Personal data protection policy
Who is responsible for data processing?
Whether your data is collected through our online or in-person ticketing service, or during your browsing on our websites www.comedie-francaise.com and billetterie.comedie-francaise.fr (hereinafter the "website"), the data controller is the Comédie-Française, an Établissement Public à caractère Industriel et Commercial (EPIC) whose registered office is located at 1 Place Colette, Paris 1st arrondissement.
What personal data do we process?
We collect and process the following personal data:
• identification data (e.g. surname, first name, date of birth, email address, postal address, telephone number)
• connection data (e.g. IP address, connection logs)
• billing data (e.g. payment methods and history, transaction data, invoices)
• commercial data (e.g. order history, offers you benefit from, exchanges with customer services, data required for loyalty schemes, prospecting, satisfaction surveys, statistics and promotional activities, promotional operations
Where your personal data is collected via a form, mandatory fields will be indicated by an asterisk (*) next to the relevant fields. The absence of an asterisk means that the information requested is not mandatory. Only personal data that is strictly necessary for the purposes described below is collected.
On what legal bases is your personal data processed?
Your personal data is collected and processed on the following legal bases: in the context of the performance of a contract;
• in the context of the performance of a contract
• for purposes of legitimate interest
• on the basis of your consent
• for the purpose of ensuring compliance with our legal and regulatory obligations
What are the purposes of processing your personal data?
Your personal data is processed for the following purposes:
• management, processing and tracking of orders for our services
• analysis of your purchases in order to offer you products or deals that may be of interest to you
• management of rights and requests to exercise the rights of individuals
• provision, access and operation of services
• management and implementation of commercial prospecting activities
• prevention of non-payment and fraud prevention; statistics
• analyses and audience measurement
• satisfaction surveys on our services
How long is your personal data retained?
Your personal data is retained only for the period strictly necessary to fulfil the purposes for which it is collected and processed, in particular for the management of the commercial relationship.
By default:
• customer data is not retained beyond 3 years in our systems, from the end of the commercial relationship
• connection, browsing and traffic data is not retained beyond 1 year
• we do not collect your banking data
However, your personal data may be retained for a longer period where required by legal and regulatory obligations.
Who are the recipients of your personal data?
The recipients of your personal data are:
• the relevant departments of the Comédie-Française
• credit institutions
• service providers involved in the processing of your purchases.
Your personal data is not transferred to a country outside the European Union. Should this ever be the case, we undertake to ensure that such transfers are carried out in compliance with applicable regulations or with regulations offering an adequate and equivalent level of protection.
What are your rights regarding your personal data and how can you exercise them?
Your rights in relation to your personal data are as follows:
• right of access
• right of rectification
• right to erasure – this right may be exercised insofar as it does not prejudice the performance of the contract or compliance with our legal and regulatory obligations
• right to restriction of one or more processing activities relating to your personal data;
• rights to modify and/or withdraw, at any time, consent relating to the processing of your personal data based solely on your consent;
• right to object to processing of your personal data
• right to data portability
You also have the right to define general and/or specific instructions regarding the fate of your personal data in the event of your death. In order to ensure that the information we hold about you is always accurate, we recommend that you regularly update your personal data. .
You may submit any request to exercise your rights relating to your personal data by contacting us:
• by email at
protection.des.donnees@comedie-francaise.org
or
• by post to:
Délégué à la protection des données, Comédie-Française, Place Colette, Paris 1st arrondissement.
You also have the option of registering free of charge on the telephone marketing opt-out list called Bloctel, managed by the company Opposetel under a public service delegation.c.
If you are dissatisfied, you have the right to contact the competent authority in this matter, namely the Commission Nationale de l'Informatique et des Libertés (CNIL), by post to: 3 Place de Fontenoy, TSA 80715 – 75334, Paris Cedex 07; or by telephone on 01 53 73 22 22.
What about cookies?
Cookies and other trackers may be installed and/or read in your browser when you visit the website.
What security measures are in place?
In order to ensure that your personal data is processed and retained in the manner most respectful of security and confidentiality regulations, we take all technically and organisationally required and appropriate measures, having regard to the state of knowledge and the costs of implementation, to preserve the security and confidentiality of your personal data. These technical and organisational measures are designed, among other things, to guarantee an adequate level of security appropriate to the risks, in particular to prevent your personal data from being damaged, distorted, or accessed by unauthorised third parties.
How will you be informed of updates to this policy?
This policy is intended to evolve and is therefore subject to modification. In the event of minor changes, the updated policy will be published online on the website in the dedicated section. In the event of substantial changes relating to the purposes of processing, the identity of the data controller, or the exercise of your rights, you will be duly informed.