Privacy policy

Privacy policy

The SAEML Le Mémorial de Caen is as committed to preserving the memory of the 20^th century history’s great events as it is to protect the privacy of individuals, and more particularly their personal data. 

Indeed, personal data are not trivial information; they reveal elements related to the individual that you are. It is information that allows you to be identified, either directly or indirectly. It may include your name, your first name, your address or your credit card number. 

As part of the management of the Mémorial de Caen online ticketing service (https://boutique-memorial.fr/en/), (hereinafter the « Site »), the SAEML Le Mémorial de Caen (whose head office is located at Esplanade Général Eisenhower - CS 55026 - 14050 CAEN Cedex 4 - hereinafter referred to as "we" or "us" or the "Mémorial") is required, in its capacity of data controller, to collect and process various categories of personal data related to the Site’s users (hereinafter referred to as "you" or "your").

With a strong commitment to comply with the various rules on the protection of personal data arising from the General Data Protection Regulation 2016/679, which came into effect on May 25^th, 2018 (hereinafter the « GDPR ») and the French Data Protection Act of 1978 in its amended version, including the obligation of transparency, we have drawn up this privacy policy for you. This policy aims to provide you with precise and complete information on the use we make of your data and on your various rights. It complements the General Terms and Conditions of Sale and forms an integral part thereof.

This policy may also be updated from time to time. We therefore encourage you to read it carefully and to consult it regularly on the Site. If you have any questions about our processing of your personal data, you can contact our Data Protection Officer directly at the following e-mail address: rgpd@memorial-caen.fr. 

WHAT PERSONAL DATA DO WE USE?

On the Site, we may collect directly or indirectly from you the following personal data: 

-                      Your first and last names,

-                      Your gender,

-                      Your date of birth (optional),

-                      Your email address,

-                      Your phone number,

-                      Your postal address,

-                      Name of your company (optional),

-                      VAT number (optional),

-                      Tax identification number (optional),

-                      Navigation data,

-                      IP address,

-                      Order reference (optional).

ON WHAT LEGAL BASIS DO WE USE YOUR DATA AND FOR HOW LONG DO WE STORE IT?

We collect the personal data indicated above for specific purposes. Below you will find a table showing for each purpose of processing (i.e. the main objective of the use of your data) the legal basis (i.e. the basis on which the use of your data is lawful) that we use and the corresponding storage period that we apply: 

TO WHOM DO WE TRANSMIT YOUR DATA?

• Members of our teams

Your personal data is only accessible to persons working within the Mémorial who are authorized by their function to process it, such as members of our bookstore shop, communication & marketing departements. If necessary, the staff in charge of the management of the Site may have access to your data. 

• Our data processors

Your data is also transmitted to our external service providers, acting on our behalf, such as those involved in data hosting. We make sure that the latter present the necessary guarantees to respect the security and the confidentiality of your data. 

• Our payment service provider

The data relating to your payments are collected directly by our payment service provider via Up2pay by the Crédit Agricole bank, a dedicated interface that you can access from our Site. Indeed, the latter collects and processes your data under its responsibility in order to provide you with payment services when you wish to order products on the Site. Your payment data will be processed by our service provider in accordance with the strictest security and confidentiality rules applicable in the e-commerce industry. 

The Mémorial does not collect itself, nor does it store, at any time, your data relating to your payment methods.  

• Other organisations

We may also transmit your personal data to an administrative authority or an authorized public body, when required by law.

IS YOUR DATA SHARED WITH RECIPIENTS OUTSIDE THE EUROPEAN UNION?

Your personal data is mainly processed within the European Economic Area (EEA). Nevertheless, some of your personal data, such as your browsing data, may be transferred to countries outside the EEA, whose level of protection would not be considered adequate by the European authorities. 

For any data transfer outside the EEA, we undertake to put in place appropriate agreements or transfer mechanisms such as standard contractual clauses (SCC) adopted by the European Commission to provide appropriate safeguards for such transfers in accordance with applicable law. 

For more information on transfers outside the EEA, you can contact us at the address indicated in the "How to exercise your rights" section.

WHAT USE DO WE MAKE OF COOKIES? 

The Site and its partners send cookies or trackers to your device to improve your navigation, assess the Site audience and to propose you personalized advertising according to your navigation profile. Except for some technical cookies, the deposit of cookies on your device needs your consent to be active. You may express it via our Consent management platform (CMP). You might modify your choice at any time.

For your information, cookies are small pieces of text or trackers sent to your browser that help the Site to remember information about your visit, which can both make it easier to visit the Site again and make the Site more useful to you.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA? 

In accordance with the regulations in force, you have the following rights: 

• The right to ask the Mémorial access to your personal data;

• The right to request the rectification or deletion of your data;

• If necessary, the right to request a limitation of the processing of your data;

• The right to object to the processing, in particular when the purpose of the processing in question is marketing communication. For processing based on your consent, you may withdraw your consent at any time. 

• In certain circumstances, the right to portability of your personal data. The right to data portability enables you, where the processing of your data is based on your consent or on an agreement and is implemented using automated processes, to obtain from us that your data be provided to you in a structured, commonly used and machine-readable format. Personal data obtained in this way may then be passed on to another data controller without us interfering. 

You may also define general or specific directives as to the fate of your personal data after your death. General directives can be registered with a trusted third party certified by the CNIL, while special directives can be addressed directly to the Mémorial. 

For more information on your rights: 

https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-données-personnelles

If you believe that we are not complying with our obligations or your rights with respect to your personal data, you may file a complaint with the CNIL, in accordance with the applicable regulations. 

HOW TO EXERCISE YOUR RIGHTS?

You may exercise your rights at any time by contacting us at the following e-mail address: rgpd@memorial-caen.fr. 

You also may exercise your access, rectification and deletion rights directly from the Site, in the “Your account” section, then by clicking on “My Personal Data”.

Last update : 18/11/2022