ARTICLE 1:preamble
This privacy policy applies to the site: www.airborne-museum.org
The present privacy policy is intended to expose users of the site:
- The way in which their personal data are collected and processed. Must be considered as personal data all data that can identify a user. These include the first and last name, age, postal address, email address, location of the user or his IP address;
- What are the rights of users regarding this data;
- Who is responsible for the processing of personal data collected and processed;
- To whom these data are transmitted;
- The site’s policy on “cookie” files.
This privacy policy supplements the Legal Notice and the General Conditions of Use that users can consult at the following address:
ARTICLE 2 : general principles regarding data collection and processing
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site user data complies with the following principles:
- Lawfulness, loyalty and transparency: data can only be collected and processed with the consent of the user who owns the data. Each time personal data is collected, the user will be informed that his data is collected, and for what reasons his data is collected;
- Limited purposes: the collection and processing of data is carried out to meet one or more purposes determined in these general conditions of use;
- Minimization of the collection and processing of data: only the data necessary for the proper execution of the objectives pursued by the site are collected;
- Retention of reduced data over time: the data is kept for a limited period, of which the user is informed. When this information cannot be communicated, the user is informed of the criteria used to determine the retention period;
- Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data can only take place if they comply with at least one of the following conditions below:
- The user has expressly consented to the processing;
- The processing is necessary for the proper performance of a contract;
- The processing responds to a legal obligation;
- The processing is explained by a necessity linked to the safeguarding of the vital interests of the data subject or of another natural person;
- The processing can be explained by a necessity linked to the performance of a task in the public interest or which comes under the exercise of official authority;
- The processing and collection of personal data is necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.
ARTICLE 3 : personal data collected and processed in the context of browsing on the site
A. Data collected and processed and mode of collection
The personal data collected on the www.airborne-museum.org website are as follows:
| Operation executed | Personal data collected | Legal basis of the use | Retention period |
| Ticket purchase | – First and last name, postal / email address /phone number / fax / newsletter choice / bank account ID (last 4 numbers), password (crypted) | Necessary for executing the contract between the user and the Airborne Museum Lawful interest of the Airborne Museum to ensure the clients’ aftercare | 3 years starting from the online purchase |
| Purchase and refund on shop | Online or on-site purchase: management of the means of payment, and bank info for refunds Refunds: Bank info / email / address / ticket | Necessary for executing the contract between the user and the Airborne Museum | 15 months starting from the online purchase |
| Use of the Histopad | Contact data : – First and last name / email / phone number | Collection of the consent according to the Article 7 of the RGPD Lawful interest of the Airborne Museum to warrant the aftercase and a better understanding of its clients | 3 years starting from the last interaction with the Airborne Museum |
| Newsletter subscribing | – ID data: First and last name / email address – Audience measurement: Statistical plug-in allowing to see actions on emails (reading, opening, etc.) Data collected via cookies and other trackers | Collection of the consent according to the Article 7 of the RGPD Lawful interest of the Airborne Museum to warrant the aftercase and a better understanding of its clients | 3 years starting from the last interaction with the Airborne Museum |
| Recruitment process | – Resume: First and last name : photo / mail / postal address, phone number / professional background – Covering letter | Lawful interest of the Airborne Museum to select the suitable candidates for the job | 2 years starting from the collection of the resume and cover letter |
| Commercial and cultural relationships | – Contact data: Email address / phone number / first and last name / data of the related legal entity (KBIS, SIRET) – Financial data: Bank and payment info / billing data / accounting data – Payments and bills records | Necessary to the execution of the contract between the supplier and the Airborne Museum Necessary for compliance with a legal obligation | 3 years starting from the end of the contractual relationship |
| Complaints and requests by contact form | – First and last name / email address | Lawful interest of the Airborne Museum to handle and follow-up the complaints | 3 years starting from the end of the contractual relationship |
B. Transfer of the data to third parties
The personal data collected by the website are not transferred to any third party, and are only used by the site’s editor.
C. Data hosting
The website airborne-museum.org is hosted by: OVH.
The website host can be contacted with this form.
The data collected and used by the website are exclusively hosted and used in France.
ARTICLE 4 : data processing supervisor
A. The Data Controller
The controller of personal data is: Airborne Museum. He can be contacted as follows:
+33 (0)2 33 41 78 03
The data controller is responsible for determining the purposes and means used for the processing of personal data.
B. Obligations of the data controller
The data controller undertakes to protect the personal data collected, not to transmit them to third parties without the user having been informed and to respect the purposes for which these data were collected.
The site has an SSL certificate to ensure that information and data transfer passing through the site are secure.
An SSL certificate (“Secure Socket Layer” Certificate) is intended to secure the data exchanged between the user and the site.
In addition, the data controller undertakes to notify the user in the event of rectification or deletion of the data, unless this entails disproportionate formalities, costs and procedures for him.
In the event that the integrity, confidentiality or security of the user’s personal data is compromised, the controller undertakes to inform the user by any means.
ARTICLE 5 : user rights
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below:
In order for the data controller to comply with his request, the user is required to communicate to him: his first and last name as well as his e-mail address.
The data controller is required to respond to the user within a maximum of 30 (thirty) days.
A. Présentation des droits de l’utilisateur en matière de collecte et traitement de données
a/ Right of access, rectification and right to erasure
The user can read, update, modify, or request the deletion of the data concerning him, by respecting the procedure set out below:
The user must send an e-mail to the person responsible for processing personal data, specifying the subject of his request, to the contact e-mail address.
b/ Right to data portability
The user has the right to request the portability of his personal data, held by the site, to another site, by complying with the following procedure:
The user must make a request for the portability of his personal data to the data controller, by sending an e-mail to the address provided above, specifying the subject of his request, to the e-mail address of contact.
c/ Right to limitation and opposition of data processing
The user has the right to request the limitation or to oppose the processing of his data by the site, without the site being able to refuse, except to demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and the rights and freedoms of the user.
In order to request the limitation of the processing of their data or to oppose the processing of their data, the user must follow the following procedure:
The user must make a request to limit the processing of his personal data by e-mail to the data controller.
d/ Right not to be the subject of a decision based exclusively on an automated process
In accordance with the provisions of Regulation 2016/679, the user has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him similar way.
e/ Right to determine fate of data after death
The user is reminded that he can organize what should be the future of his data collected and processed if he dies, in accordance with law n ° 2016-1321 of October 7, 2016.
f/ Right to appeal to the competent supervisory authority
In the event that the data controller decides not to respond to the user’s request, and the user wishes to contest this decision, or, if he thinks that one of the rights listed above, he is entitled to appeal to the CNIL (Commission Nationale de l’Informatique et des Libertés, https:www.cnil.fr) or any competent judge.
B. Personal data of minors
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or over can consent to the processing of their personal data.
If the user is a minor under the age of 15, the agreement of a legal representative will be required so that personal data can be collected and processed.
The site editor reserves the right to verify by any means that the user is over 15 years old, or that he has obtained the agreement of a legal representative before browsing the site.
ARTICLE 6 : Use of “cookie” files
The site uses “cookie” techniques.
A “cookie” is a small file (less than 4kB) stored by the site on the user’s hard drive, containing information relating to the user’s browsing habits.
These files allow it to process statistics and traffic information, to facilitate navigation and to improve the service for the comfort of the user.
For the use of “cookie” files involving the saving and analysis of personal data, the consent of the user is necessarily requested.
This user consent is considered valid for a maximum period of 6 (six) months. At the end of this period, the site will again request the user’s authorization to save “cookie” files on their hard drive.
a/ Opposition of the user to the use of “cookies” files by the site
Cookies that are not essential to the operation of the site are only placed on the user’s terminal after obtaining their consent. The user can withdraw their consent at any time, as follows:
Please click on the “withdraw consent” button. Please go to the cookie settings page by clicking here.
More generally, the user is informed that he can oppose the recording of these “cookie” files by configuring his navigation software.
For information, the user can find at the following addresses the steps to follow in order to configure his navigation software to oppose the recording of “cookie” files:
- Chrome : http://support.google.com/accounts/answer/61416?hl=fr
- Firefox : https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
- Safari : https://www.apple.com/legal/privacy/fr-ww/
- Internet Explorer : https://support.microsoft.com/fr-fr/help/17442/windows-internetexplorer-delete-manage-cookies
- Opera : https://www.opera.com/help/tutorials/security/cookies/
In the event that the user decides to deactivate the “cookie” files, he may continue browsing the site. However, any malfunction of the site caused by this manipulation could not be considered as being due to the publisher of the site.
b/ Description of the “cookie” files used by the site
The site editor draws the user’s attention to the fact that the following cookies are used during navigation:
Cookie: Compliance. Issuer: EU
ARTICLE 7 : conditions for modification of the privacy policy
This privacy policy can be consulted at any time at the address indicated below: www.airborne-museum.org/personal-data-protection-policy
The publisher of the site reserves the right to modify it in order to guarantee its conformity with the law in force.
Consequently, the user is invited to regularly consult this privacy policy in order to stay informed of the latest changes that will be made to it.
However, in the event of a substantial modification to this policy, affecting in any way whatsoever the rights to use your personal information in relation to the provisions provided for in this charter at the time of data collection, your consent will be systematically required.
It is brought to the user’s attention that the last update of this privacy policy took place on 16/12/2022.
Contact :
LEVANNIER Hugo
Chargé de communication de l’Airborne Museum
communication@airborne-museum.org – +33(0)2 33 41 78 03
