Legal notices, privacy policy and GDPR

8 – Privacy policy (personal data management and RGPD)

8.1 – Purpose of the Privacy Policy

The purpose of this privacy policy is to inform users of the Musérial du Fort des Dunes (https://fort-des-dunes.fr/) of the measures and commitments taken by the Musérial du Fort des Dunes and the Mairie de Leffrinckoucke concerning the confidentiality of the personal data of the users of the Site as well as the cookies policy implemented on the present website.

In the context of your browsing on this site, the Musérial du Fort des Dunes (represented by the Mairie de Leffrinckoucke), the data controller, may collect and process personal data about you.

For this reason, the Fort des Dunes and the Mairie de Leffrinckoucke take the necessary measures to ensure the protection and confidentiality of the personal data they hold or process, in compliance with the provisions of the amended law n°78-17 of January 6, 1978 known as “Informatique et Libertés” and the European Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 known as the “General Data Protection Regulation”.

The Musérial du Fort des Dunes and the Mairie de Leffrinckoucke reserve the right to update or modify the present privacy policy, in particular in the light of legal and regulatory developments.

8.2 – Collection of personal data

The Musérial du Fort des Dunes is likely to collect personal data concerning the users of its Site within the framework of :

• A user’s browsing on the  website;
• The sale of ticketing products (see also the general conditions of sale here);
• Connection to your personal online space (if you have created an account when placing an order) ;
• Use of the contact form or any other form on the site.

This data is collected directly from users of the Site. Users are informed of the purposes for which their data is collected via the various online data collection forms. The mandatory nature of the data is indicated during collection by an asterisk, otherwise it is optional. Refusal to provide mandatory data may lead to the restriction or prohibition of the benefit of a functionality or service.

Furthermore, this Site collects data relating to the services used through cookies (browsing data, pages viewed, IP addresses, etc.). This information allows the Musérial du Fort des Dunes to improve the content of the Site and facilitate user navigation.

IP addresses and browser data may also be collected and temporarily stored for security purposes and to combat spam and computer attacks.

Details of cookie management are given below.

8.3 – Processing of personal data (dons collected through online ticketing or forms on the Site)

For ticket reservations via our online ticketing service, we collect your identity, contact and billing data, as well as the data required to deliver your ticket or reservation confirmation.

In this context, the processing carried out by the Musérial du Fort des Dunes has the following purposes:

• management of your ticket purchases and regulatory traceability ;
• the provision of your ticket ;
• your information and the management of your relations with the Musérial du Fort des Dunes ;
• where applicable, the sending of information and solicitations from the Musérial du Fort des Dunes and/or its cultural partners;
• satisfaction surveys and statistical studies;
• claims management

You will be asked to enter your title, surname, first name, date of birth, zip code and city, cell phone number and e-mail address.

The recorded data is reserved for the use of the information and ticketing service, the reservation and advance sales service, the communication service of the Musérial du Fort des Dunes and finally, where applicable, of the Site administrator (subcontractor of the Musérial du Fort des Dunes) solely for reasons of maintenance/security of the site and verification of its proper functioning.

The personal data collected are stored on the server of this site and do not pass through an external service. Therefore, your personal data is neither shared, nor disseminated, nor transferred, nor sold, nor rented.

In this context, the legal basis for processing is either contractual or, based on your consent, your request via a form (contact, reservation request, complaint and miscellaneous questions), or subscription to the newsletter.

For users who check the option of ” create an account » when placing an order, in order to benefit from our more comprehensive services (order tracking and reservations), where applicable: we keep your personal data indicated in your profile, such as your name, address, telephone number, e-mail address -mail, etc. All ice users can view, edit or delete their personal information at any time (except their ice username). Site managers can also view and modify this information.

If you do not check the “create an account” option, your reservation information is retained to ensure the processing of your Tickets/Tickets. This information is kept for the validity period of the Tickets/Tickets and then is subject to deletion or anonymization within the maximum period mentioned above. Upon simple request from you, we can delete/anonymize information concerning you as soon as your Ticket/Ticket expires.

For further information on ticketing, please consult the general terms and conditions of sale.

8.4 – Retention period for personal data

The personal data thus collected will be kept for the following periods:

• Identification and contact data (e.g. via contact form) are kept for a maximum of 2 years from the last contact;
• Billing information is kept for a maximum of 2 years from the last order;
• Account information is kept for a maximum of 3 years from the last time you logged on to your account (if you have created one).

8.5 – Security of personal data

The Musérial du Fort des Dunes and the Mairie de Leffrinckoucke implement various technical and organizational measures to ensure the security and confidentiality of personal data processing.

As such, Musérial du Fort des Dunes and the Leffrinckoucke Town Hall take all necessary precautions, taking into account the nature of the data and the risks presented by the processing, in order to preserve the security of the data and, in particular, to prevent they are distorted, damaged, or that unauthorized third parties have access to them (physical protection of premises, authentication processes with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, etc.) .

The hosting servers on which the databases are processed and stored are located exclusively within France.

We undertake to inform you immediately, insofar as we are legally authorized to do so, in the event of a request from an administrative or judicial authority relating to your data.

8.6 – Your rights concerning personal data (access, rectification, deletion)

In accordance with the French Data Protection Act (Loi Informatique et Libertés) and the General Data Protection Regulation (Règlement Général sur la Protection des Données), you have the right, free of charge, to access, rectify, limit, port and delete data concerning you.

You can therefore demand that information concerning you be rectified, completed, clarified, updated or deleted. You can also define advance directives on the processing of your personal data post-mortem.

Finally, you have the same rights with regard to deceased persons for whom you are the beneficiary.

To exercise these rights or if you have any questions about the processing of your personal data, please contact us at :

• via our contact form.
• or to the following postal address: Musérial du Fort des Dunes, Chemin du Fort, 59495 Leffrinckoucke.

In order to exercise your rights, we may ask you for a photocopy of an identity document bearing your signature.

If necessary, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority responsible for ensuring compliance with obligations relating to the protection of personal data.