PRIVACY POLICY

PREAMBLE

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016 and the relevant national legislation in force, the City of Marseille provides you with the following information :

ARTICLE 1. Identity of the Controller

The Controller is the City of Marseille :
Hôtel de Ville de Marseille
13233, Marseille Cedex 20
Tél: 33 (0) 4 91 55 11 11

ARTICLE 2. Data collected

2.1 Data collected when using the contact form

In this context, the City of Marseille will collect the following personal data : Titles - Surname - First name - E-mail address – Message text.

2.2 Data collected when purchasing a ticket

In this context, the City of Marseille will collect the following personal data : Titles - Surname - First name - Postal address - Telephone number - E-mail address – Bank details – Information about the ticket.

ARTICLE 3. Purposes

The data collected in the context of using the contact form is processed for the purpose of contacting the respective data subjects and providing them with a detailed response.
The data collected in the context of purchasing a ticket is processed for the purpose of ensuring secure ticket sale.

ARTICLE 4. Legal bases

The legal basis for the data collected in the context of using the contact form is the consent of the respective data subjects.
The legal basis for the data collected in the context of purchasing tickets is a contractual relationship.

ARTICLE 5. Recipients

The data collected under the GDPR may be consulted by :
- the City of Marseille (Museums Department, Information Systems Division (DSI) ;
- the following processors: Safran Solution, PayZen.

ARTICLE 6. Storage period

The data collected in the context of using the contact form will be stored for a period of 6 (six) years following submission of a message.
The data collected in the context of purchasing tickets will be stored for a period of 6 (six) years following purchase of a ticket.

ARTICLE 7. Security

All personal data is stored in secure conditions, in accordance with the current technical means and the City of Marseille’s information systems security policy (PSSI), in compliance with the provisions of the GDPR and the relevant national legislation in force.

ARTICLE 8. Minimisation

The City of Marseille undertakes to process only the data strictly necessary for its activities and to delete any data received that is not useful as soon as possible.

ARTICLE 9. Respect of rights

You have the following rights with regard to your personal data, which you can exercise by writing to us at our postal or e-mail address :
Délégué à la Protection des données (Data Protection Officer)
Ville de Marseille
42 Av. Roger Salengro
13003 Marseille

Data Protection Officer (DPO) :

9.1 Right to information, access and disclosure

You have the right to access the personal data held on you. To help you exercise this right, you can visit the website of the French National Commission for Information Technology and Civil Liberties (CNIL).
Mail template : https://www.cnil.fr/fr/modeles/courrier

9.2 Right to rectification, erasure and to be forgotten

You have the right to request the rectification, updating, blocking or erasure of any data concerning you that may be inaccurate, erroneous, incomplete or outdated. To help you exercise this right, you can visit the website of the French National Commission for Information Technology and Civil Liberties (CNIL).
Mail template : https://www.cnil.fr/fr/modeles/courrier

9.3 Right to object to processing of data

You have the right to object to the processing of your personal data. To help you exercise this right, you can visit the website of the French National Commission for Information Technology and Civil Liberties (CNIL).
Mail template : https://www.cnil.fr/fr/modeles/courrier

9.4 Right to restrict processing

You have the right to request that the processing of your personal data by the City of Marseille be restricted. In this case, your data will be only stored and not used by the City of Marseille.

9.5 Response times

The City of Marseille undertakes to respond to your request for access, rectification or objection or to any other additional request for information within a reasonable period, which may not exceed 1 (one) month from the date of receipt of your request.

9.6 Right to lodge a complaint with the competent authority

If you believe that the City of Marseille is not complying with its obligations with regard to your personal information, you have the right to lodge a complaint with or to send a request to the CNIL.
https://www.cnil.fr/fr/plaintes

ARTICLE 10. Outsourcing

Please be aware that the City of Marseille uses service providers to process data on its behalf. The City of Marseille has carried out all the appropriate checks to ensure that all of its service providers implement adequate safeguards and comply with strict conditions regarding data confidentiality, use and protection.

Processor	Recipient country	Processing carried out	Safeguards
PayZen	France	Online payment provider	https://www.lyra.com/fr/guides/charte-rgpd
Safran Solution	France	Site maintenance	GDPR outsourcing appendix

ARTICLE 11. TRACKER/COOKIE POLICY

11.1 Use of trackers//cookies

“Cookies” are small text files that are used to personalise your experience, analyse your behaviour and ensure that sites function properly.

11.2 Trackers used by the City of Marseille

Cookie	Purpose of the processing	Partner’s conditions
Matomo	Anonymised tracking	https://fr.matomo.org/guide/manage-matomo/privacy/

11.3 Configuring your cookie preferences

In accordance with the recommendations of the CNIL, certain cookies do not require your prior consent insofar as they are strictly necessary for the proper functioning of the website. The City of Marseille uses some of these cookies.

In accordance with the recommendations of the CNIL, certain cookies do not require your prior consent insofar as they carry out anonymised tracking, and therefore do not process any personal data. The City of Marseille uses some of these cookies (Matomo).

This family of cookies, known as “third-party cookies”, includes audience measurement cookies, advertising cookies and social networking cookies. These cookies are not mandatory and you can reject them at any time. Without any action on your part, they will not be applied by default. The City of Marseille does not use such cookies.

11.4 Maximum storage period for trackers

Trackers are stored for a period of up to 13 (thirteen) months.

11.5 Additional settings

You can remove or disable the use of trackers at any time by changing your browser settings. Every Internet browser has its own settings for managing cookies :
- Pour Google-Chrome : https://support.google.com/chrome/answer/95647?hl=fr
- Pour Internet-Explorer : http://windows.microsoft.com/fr-fr/internet-explorer/delete-manage-cookies#ie=ie-11
- Pour Mozilla-Firefox : http://support.mozilla.org/fr/kb/activer-desactiver-cookies
- Pour Safari : http://www.apple.com/fr/privacy/use-of-cookies/

For more information on cookie management tools, please consult the cookie management tools page on the CNIL website at : https://www.cnil.fr/fr/cookies-et-autres-traceurs/comment-se-proteger/maitriser-votre-navigateur