Privacy Policy
Effective from 29 April 2022La Boutique des Théâtres (business name The Theatre Boutique) is committed to provide you with the best experience, processing the information you give us being part of that commitment. We are transparent about how we collect and use your personal data in a way that both respects your rights and ensures you get the best experience.
To that end, this Privacy Policy explains to you clearly and simply how The Theatre Boutique collects and uses customer’s information and how you can exercise control and your rights over the data you provide to us when you use our services.
Should you have any further question relating to the management and use made of your personal data, you may contact The Theatre Boutique:
|
Let’s start with some definitions.
- What is personal data?
“Personal data” means any information relating to a person which allows that person to be identified once the information is processed. The person to which a data is relating to is the “data-subject”. For instance, a name, your credit card number or your email address are personal data.
- What is a personal data processing?
“Personal data processing” means any operation or set of operations which is performed on personal data (or sets of personal data) such as: collection, recording, organization, structuring, storage etc. For instance, the registration of a transaction related to an order by a customer implies the processing of their personal data (name, delivery address etc.).
- Who is data controller?
A “data controller” is a person who determines the means and purposes of the personal data processing. There can be several data controllers as two or more persons jointly determine the purposes and means of the personal data processing. For instance, The Theatre Boutique acts as a data controller when it collects and uses your mail address in order to make sure the delivery of your order can be properly carried out.
- Who is data processor?
A “data processor” is the person who will actually perform the personal data processing operations on behalf of the data controller. For instance, the payment service provider who uses your bank details to debit you for your order, on command of The Theatre Boutique is a data processor.
Then you may wonder about:
- How do we process your personal data?
- What measures are taken to secure your data?
- Why do we process your personal data?
- Who can access your data and where?
- What are your rights regarding your personal data and how to exercise them?
In addition, You can find special information on the use of cookies and trackers by clicking on "Manage Website Data Collection Preferences" at the bottom of this page. |
1. How do we process your personal data?
The Theatre Boutique collects directly from you your personal data when:
- You navigate on The Theatre Boutique’s website, with the understanding that your navigation data may be used to target your preferences and your interests in order to adapt our commercial and advertising offers.
- You create or connect to an account on The Theatre Boutique’s website.
- You communicate with The Theatre Boutique (emails, online request, letters, etc.).
The Theatre Boutique keeps your personal data for durations that may vary depending on the nature of the data and the purpose of each processing. Those durations are detailed for each processing of your personal data in the Annex I attached bellow.
2. What measures are taken to secure your data?
The Theatre Boutique and its subcontractors undertake to ensure day to day the integrity, the security and confidentiality of your personal data.
Depending on the risks attached to the processing of your personal data given their nature, The Theatre Boutique implements different technical and organizational measures as required by applicable law to date (such as running an authentication process with a secure access based on personal and confidential identifiers for instance).
3. Why do we process your personal data?
Depending on the use you make of our services, The Theatre Boutique and its subcontractors process your personal data for the following purposes:
- Make the website and its functionalities available and ensure its proper functioning and continuous improvement;
- Create your account and access to the website’s features;
- Create content relating to you on the website with your consent;
- Book and manage access to content;
- Proceed with payment;
- Communicate with you about the website and its content;
- Communicate with you about products or services;
- Communicate with you when answering and managing your questions;
- Respond to and manage your requests related to the exercise of your rights over your personal data;
- Ask you for, collect and process your opinions and comments about a content;
- Target your preferences and your interests in order to adapt our commercial and advertising offers;
- Establish trade statistics to evaluate the level of transactions for product categories based on economic and geographic criteria;
- Detect, prevent and react to fraud;
- Ensure The Theatre Boutique’s defence in court;
- Comply with a legal request.
You can find the detailed purposes and legal basis of each processing of your personal data in the Annex I attached bellow.
4. Who can access your data and where?
Our work requires us to share some of your data with our subcontractors or with other recipients when required by law.
Therefore, the following recipients may access your data:
- Our subcontractors and their authorized personnel as listed in the Annex II attached below;
- Every public authority, institution, all courts of competent jurisdiction, mediators, accountants, auditors, lawyers, bailiffs when such a cooperation is required by law.
Depending on where you are located, subcontractors may transfer your personal data, as part of the processing, to countries other than your home country or region.
The Theatre Boutique does neither exchange nor sell Your personal data to other subcontractors than those mentioned here above and in Annex II.
5. What are your rights regarding your personal data and how to exercise them?
The Theatre Boutique complies with the European General Data Protection Regulation (GDPR). This means you have the following data protection rights:
Right of access: You have the right to request information about the processing of your personal data and to obtain a copy of your personal data (Article 15 GDPR).
Right of rectification: You have the right to request the rectification of inaccurate personal data about you and for any incomplete personal data about you to be completed (Article 16 GDPR).
Right of objection: You have the right to object to the processing of your personal data, understanding it may put an end to your benefit of our services (Article 21 GDPR).
Right to erasure: Under certain conditions, you have the right to request the erasure of your personal data (Article 17 GDPR).
Right to reject an automated decision: You have the right not to have a decision made about you that is based solely on automated processing if that decision produces legal or similarly significant effects concerning you (Article 20 GDPR).
Right to restriction: You have the right to ask The Theatre Boutique to restrict its processing of your personal data, so that it no longer processes that information until the restriction is lifted (Article 18 GDPR).
Right to portability: In certain circumstances, you have the right to receive your personal data, which you have provided to The Theatre Boutique, in a structured, commonly used, and machine-readable format and to have that information transmitted to another organization (Article 20 GDPR).
Right to withdrawal of consent: You have the right to withdraw your consent at any time (Article 13.2 c GDPR).
Right to set your personal data’s fate after death: You have the right to define the fate of your data after your death and to choose that we communicate (or not) your data to a third party that you have previously designated.
In any case, should you consider that our processing of your personal data violates the applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
- For UK’s Data protection authority, the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/
- For France’s Data protection authority, the Commission nationale d’informatique et des libertés (CNIL): https://www.cnil.fr/en/plaintes
In order to exercise your data protection rights, you may directly contact us:
- By email at dpo@thetheatreboutique.com
- By mail to 159 Rue des Bougainvilliers 06210 MANDELIEU-LA NAPOULE, France
Please note that although we will use our best efforts to respond to your requests, The Theatre Boutique reserves the right to reject requests or impose restrictions or requirements upon such requests when required by applicable law. The Theatre Boutique also reserves the same right when permitted by applicable law, especially facing abusive requests.
Annex I
Purpose |
Personal data categories |
Legal basis |
Data controller(s) |
Recipient(s) |
Retention duration |
Make the website and its functionalities available and ensure its proper functioning and continuous improvement |
IP address |
Performance of a contract (Terms of Use) |
Website provider |
Website provider |
The time of the visit on the website |
Create your account and access to the website’s features |
IP address |
Performance of a contract (Terms of Use) and Consent (when you create an account and to functional cookies) |
The Theatre Boutique |
Website provider |
5 years from the termination of your account The time of the visit on the website for functional cookies |
Create content relating to you on the website’s |
IP address |
Consent (to functional cookies) |
Website provider |
Website provider |
6 months |
Book and manage access to content |
IP address |
Performance of a contract (Terms of use) |
Website provider |
Website provider |
The time of the visit on the website |
Proceed with payment |
Name |
Performance of a contract (General terms of sale) |
The Theatre Boutique |
Payment service provider |
5 years |
Communicate with you about the website and its content |
Email address |
Consent (to the newsletter) |
The Theatre Boutique |
Website provider Newsletter service provider |
1 year |
Communicate with you about products or services |
Email address |
Consent (to the newsletter) |
The Theatre Boutique |
Website provider Newsletter service provider |
1 year |
Communicate with you when answering and managing your questions |
Email address |
Performance of a contract (Terms of use) and Consent |
The Theatre Boutique |
Website provider Email service provider |
5 years |
Respond to and manage your requests related to the exercise of your rights over your personal data |
Email or postal address |
Legal requirement |
The Theatre Boutique |
Website provider Email service provider |
5 years |
Ask you for, collect and process your opinions and comments about a content |
Email address |
Legitimate interest |
The Theatre Boutique |
Website provider |
6 months |
Target your preferences and your interests in order to adapt our commercial and advertising offers |
IP address |
Consent (to targeting and advertising cookies) |
Website provider |
Website provider |
6 months |
Establish trade statistics to evaluate the level of transactions for product categories based on economic and geographic criteria |
IP address |
Consent (to analytics cookies) |
Website provider |
Website provider |
2 years |
Detect, prevent and react to fraud |
Email address |
Legal requirement |
Payment service provider |
Payment service provider |
5 years |
Ensure The Theatre Boutique’s defence in court |
Account details |
Legitimate interest |
The Theatre Boutique |
Persons connected with the case before the court (lawyers, judge…) |
5 years |
Comply with a legal request |
Account details |
Legal requirement |
Legal authority |
Legal authority |
5 years |
Annex II
Subcontractor |
Shared personal data |
Country of receipt |
BigCommerce |
IP address Order details Account details |
Any country, please see https://www.bigcommerce.com/privacy/ (14. Accountability and Safeguards for Onward Transfer) |
Stripe |
IP address Banking details |
Any country, please see https://stripe.com/gb/privacy#security-and-retention (6. International data transfers) |
Microsoft |
Names Email address Order details |
Any country, please see https://www.microsoft.com/en-ca/trust-center/privacy/data-location |