Last update : April 2021
The person in charge of the questions regarding the personal data protection of the Moulin Rouge can be reached at the following address firstname.lastname@example.org.
Constitutes a personal data any information related to the User, as identified individual or who could be identified, directly or indirectly, by reference to an identification number or to one or several elements of its own (notably its name, surname, date of birth, postal address, email address, photo, curriculum vitae, hereinafter referred “Personal Data”).
The Moulin Rouge and, where applicable, its subsidiaries and affiliates, protect the privacy of Users by complying with the laws in force.
To this end, the Moulin Rouge and, where applicable, its subsidiaries and affiliates, collect and process the Personal Data concerning the Users in accordance with the national and European laws in force and notably the Regulation (EU) 2016/679 of the General Data Protection Regulation (hereinafter “GDPR”).
All Personal Data is processed with due care and confidentiality.
- Collection of personal data
2.1 To view and visit the Websites, the User does not, in principle, have to provide any of his own Personal Data, excepting Cookies potentially implemented under the conditions specified hereunder.
The Moulin Rouge is only likely to collect Personal Data from Users through the tabs “CONTACT”, “NEWSLETTER”, “RECRUITMENT”, “ACCOUNT”, “ORDER” or “RESERVATION” in order to ensure proper monitoring of the requests made by the User.
In support of his application and to demonstrate his artistic talent, if he wishes, the User may also upload photographs and a link to a media of his choice so as to illustrate his skills (e.g. presentation of his CV on LinkedIn, performance art videos on YouTube, etc.).
2.4 When gathering the Personal Data, the User expressly agrees to provide only information that is complete, accurate and up to date, and not detrimental to the interests or the rights of third parties.
The information required in order to carry out the tasks described above is indicated by an asterisk in the different pages of the Websites concerned. The other information is optional.
- Purpose and legal basis of the processing of personal data
The personal data processing carried out by the Moulin Rouge has for legal basis the execution of the contract and the precontractual measures or the consent of the Users.
The Moulin Rouge processes Personal Data particularly in order to:
- send information related to the activities of the Moulin Rouge;
- manage the Users’ profiles and orders through the accounts;
- manage the reservation and ticketing services;
- carry out operations related to promoting the activities of the Moulin Rouge, including commercial prospecting and the management of technical prospecting operations (which includes, in particular, technical operations such as standardization, enrichment and data deduplication) in compliance with the laws in force;
- manage requests from Users and develop the statistics needed to improve the Websites;
- organise contests, lotteries or any promotional activity;
- carry out the recruitment of new artistic talent and manage the applications;
- manage requests for the right to access, correct, object, limit and have personal data deleted in accordance with the General Terms and Conditions.
- Recipients of the personal data
The Moulin Rouge is responsible, as controller, for the processing of the Personal Data of Users As listed here above.
ATHYS, a limited liability company with capital of €7,622.45, registered with the Trade and Companies Register of Paris under the number RCS 410 723 886, having its registered office at 82 Boulevard de Clichy – 75018 Paris, as a subsidiary of the Moulin Rouge, is the recipient and sole party responsible for processing the Personal Data of Users wishing to apply as an artist or dancer.
Within the limits of their respective duties, the following parties may have access to all or part of the Personal Data:
- the teams in charge of developing the Websites, and promoting the commercial products and services of the Moulin Rouge;
- the teams in charge of auditing (auditor, teams responsible for internal audit procedures…);
- the subsidiaries and affiliates of the Moulin Rouge in charge of managing all or part of the services offered by the Websites, including recruitment activities;
- the subcontractors in charge of providing the technical services related to the administration, maintenance and hosting of the Websites, in compliance the national and European provisions applicable regarding the personal data protection;
- the subcontractors in charge of ensuring the secure online payment services, in compliance with the provisions of the the national and European provisions applicable regarding the personal data protection;
- organisations, court officials and ministerial officers.
- Storing and security of the personal data
5.1 Personal Data Retention
The Personal Data is generally stored for as long as it is strictly necessary for managing the relationship between the Moulin Rouge and the Users. The durations of the personal data retention depend on the purposes for which the data are collected and processed.
The Personal Data is stored by the Moulin Rouge throughout the effective period of use of the Websites by the User and, where applicable, for a maximum period of 3 years from the User’s last login to his account.
At the end of this 3-year period, the Moulin Rouge may contact the User again to see if he wants to keep his account and continue to receive information related to the activities of the Moulin Rouge. In the absence of an explicit and positive response from the User, his Personal Data will be deleted or anonymized according to the provisions in force.
Personal Data which enables establishing proof of a purchase or reservation may, however, be archived in accordance with the provisions in force (in particular that provided under the Commercial Code, the Civil Code and the Consumer Code).
Personal Data relating to recruitment activities (tabs “CASTING ATTRACTIONS” and “DANCER AUDITIONS”) is stored for a period of 5 years from the last contact with the candidate.
All processing operations that may be initiated by Bal du Moulin Rouge is summarized in the table hereafter:
|Processing operations of personal data table|
|Purposes||Collected data and collection method||Data controller||Legal basis of the processing||Duration of retention||Recipients|
|Management of the registrations and sending of the newsletter||– Email address, year of birth, gender, country, postal code, according to the information available on https://www.moulinrougestore.com/newsletter and on the http://www.moulinrouge.fr/page_newsletter– Last name, surname, email address, password according to the information available on https://www.moulinrougestore.com/customer/account/create/
Collection made by the mean of a form on the official websites of Moulin Rouge.
|Contact – further information to clients / Moulin Rouge official websites’ visitors, notably on the chatbot||– Conversations content between the client / visitor of the website www.moulinrouge.fr and the reservations agent processing the request- IP address of the client/visitor, civil status, identity, number of conversations, answers to the satisfaction survey
Collection processed on the chatbot available on the pages of the website www.moulinrouge.fr
|Bal du Moulin Rouge||Consent of the persons concerned.||– The data of the chatbot are stored during 3 years from the moment of their collection or the last contact.- Video/cal/sms: data are stored during 12 months into an active base.
– Semi-current archives: five years
– Other data (number of consulted pages, date and hour of the session, navigator language, ID of the website, duration of the navigation, etc) are stored one day by the data processor, or twelve months for the visits’ number on the website or the unique ID of the client/visitor.
|– Strategic Marketing service- Reservation service
– The data processor delivering the chatbot service (iAdvize)
|Order – order of products on the Moulin Rouge eshop||– Last name, surname, email address, postal address, phone number- Data regarding the transaction, the follow-up of the commercial relationship, etc…
Collection processed during the order on www.moulinrougestore.com
|Bal du Moulin Rouge||Implementation of the contract||As financial records and supporting documents, the data are stored during ten years.||– Strategic Marketing service- The data processor managing the orders (payment platform)
– The data processor managing the backoffice of the website www.moulinrougestore.com
– Logistics officer
|Reservation – reservations management through the official website of the Moulin Rouge||– Civility, last name, surname, company, postal address, email address, phone number- Data related to the transaction
Collection made by the mean of a form available on the reservation website of the Moulin Rouge www.moulinrouge.fr/reservations
|Bal du Moulin Rouge||Implementation of the contract||As financial records and supporting documents, the data are stored during ten years.||– Reservation service- IT service|
|Statistics of audience measurement||Data stored in the terminal of the Users (the Cookies for instance) or any other element used to identify the users and track the users (web analytic tool).Collection processed on the official websites of the Moulin Rouge through the cookies||Bal du Moulin Rouge||User’s consent formalized by the acceptance of cookies via a banner||The data are stored by default on the web analytic tool during 24 months from the moment of collection of the consent.||– Strategic Marketing service- Google Inc.
– The data processor managing the web analytic tool
5.2 Security measures
The Moulin Rouge, and, where applicable, all of its subsidiaries and affiliates, undertakes to provide all appropriate measures to ensure the confidentiality and security of the Personal Data, and to protect it against any loss, misuse, unauthorised disclosure, alteration or destruction.
The computer systems used for the storing of Personal Data are equipped with a software protection system. Physical and electronic procedures are implemented for backing up the data collected from the Websites, in accordance with the French and European laws in force on the protection of Personal Data.
The employees of the Moulin Rouge, and, where applicable, subsidiaries and affiliates, who, because of their position, have access to the Personal Data, undertake to maintain the utmost confidentiality in this respect.
The personal account of each User can only be accessed by using the login ID, such that only the User has access to the Personal Data contained in his profile. The Moulin Rouge reminds the User that these logins IDs are personal and confidential, and that the User is solely responsible for their use and their disclosure to third parties.
For all practical purposes, the Moulin Rouge recommends that the User log out of his account and close the browser window after finishing his session on the Websites.
The Moulin Rouge has entrusted its payment system to a company specialised in secure online payments, which guarantees total confidentiality of the User’s bank information, secured by SSL protocol which systematically controls the validity of access rights when the User pays by credit card and encrypts all transactions in order to guarantee their confidentiality.
- Rights of users
In accordance with the regulations in force, the Users shall at all times have the right to access, rectify, delete or oppose personal data concerning them and limit the processing of their personal data.
The Users have the right to ask, as soon as possible, for the deletion of their personal data collected when the User was under age at the moment of the collection.
The Users have the right to withdraw their consent at any time for parts of the processing made by the Moulin Rouge based on this consent.
The Users have the opportunity to ask for the transfer of all the personal data in a structured format in which case they would wish to transfer them to another data controller.
The Users can, à any time, modify and revoke directives related to the retention, the deletion and the communication of personal data concerning them after their death.
The Users are informed that the Moulin Rouge do not use an automated processing for the personal data, including the profiling, neither to the transfer of their personal data outside of the European Union territory.
To exercise this right and to obtain communication of the information, the User must simply send his request for such information to the Moulin Rouge. In order for the Moulin Rouge to be able to honour the User’s request, the User must send it the information necessary to formally identify him, including his name, address and email address, by email sent to the following address: email@example.com or by ordinary mail to the following address:
Bal du Moulin Rouge
82 Boulevard de Clichy
Any questions regarding the processing of the candidates’ (dancers, artists) Personal Data can also be made in the same conditions, addressed to ATHYS, a subsidiary of Moulin Rouge, by sending an email to the following address: firstname.lastname@example.org or by ordinary mail to the following address:
82 Boulevard de Clichy
WARNING: due to material and technical constraints, the processing times for requests from Users will inevitably be increased if the request is made by mail.
7.1 As part of operating the Websites, the Moulin Rouge may have to install cookies on the hard drive of the User’s computer (i.e. a file containing information on the User’s browsing activity on the pages of the Websites). It could be cookies enabling to identify the User but recording a certain amount of information necessary for the User to browse the Websites (browser language, the date and time of visit, pages viewed, etc.) or Google Analytics cookies enabling to identify the User (geographic information by way of the IP address). On subsequent visits by the User on the Websites, the Moulin Rouge will be able to read the cookies installed particularly in order to allow and/or facilitate the User’s browsing experience on the Websites.
The User’s consent is required on the initial visit to each of the Websites run by the Moulin Rouge: http://www.moulinrouge.fr/cookies-policy?lang=en.
- Moulin Rouge’s accounts on social networks
To promote its activities and share news of its review with the general public, the Moulin Rouge has a personal account on various social media networks (Facebook, Twitter, Pinterest and Instagram). The User can access, monitor and comment on current events about the Moulin Rouge, in accordance with the General Terms and Conditions of Use and the Personal Data Policy in force on these social networks.
The User thus acknowledges that it is his responsibility to read beforehand the conditions in force for accessing, following and sharing on these social networks. The Moulin Rouge shall not be liable for the processing of personal data by the publishers of these social networks, except for processing from the specific parameters settings carried out by the Moulin Rouge on this social medias’ platforms, if applicable, for which the Moulin Rouge is joint data controller.