The Musée de Cluny builds with its visitors and its customers, strong, long-lasting relationships, based on mutual trust. Guaranteeing the security and confidentiality of your personal data is therefore a strong commitment.
We apply a personal data management policy that complies with the Computing and Freedoms Act of January 6, 1978 amended and the (EU) General Data Protection Regulation of April 27, 2016 (or GDPR). Our policy is based on the following principles:
This protection policy sets out our commitments regarding your personal data collected on our website https://www.musee-moyenage.fr (hereafter “the Website”)
Its purpose is to inform you about:
It may be amended at any time to take account of any regulatory, editorial or technical change. Please peruse them regularly in order to take note of the most recent version.
Musée de Cluny, musée national du Moyen Âge
6 place Paul Painlevé
Personal data is information directly or indirectly relating to an identifiable natural person.
>> We collect your personal data in three ways:
You may communicate personal data to us, in particular, in the following cases:
We also collect information about you on the occasion of our relationship with you (statistics), automatically when you visit the Website.
Finally we may collect your data from social media when you sign up to our Facebook, Twitter, Instagram and YouTube pages from some of our Websites in order to follow our news. The data that we may collect in this context is anonymous and processed for purely statistical purposes (in particular to monitor the number of subscribers that follow these pages).
We are not responsible for the processing which your personal data may undergo by social media websites that have their own data protection policy. Please peruse their policies to find out your rights with respect to each of them, and to manage your privacy settings.
>> In this context, we may collect the following personal data:
We take care to ensure that the collection of this data is relevant, appropriate, non-excessive and strictly needed for our activities.
Certain information is essential to be able to benefit from the service in question (indicated by an asterisk). If it is not communicated to us, you will be unable to benefit from this service.
And if you communicate personal data belonging to a third party to us: you must ensure that the data subject accepts his/her personal data being communicated to us.
In principle, our products and services are for adult individuals with the legal capacity to commit themselves.
As an exception, for signing up to our newsletters for the use of some free-of-charge services, 15 years of age is accepted. In this case, the owner of the data, 15, 16 or 17 years of age, has a specific right enabling him or her to obtain the erasure of his or her data promptly.
The collection and processing of your personal data is only possible for a specific purpose about which you are aware when it is collected and from which you derive an identified and tangible benefit.
We are committed to ensuring that your data is collected and processed for the following purposes:
These communications are only sent if you have clearly given your consent for each communication. Your consent is obtained in a clear and unequivocal way.
Your personal data is only intended to be used by the museum and is only accessible by our staff who are empowered to manage it, according to the collection purposes (commercial or administrative departments, departments responsible for the control, marketing departments).
As an exception, it may be communicated to:
Your personal data are stored on servers located within the European Union,either internally on our secure servers, or externally by a duly chosen service provider.
As the controller, we implement the security and confidentiality procedures required to prevent any risk of fraudulent access, theft, damage or accidental loss of your data.
When a service provider is involved in processing personal data, we attach paramount importance to the technical and organizational measures that it undertakes to take to preserve the security and confidentiality of the data.
We also reserve the right to commission audits of our service providers.
The retention periods of your data are defined by us in relation to the legal and contractual obligations. These periods are set in accordance with the purposes pursued. When these periods have elapsed, the data are either deleted or retained after having been anonymized, i.e. modified to make their link to a person permanently impossible.
Data collected when creating an online account/personal space on our website is retained for as long as you connect to/use your account/space.
The data is stored during the commercial relationship (including exercise of the legal guarantees) and then archived with restricted access and retained for the additional time required for compliance with our legal obligations or for the purposes of defending or asserting our rights. At the end of this period, your personal data is anonymized or deleted.
This data is stored in a current archive for 3 years, from the sign-up date or from the latest positive response from you. After this time, we anonymize it unless you have clearly and expressly expressed your wish to sign-up again.
This data is retained for a maximum period of 13 months from when it is recorded. After this time, it is deleted.
You have the right to be informed about why we collect your data, how we process it, the rights that you have and how to exercise them.
You have the right to ask us whether we have data about you and to request a copy of it in an understandable format. This right thus allows you to check the accuracy of the data and, as necessary, have it corrected or deleted.
You may directly correct, update or complete your online data on your account/space. You may also ask us to update or complete the personal data that we have.
You may, at any time, unsubscribe from our newsletters by clicking on the link provided for this purpose in the latest communication received, or by contacting the department indicated in the same communication.
You also have the right to withdraw your consent for the placement of analytical and advertising cookies at any time. To do so, you simply have to configure the Internet browser on your computer, tablet or mobile. (For more information see the cookie management section).
When we collect your data for the purpose of performing the contract or on the basis of a legitimate interest, you have the right, for legitimate reasons, to object to your data being disseminated, transmitted or stored. The objection right allows you to object to us using your data for a specific purpose provided you put forward reasons relating to your particular situation.
If you dispute the accuracy of the data collected or if you object to your data being processed, you may ask us, when making your request to correct data or object to their use, to suspend use of your data pending the processing of your request.
You have the right to obtain the erasure of your personal data at any time in the following cases:
We may refuse to erase your data when it is required:
You have the right to obtain a copy of the data that you have sent to us within the context of a contract or that we have collected with your agreement, in a structured, commonly used and legible format. This copy may be transmitted or sent to another party, at your request.
At any time, you may give instructions regarding the retention, erasure and the communication of your personal data after your death.
Vous avez le droit de nous demander si nous possédons des données sur vous et d’en demander une copie dans un format compréhensible. Ce droit vous permet ainsi de contrôler l'exactitude des données et au besoin, de les faire rectifier ou effacer..
You can exercise all your rights:
In order to enable us to understand your request and to respond to it quickly, please state in your request:
The rights from which you benefit are rights of an individual nature and may therefore only be exercised by the owner of the data. To meet this obligation, when making your request we may ask you to provide proof of your identity by giving a customer number or via an authentication space whenever possible, or by sending us a copy of a valid identity document. The copy of your proof of identity will of course be deleted by our services as soon as the identity check has been completed.
We will endeavor to reply to your request within a reasonable time, and in any event, in accordance with the legal requirements.
If you believe that your rights are not being respected or that the protection of your personal data is not provided in accordance with the applicable regulations, you may lodge a complaint with the French National Commission of Data Processing and Freedoms.
Cookies are computer files automatically placed on the hard disk on your computer, tablet or mobile device when you browse our Website. They are managed by your browser (Internet Explorer, Firefox, Safari or Google Chrome).
We use different kinds of cookies on our Website:
You have the choice of setting your browser to accept or reject all cookies, to periodically delete cookies or to see when a cookie is placed, how long it is valid for, what it contains and to refuse it being recorded on your hard disk.
You can choose to block or disable these cookies at any time by changing the settings of your internet browser on your computer, tablet or mobile, in line with the instructions provided by your browser provider as shown by the websites mentioned below:
On Internet Explorer
Open the "Tools" menu, then choose "Internet Options"; Click on the "Privacy" tab, then the "Advanced" tab and choose the desired level or click on the following link:
On Mozilla Firefox
Open the “Tools” menu, then choose “Options”; click on the “Privacy” tab, then choose the desired options or click on the link below:
Choose "Safari > Preferences" then click on "Security"; From the "Accept cookies" section, choose the desired options or click on the link below:
On Google Chrome
Open the configuration menu (the one with the wrench logo), then choose “Options”; click on “Advanced options” then from the “Confidentiality” section, click on “Content settings” and choose the desired options or click on the link below:
You can also type “cookies” into your browser's Help page to find setting instructions.
For more information, you can also view the following pages on the CNIL website: