Privacy policy - Mémorial de Caen

The SAEML Le Mémorial de Caen is as committed to preserving the memory of the 20th century history’s great events as it is to protect the privacy of individuals, and more particularly their personal data.

Indeed, personal data are not trivial information; they reveal elements related to the individual that you are. It is information that allows you to be identified, either directly or indirectly. It may include your name, your first name, your address or your credit card number.

As part of the management of the Mémorial de Caen website (The Caen Memorial museum website, (hereinafter the « Site »), the SAEML Le Mémorial de Caen (whose head office is located at Esplanade Général Eisenhower – CS 55026 – 14050 CAEN Cedex 4 – hereinafter referred to as “we” or “us” or the “Mémorial“) is required, in its capacity of data controller, to collect and process various categories of personal data related to the Site’s users (hereinafter referred to as “you” or “your“).

With a strong commitment to comply with the various rules on the protection of personal data arising from the General Data Protection Regulation 2016/679, which came into effect on May 25th, 2018 (hereinafter the « GDPR ») and the French Data Protection Act of 1978 in its amended version, including the obligation of transparency, we have drawn up this privacy policy for you. This policy aims to provide you with precise and complete information on the use we make of your data and on your various rights.

This policy may also be updated from time to time. We therefore encourage you to read it carefully and to consult it regularly on the Site. If you have any questions about our processing of your personal data, you can contact our Data Protection Officer directly at the following e-mail address: rgpd@memorialcaen.fr.

What personal data do we use?

On the Site, we may collect directly or indirectly from you the following personal data:

Your first and last names,
Title,
Your age,
Country of residence,
Department (if you live in France),
Your email address,
Your phone number,
Navigation data,
IP address,
Any personal data that you would spontaneously communicate to us when contacting us.

On what legal basis do we use your data and for how long do we store it?

We collect the personal data indicated above for specific purposes. Below you will find a table showing for each purpose of processing (i.e. the main objective of the use of your data) the legal basis (i.e. the basis on which the use of your data is lawful) that we use and the corresponding storage period that we apply:

Purpose	Legal basis	Storage period
Management of our newsletter	Your consent	Your data is stored until you unsubscribe from the newsletter

Purpose	Legal basis	Storage period
Management of your requests	Our legitimate interest in responding to your requests	Your data is stored for the time necessary to process your request and for a period of 3 years from the last contact

Purpose	Legal basis	Storage period
Management of functional and advertising cookies	Your consent	Your data is stored for a period of 25 months

Purpose	Legal basis	Storage period
Management of our marketing communication	Your consent	Your data is stored until you withdraw your consent, or 3 years after your last contact with us

Purpose	Legal basis	Storage period
Response to a legal obligation GDPR	Necessary processing to comply with a legal obligation	Your data is stored for the period required by law and then archived for the duration of the legal prescription

To whom do we transmit your data?

Members of our teams
Your personal data is only accessible to persons working within the Mémorial who are authorized by their function to process it, such as members of our sales, communication & marketing, accounting, or customer services departments. If necessary, the staff in charge of the management of the Site may have access to your data.
Our data processors
Your data is also transmitted to our external service providers, acting on our behalf, such as those involved in data hosting. We make sure that the latter present the necessary guarantees to respect the security and the confidentiality of your data.
Other organisations
We may also transmit your personal data to an administrative authority or an authorized public body, when required by law.

Is your data shared with recipients outside the European Union?

Your personal data is mainly processed within the European Economic Area (EEA). Nevertheless, some of your personal data, such as your browsing data, may be transferred to countries outside the EEA, whose level of protection would not be considered adequate by the European authorities.
For any data transfer outside the EEA, we undertake to put in place appropriate agreements or transfer mechanisms such as standard contractual clauses (SCC) adopted by the European Commission to provide appropriate safeguards for such transfers in accordance with applicable law.
For more information on transfers outside the EEA, you can contact us at the address indicated in the “How to exercise your rights” section.

How do we use cookies?

The Site and its partners place cookies or other tracking devices on your terminal in order to improve your browsing experience, measure the Site’s audience, deliver advertising tailored to your browsing profile, and enable you to share content on your social networks. With the exception of purely technical cookies, the placement of cookies on your terminal will require your prior consent, which you can express via our consent management tool. You can modify your choice at any time by clicking on the cookies logo in the bottom right-hand corner of your screen.
For your information, a cookie is a small text file or tracker placed on your browser which enables your terminal to be identified and recognized on future visits, thus improving your browsing experience. These cookies are placed on your terminal by the Site, or by third-party transmitters, when you visit certain parts of it or when you use certain of its functions.

What are your rights regarding your personal data?

In accordance with the regulations in force, you have the following rights:

The right to ask the Mémorial access to your personal data;
The right to request the rectification or deletion of your data;
If necessary, the right to request a limitation of the processing of your data;
The right to object to the processing, in particular when the purpose of the processing in question is marketing communication. For processing based on your consent, you may withdraw your consent at any time.
In certain circumstances, the right to portability of your personal data. The right to data portability enables you, where the processing of your data is based on your consent or on an agreement and is implemented using automated processes, to obtain from us that your data be provided to you in a structured, commonly used and machine-readable format. Personal data obtained in this way may then be passed on to another data controller without us interfering.

You may also define general or specific directives as to the fate of your personal data after your death. General directives can be registered with a trusted third party certified by the CNIL, while special directives can be addressed directly to the Mémorial.
For more information on your rights: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-données-personnelles.
If you believe that we are not complying with our obligations or your rights with respect to your personal data, you may file a complaint with the CNIL, in accordance with the applicable regulations.

How to exercise your rights?

You may exercise your rights at any time by contacting us at the following e-mail address: rgpd@memorial-caen.fr.

Last update: 19/09/2023