Privacy Policy

Privacy Policy

Effective from 29 April 2022
 

La Boutique des Théâtres (business name The Theatre Boutique) is committed to provide you with the best experience, processing the information you give us being part of that commitment. We are transparent about how we collect and use your personal data in a way that both respects your rights and ensures you get the best experience.

To that end, this Privacy Policy explains to you clearly and simply how The Theatre Boutique collects and uses customer’s information and how you can exercise control and your rights over the data you provide to us when you use our services.

 

Should you have any further question relating to the management and use made of your personal data, you may contact The Theatre Boutique:

  • By mail to 159 Rue des Bougainvilliers 06210 MANDELIEU-LA NAPOULE, France

 

Let’s start with some definitions.

  • What is personal data?

“Personal data” means any information relating to a person which allows that person to be identified once the information is processed. The person to which a data is relating to is the “data-subject”. For instance, a name, your credit card number or your email address are personal data.

  • What is a personal data processing?

“Personal data processing” means any operation or set of operations which is performed on personal data (or sets of personal data) such as: collection, recording, organization, structuring, storage etc. For instance, the registration of a transaction related to an order by a customer implies the processing of their personal data (name, delivery address etc.).

  • Who is data controller?

A “data controller” is a person who determines the means and purposes of the personal data processing. There can be several data controllers as two or more persons jointly determine the purposes and means of the personal data processing. For instance, The Theatre Boutique acts as a data controller when it collects and uses your mail address in order to make sure the delivery of your order can be properly carried out.

  • Who is data processor?

A “data processor” is the person who will actually perform the personal data processing operations on behalf of the data controller. For instance, the payment service provider who uses your bank details to debit you for your order, on command of The Theatre Boutique is a data processor.

Then you may wonder about:

  1. How do we process your personal data?
  2. What measures are taken to secure your data?
  3. Why do we process your personal data?
  4. Who can access your data and where?
  5. What are your rights regarding your personal data and how to exercise them?

 

In addition, You can find special information on the use of cookies and trackers by clicking on "Manage Website Data Collection Preferences" at the bottom of this page.

 

1.      How do we process your personal data?

The Theatre Boutique collects directly from you your personal data when:

  • You navigate on The Theatre Boutique’s website, with the understanding that your navigation data may be used to target your preferences and your interests in order to adapt our commercial and advertising offers.
  • You create or connect to an account on The Theatre Boutique’s website.
  • You communicate with The Theatre Boutique (emails, online request, letters, etc.).

The Theatre Boutique keeps your personal data for durations that may vary depending on the nature of the data and the purpose of each processing. Those durations are detailed for each processing of your personal data in the Annex I attached bellow.

2.     What measures are taken to secure your data?

The Theatre Boutique and its subcontractors undertake to ensure day to day the integrity, the security and confidentiality of your personal data.

Depending on the risks attached to the processing of your personal data given their nature, The Theatre Boutique implements different technical and organizational measures as required by applicable law to date (such as running an authentication process with a secure access based on personal and confidential identifiers for instance).

3.     Why do we process your personal data?

Depending on the use you make of our services, The Theatre Boutique and its subcontractors process your personal data for the following purposes:

  • Make the website and its functionalities available and ensure its proper functioning and continuous improvement;
  • Create your account and access to the website’s features;
  • Create content relating to you on the website with your consent;
  • Book and manage access to content;
  • Proceed with payment;
  • Communicate with you about the website and its content;
  • Communicate with you about products or services;
  • Communicate with you when answering and managing your questions;
  • Respond to and manage your requests related to the exercise of your rights over your personal data;
  • Ask you for, collect and process your opinions and comments about a content;
  • Target your preferences and your interests in order to adapt our commercial and advertising offers;
  • Establish trade statistics to evaluate the level of transactions for product categories based on economic and geographic criteria;
  • Detect, prevent and react to fraud;
  • Ensure The Theatre Boutique’s defence in court;
  • Comply with a legal request.

You can find the detailed purposes and legal basis of each processing of your personal data in the Annex I attached bellow.

4.     Who can access your data and where?

Our work requires us to share some of your data with our subcontractors or with other recipients when required by law.

Therefore, the following recipients may access your data:

  • Our subcontractors and their authorized personnel as listed in the Annex II attached below;
  • Every public authority, institution, all courts of competent jurisdiction, mediators, accountants, auditors, lawyers, bailiffs when such a cooperation is required by law.

Depending on where you are located, subcontractors may transfer your personal data, as part of the processing, to countries other than your home country or region.

The Theatre Boutique does neither exchange nor sell Your personal data to other subcontractors than those mentioned here above and in Annex II.

5.     What are your rights regarding your personal data and how to exercise them?

The Theatre Boutique complies with the European General Data Protection Regulation (GDPR). This means you have the following data protection rights:

Right of access: You have the right to request information about the processing of your personal data and to obtain a copy of your personal data (Article 15 GDPR).

Right of rectification: You have the right to request the rectification of inaccurate personal data about you and for any incomplete personal data about you to be completed (Article 16 GDPR).

Right of objection: You have the right to object to the processing of your personal data, understanding it may put an end to your benefit of our services (Article 21 GDPR).

Right to erasure: Under certain conditions, you have the right to request the erasure of your personal data (Article 17 GDPR).

Right to reject an automated decision:You have the right not to have a decision made about you that is based solely on automated processing if that decision produces legal or similarly significant effects concerning you (Article 20 GDPR).

Right to restriction:You have the right to ask The Theatre Boutique to restrict its processing of your personal data, so that it no longer processes that information until the restriction is lifted (Article 18 GDPR).

Right to portability:In certain circumstances, you have the right to receive your personal data, which you have provided to The Theatre Boutique, in a structured, commonly used, and machine-readable format and to have that information transmitted to another organization (Article 20 GDPR).

Right to withdrawal of consent: You have the right to withdraw your consent at any time (Article 13.2 c GDPR).

Right to set your personal data’s fate after death: You have the right to define the fate of your data after your death and to choose that we communicate (or not) your data to a third party that you have previously designated.

In any case, should you consider that our processing of your personal data violates the applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In order to exercise your data protection rights, you may directly contact us:

Please note that although we will use our best efforts to respond to your requests, The Theatre Boutique reserves the right to reject requests or impose restrictions or requirements upon such requests when required by applicable law. The Theatre Boutique also reserves the same right when permitted by applicable law, especially facing abusive requests.


Annex I

Purpose

Personal data categories

Legal basis

Data controller(s)

Recipient(s)

Retention duration

Make the website and its functionalities available and ensure its proper functioning and continuous improvement

IP address

Performance of a contract (Terms of Use)

Website provider

Website provider

The time of the visit on the website

Create your account and access to the website’s features

IP address
Email address
Name
Telephone number
Postal address

Performance of a contract (Terms of Use) and Consent (when you create an account and to functional cookies)

The Theatre Boutique

Website provider

5 years from the termination of your account

The time of the visit on the website for functional cookies

Create content relating to you on the website’s

IP address

Consent (to functional cookies)

Website provider

Website provider

6 months

Book and manage access to content

IP address

Performance of a contract (Terms of use)

Website provider

Website provider

The time of the visit on the website

Proceed with payment

Name
Bank details
Postal address
Phone number
Email address
Bank country
Order details

Performance of a contract (General terms of sale)

The Theatre Boutique

Payment service provider

5 years

Communicate with you about the website and its content

Email address
Name

Consent (to the newsletter)

The Theatre Boutique

Website provider

Newsletter service provider

1 year

Communicate with you about products or services

Email address
Name
Order details

Consent (to the newsletter)

The Theatre Boutique

Website provider

Newsletter service provider

1 year

Communicate with you when answering and managing your questions

Email address
Name
Order details

Performance of a contract (Terms of use) and Consent

The Theatre Boutique

Website provider

Email service provider

5 years

Respond to and manage your requests related to the exercise of your rights over your personal data

Email or postal address
Name
Order details

Legal requirement

The Theatre Boutique

Website provider

Email service provider

5 years

Ask you for, collect and process your opinions and comments about a content

Email address
Name
Order details

Legitimate interest

The Theatre Boutique

Website provider

6 months

Target your preferences and your interests in order to adapt our commercial and advertising offers

IP address
Account details

Consent (to targeting and advertising cookies)

Website provider

Website provider

6 months

Establish trade statistics to evaluate the level of transactions for product categories based on economic and geographic criteria

IP address
Geographic era of connection

Consent (to analytics cookies)

Website provider

Website provider

2 years

Detect, prevent and react to fraud

Email address
Name
Geographic area

Legal requirement

Payment service provider

Payment service provider

5 years

Ensure The Theatre Boutique’s defence in court

Account details
Order details

Legitimate interest

The Theatre Boutique

Persons connected with the case before the court (lawyers, judge…)

5 years

Comply with a legal request

Account details
Order details

Legal requirement

Legal authority

Legal authority

5 years


Annex II

Subcontractor

Shared personal data

Country of receipt

BigCommerce

IP address

Order details

Account details

Any country, please see https://www.bigcommerce.com/privacy/ (14. Accountability and Safeguards for Onward Transfer)

Stripe

IP address

Banking details

Any country, please see https://stripe.com/gb/privacy#security-and-retention (6. International data transfers)

Microsoft

Names

Email address

Order details

Any country, please see https://www.microsoft.com/en-ca/trust-center/privacy/data-location