The purpose of this privacy policy is to answer any questions you may have about the way in which Nantes Métropole, as data controller within the meaning of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter RGPD) and the amended Data Protection Act, processes your personal data on the museedartsdenantes.nantesmetropole.fr website.
The privacy policy is also fully in line with the Metropolitan Data Charter New window which Nantes adopted in June 2019. Trust, ethics and transparency of public policies are the main values of this charter.
What data does Nantes Métropole process and why?
- Via online forms, Nantes Métropole may in particular collect the following personal data: your first name, surname, postal address, email address, telephone number, the subject of the message you wish to send, the question you are asking.
This data is collected and processed in order to answer your question and, more generally, to improve the services provided by Nantes Métropole to its residents.
To do this, Nantes Métropole relies on the exercise of its public interest missions.
- Nantes Métropole may use cookies to collect browsing data: please consult the privacy policy relating to cookies below.
- Nantes Métropole also collects the following connection data: your IP address, the page access request, the type of browser used, the time and date of your visit. This data is collected and processed by Nantes Métropole solely in order to secure the operation of the website.
To do this, Nantes Métropole relies on its legitimate interest in offering you a secure service.
- Nantes Métropole may also process the above-mentioned data on the basis of its legal and regulatory obligations. The compulsory nature of the information you must provide is indicated by an asterisk at the time of data collection, on the forms.
To whom may your data be communicated?
Nantes Métropole is particularly careful to protect your personal data from end to end.
For this reason, the local authority will only disclose your personal data to authorized and specified recipients, depending on the nature of the data and in accordance with the provisions of the applicable regulations.
These recipients are as follows:
- authorized agents within the local authority's departments in relation to the nature of your requests, in particular agents from Nantes Métropole's Digital Resources Department, the site host, a service provider in charge of site security, and service providers in charge of third-party application maintenance (TMA).
- suppliers of digital data made available on the portal. Each supplier has its own terms and conditions of use, which can be consulted on its site. Please consult the legal notices of these suppliers, which are independent of the Musée d'arts de Nantes website.
Nantes Métropole requires its service providers to comply with the security rules laid down by the CNIL and ANSSI, in terms of both technical and organizational aspects, in order to protect your data against any unlawful disclosure, use, modification or destruction.
How long is your data stored?
Your data will be kept for as long as is necessary for the purposes described above, in compliance with current legislation and for a maximum of one year.
Connection data (IP address, date and time of connection, etc.) is kept for a maximum of 6 months.
At the end of these periods, the data is anonymized or deleted.
Is your data transferred outside the European Union?
No. In line with the Metropolitan Data Charter it has adopted, Nantes Métropole has chosen subcontractors located in France, as is the case with the site host.
How is the security of your data ensured?
Nantes Métropole takes all appropriate organisational and technical measures as well as all useful precautions to preserve the security and confidentiality of the information you entrust to it, in particular against any accidental loss, deformation, alteration and against any unauthorised access, use, modification or disclosure.
Intrusion tests are regularly carried out to detect any security flaws. Likewise, technical foundations and bricks, as well as libraries, are regularly updated, notably with a view to correcting any potential flaws.
What are your rights?
In accordance with Article 13 and Articles 15 to 22 of the RGPD, Nantes Métropole reminds you that:
- You can access the personal data that Nantes Métropole collects and processes about you and obtain a copy;
- You have a right to the portability of your data, provided that the data has been processed automatically and that the processing is based on contract or consent;
- You can request that your information be corrected, updated or completed;
- You can request thedeletion of your data, under the conditions of Article 17 of the RGPD ;
- You can limit the processing of your personal data, under the conditions of Article 18 of the RGPD ;
- You may object to the processing of your personal data for reasons relating to your particular situation;
- You may at any time withdraw your consent to the processing of your personal data when they are based on this legal basis;
- In accordance with the French Data Protection Act, you can decide in advance what will happen to your data after your death;
- If you are not satisfied with our responses, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL);
- Any rectification or deletion of your personal data or any restriction of processing carried out at your request will be communicated by Nantes Métropole to each recipient to whom your personal data may have been transmitted in accordance with this information, unless such communication proves impossible or requires disproportionate effort.
How to exercise your rights
Nantes Métropole provides a form for all your requests relating to the protection of personal data, in French and English:
You can also exercise your rights by contacting Nantes Métropole's Data Protection Officer by post at : Délégué à la protection des données, 2 cours du Champ de Mars 44923 Nantes Cedex 9.
Will this privacy policy be modified?
If this privacy policy is substantially modified, you will be informed directly via the site.
Privacy policy regarding cookies
Nantes Métropole is committed to protecting your privacy. The present privacy policy aims to give you all the information you need about the cookies used on the museedartsdenantes.fr website.
In accordance with the Metropolitan Data Charter New window and the General Data Protection Regulation (RGPD), the use of cookies on our sites complies with a principle of sobriety and minimization. Thus, only those cookies are used that are genuinely necessary for the operation of the site or to enable us to offer you interactive content to which you have previously consented.
What is a cookie?
Notion: in the words of the CNIL, "a cookie is a small file stored by a server on a user's terminal (computer, telephone, etc.) and associated with a web domain (i.e., in most cases, with all the pages of a single website). This file is automatically returned on subsequent contacts with the same domain."
Cookies can be of various types, depending on their purpose: technical, audience measurement, advertising and social networking cookies.
They may originate from Nantes Métropole or third parties. Tracers installed by these third parties may use your browsing data for their own purposes, in accordance with their privacy policy.
Legal basis: the legal basis for processing personal data via cookies may vary. The use of certain cookies is based on our legitimate interest in ensuring the proper functioning of our website and improving it (art. 6. 1. f RGPD).
The use of other cookies may be based on your consent (art. 6. 1. a of the RGPD). In this case, they will only be deposited with your consent and in accordance with the recommendations of the CNIL.
What cookies are used on the museedartsdenantes.nantesmetropole.fr website?
The cookies used on this site can be divided into the following categories:
Technical cookies: these are used to memorize connection information and provide a secure connection. They are necessary for the site to function properly.
These cookies are used to memorize connection information and provide a secure connection. They are necessary for the site to function properly.
Cookie: jsessionID
Data controller: Nantes Métropole
Purpose: To save information in order to improve the browsing experience on the
website. Retention period: The duration of the browsing session.
Cookie: Tarteaucitron
Data controller: Nantes Métropole
Purpose: To save your cookie consent choices
Retention period: 12 months
Audience measurement and performance cookies: these are used to compile visitor statistics and optimize site operation.
Nantes Métropole uses the services of AT Internet, whose audience measurement cookies are exempt from the requirement to obtain consent, as they meet the requirements set by the CNIL.
However, you have the right to object (opt-out) if you wish your browsing data to be completely excluded from our audience measurement.
Other AT Internet cookies are used for broader audience measurement, which requires your consent (opt-in). In the absence of your consent, these cookies will not be deposited.
Cookie: atauthority
Placed by: AT Internet
Data controller: Nantes Métropole
Purpose: audience measurement (keeps track of visitor privacy mode)
Retention period: 13 months
Cookie: atuserid
Placed by: AT Internet
Data controller: Nantes Métropole
Purpose: Audience measurement (identifies the visitor)
Retention period: 13 months
Cookie: pll_language
Placed by: AT Internet
Data controller: Nantes Métropole
Purpose: To save the language selected for the next visit to
Retention period: 13 months
Social network cookies: Nantes Métropole integrates external multimedia content (e.g. videos hosted by YouTube) or social network sharing buttons, the access or activation of which leads to the deposit and reading of tracers, particularly advertising tracers, by the providers of this content.
Nantes Métropole has opted for contextual consent prior to content activation, by asking you for your consent in a dedicated window (when you want to view a YouTube video, for example).
More specifically, with regard to social network buttons or publications integrated into the site (Facebook, Instagram), no cookies are deposited by the publishers of these social networks, unless you choose to click on the buttons in question or on the publication, in order to be redirected to one of these social networks.
Cookie: consent
Data controller: YouTube
Purpose: Used to detect whether you have accepted the marketing category
Retention period: 24 months
Cookie: visitor_info1_live
Data controller: YouTube
Purpose: Estimates user bandwidth on pages with embedded YouTube videos
Retention period: 179 days
Cookie: ysc
Data controller: YouTube
Purpose: Records a unique identifier to keep statistics on YouTube videos viewed by the user
Retention period: The duration of the browsing session
How do I manage cookies?
You can modify the consent you have given via the consent management module by clicking on the "Cookie management" link in the site footer.
You can also delete all cookies already on your computer and configure most browsers to block third-party cookies, block all cookies or delete all cookies when you close your browser, for example. In these cases, certain services and functions may not work.
Your browser's help menu will tell you how to express or modify your cookie preferences for Chrome New window, Firefox New window, Internet Explorer New window and Safari New Window.
For mobile devices, you can express or modify your cookie preferences for Chrome New window, Firefox New Window and Safari New window .
Contact
If you have any questions about our privacy policy relating to cookies, please contact us at dpd@nantesmetropole.fr.