Privacy Policy

This personal data protection policy explains how personal data is collected, managed and processed by Large, Cultures contemporaines.

This Privacy Policy sets out:

• the types of personal data collected;
• how this data is collected;
• how the data collected is used;
• users’ rights in relation to this data;
• the data controller responsible for the personal data collected and processed;
• the third parties to whom this data may be disclosed;
• the website’s policy regarding cookies and tracking pixels;
• the geographical location of the data. Texte collé

Data controller

Large, Cultures contemporaines, a non-profit association governed by the French Law of 1 July 1901, with its registered office at 121 avenue de Malakoff, 75916 Paris, registered with the French National Register of Associations under number W751278583, represented by its President, Laurent Dumas. Texte collé

Data collected by Large

Large, Cultures contemporaines collects and processes the following categories of personal data:

• data relating to the identity of users of the online ticketing service and visitors purchasing tickets in person at the reception and ticketing desk. When creating a customer account, the following information is mandatory: surname, first name and email address. An email address is also required when creating a guest account;
• depending on the type of visitor: postcode or postal address, and telephone number;
• data relating to tickets and membership cards: purchases (dates, time slots, number of visitors, purchase history) and bookings;
• data relating to access control: date and time of the visit to the venue;
• data relating to professional status, such as job title and company;
• connection data, such as IP address, user location, connection logs, pages visited and tracking pixels;
• data relating to the settlement and payment of transactions.

Only personal data strictly necessary for the purposes described below is collected. Texte collé

2. How this data is collected

Personal data is collected directly from data subjects through the various sales, booking and visitor-relations channels, including online ticketing, the reception and ticketing desk, telephone, email and visits to the venue.

Where personal data is collected through a form, the data subject is informed which information is mandatory by an asterisk (*) or other indication displayed next to the relevant fields. If any mandatory information is not provided — for example, an email address when purchasing a ticket online so that it can be delivered — the request cannot be processed. Texte collé

3. Purpose of data collection

Personal data is collected by Large, Cultures contemporaines as part of its activities. Data is collected solely for specific, explicit and legitimate purposes. Depending on the circumstances, personal data is collected for the following purposes:

Sales channels

Certain data is required in order to:

• manage bookings, orders, payments and ticket delivery;
• manage data subjects and their participation in the activities offered, including guided tours, visit-and-workshop sessions and educational activities;
• manage memberships;
• manage relations with customers and groups, including sending practical information and booking confirmations, as well as information relating to changes to or cancellations of activities;
• provide ticketing-related features, such as allowing users to change the date or time of a ticket or order themselves;
• produce attendance and service-usage statistics in a form that does not allow individuals to be directly identified.

Newsletter

Subject to the user’s consent, certain data is required in order to:

• manage and send information relating to news and activities from LARGE, Cultures contemporaines, including newsletters and invitations;
• where applicable, send marketing communications relating to the cultural programme.

Cookies

Cookies and other trackers placed on the website are used, on the basis of consent where required, in order to:

• carry out anonymised studies, attendance statistics and audience measurement;
• ensure the security and proper functioning of the service. Users may delete these cookies through their browser; however, doing so may prevent the website from functioning properly. Texte collé

Cookies used

Cookies and trackers may also be used to:

• improve the performance and operation of the website;
• personalise content and communications according to the user’s interests, on the basis of the user’s consent;
• process advertising and audience-measurement data in order to optimise advertising campaigns and measure their performance. These processing activities are carried out solely on the basis of prior consent collected through the website’s cookie management banner.

If consent is given: where the user agrees to the collection of data for advertising purposes through the cookie banner, signals are sent to Google, Meta and LinkedIn to measure advertising effectiveness and personalise the advertisements displayed.

If consent is refused: no behavioural data is associated with an advertising identifier or personally identifying cookie. Only anonymous signals or non-identifiable pings are sent to Google, Meta and LinkedIn for overall statistical modelling purposes.

Tracking pixels embedded in emails are used, on the basis of consent where required, to:

• measure the deliverability and open rates of promotional emails;
• analyse interactions with electronic communications;
• personalise communications according to recipients’ interests.

Tracking pixels are not used in transactional communications. Texte collé

4. Data retention periods

The purposes for which the different types of personal data are collected and processed, together with their respective retention periods, are set out below. Texte collé

Sale of the cultural offer

Website management and optimisation

Newsletter / marketing communications

Handling requests for information and complaints

5. Disclosure of personal data

Depending on their roles and the purposes of the processing, personal data may be disclosed to the following recipients:

• authorised staff of Large, Cultures contemporaines, according to their responsibilities, working within the Audiences and Communications Department or the administrative department;
• processors involved in carrying out personal data processing, such as the provider responsible for reception and ticketing, the ticketing software provider, email distribution service providers and payment service providers;
• staff of companies involved in financial or legal transactions concerning Large, Cultures contemporaines. Texte collé

6. Data security

Large, Cultures contemporaines and its service providers implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks associated with the processing of personal data.

These measures include:

• hosting data exclusively in European data centres, the majority of which are located in France. All of these data centres are ISO 27001 certified;
• measures to protect access to the ticketing and CRM systems against cyberattacks, including denial-of-service attacks;
• continuous monitoring and security measures designed to facilitate the detection of incidents, including malware, ransomware and other advanced threats;
• dedicated servers that are not shared with other applications, providing greater control over the infrastructure and an enhanced level of security.

These measures are intended in particular to protect data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, despite the precautions implemented, no data transmission or storage system can guarantee absolute security. Texte collé

7. Rights relating to personal data

In accordance with applicable personal data protection legislation, users have the following rights, depending on the relevant legal basis and processing activity:

• Right of access: users may exercise their right to access the personal data held about them by writing to the email address indicated below. Before this right is exercised, proof of identity may be requested in order to verify the identity of the user.
• Right to rectification: if personal data held by the publisher is inaccurate, users may request that it be updated.
• Right to erasure: users may request the erasure of their personal data in accordance with applicable data protection legislation.
• Right to restriction of processing: users may request that the publisher restrict the processing of their personal data in the circumstances provided for under the GDPR.
• Right to object to processing: users may object to the processing of their data in the circumstances provided for under the GDPR.
• Right to withdraw consent: users may withdraw their consent to the processing of their personal data at any time where consent constitutes the legal basis for the processing, in accordance with the GDPR.
• Right to data export and portability: users may request a copy of the data they have provided, in accordance with the provisions of the GDPR. Texte collé

Requests to exercise rights relating to personal data may be submitted by contacting the person responsible for data protection by email at donnees@large-emerige.fr, or by post at:

Large, Cultures contemporaines
Service des Publics
Pointe des Arts - Île Seguin
92100 Boulogne-Billancourt

To enable the request to be processed, the data subject should provide their surname, first name and contact details and, where relevant, any information that may help identify the data concerned by the request, such as a transaction number, ticket number or date of visit.

Where there is reasonable doubt as to the identity of the person making the request, Large, Cultures contemporaines may request additional information necessary to confirm their identity.

Large, Cultures contemporaines will endeavour to respond within 15 (fifteen) days. This period may be extended where required by the complexity and/or number of requests.

You may also lodge a complaint with the CNIL at the following address:

3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07

or via its website: https://www.cnil.fr/fr/plaintes Texte collé

8. Use of cookies and tracking pixels

A “cookie” or tracker is a small electronic file that may be stored on a user’s device — such as a computer, tablet or smartphone — and read when the user visits a website, uses an application or accesses digital content.

The Website uses cookies that are necessary for its operation and, where applicable, cookies subject to the user’s consent in order to improve the browsing experience, measure website traffic, analyse website use, optimise advertising campaigns or provide certain content or services.

Information collected automatically may include data relating to website navigation, the type of device used and website traffic. This data is used solely for statistical analysis and to improve the operation, design and services offered by Large, Cultures contemporaines. Unless otherwise stated, this information does not allow users to be directly identified.

Where cookies or trackers requiring consent are used, users are informed of their purpose when they first visit the website through a cookie management banner. Users may accept or reject all or some non-essential cookies and may change their choices at any time through the cookie management tool available on the Website.

As part of the electronic communications it may send, including newsletters and information relating to its cultural offer, Large, Cultures contemporaines may use tracking pixels. These may be used in particular to measure the opening of emails and newsletters for purposes including deliverability and mailing-list maintenance, such as identifying inactive accounts, in accordance with applicable regulations.

Where applicable, Large, Cultures contemporaines may use tracking pixels to analyse the performance of communication campaigns or personalise the content offered. In accordance with CNIL requirements, where the use of these pixels is subject to consent, such consent is obtained in advance when users subscribe to the newsletter. Data subjects may withdraw their consent at any time by clicking “unsubscribe” at the bottom of newsletters or by contacting LARGE, Cultures contemporaines at the address specified in this policy. Texte collé

9. Transfers of data outside the EU

The ticketing and CRM solution used by Large, Cultures contemporaines is hosted entirely in Europe, across two data centres in France and one in Germany.

No personal data is transferred outside the European Union.

Only data relating to our advertising campaigns — Google Ads, Meta Pixel and LinkedIn Insight Tag — may be transferred to the United States.