visit, so as to avoid counting the same campaign more than once

30 minutes

 

Third-party cookies

These cookies are intended to improve the interactivity of our Website.

Cookies placed by YouTube

The cookies placed by the YouTube video player allow you to view the multimedia content directly on the Website.

Via these cookies, the YouTube video player will also collect and use your browsing data on its own behalf in order to offer targeted advertising and content based on your browsing history. For more information, please consult Google’s privacy policy.

These cookies are placed only after your consent has been obtained. You can consent to this tracer’s being placed in the “Cookies management” window at the foot of each page of the Website.  

Name of the cookie

Placed by

Purpose

Time kept

VISITOR_INFO1_LIVE

Functioning

Tries to estimate the users’ bandwidth on pages with integrated YouTube videos.

179 days

YSC

Audience measurement

Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Session

yt-player-headers-readable

Functioning

Used to determine the optimal video quality based on the visitor's device and network settings.

Persistent

yt-remote-cast-installed

Functioning

Stores the user’s video player preferences using embedded YouTube video

Session

yt-remote-connected-devices

Functioning

Stores the user’s video player preferences using embedded YouTube video

Persistent

yt-remote-device-id

Functioning

Stores the user’s video player preferences using embedded YouTube video

Persistent

yt-remote-fast-check-period

Functioning

Stores the user’s video player preferences using embedded YouTube video

Session

yt-remote-session-app

Functioning

Stores the user’s video player preferences using embedded YouTube video

Session

yt-remote-session-name

Functioning

Stores the user’s video player preferences using embedded YouTube video

Session

Google ad personalization cookie

Based on information collected by this cookie, visitors are likely to be shown, on other websites, ads relating to things in which they have shown interest on the EPMO Website.

For more information, please consult Google’s privacy policy.

Name of the cookie

Placed by

Purpose

Time kept

 

 Google

 

 13 months