Personal data

The Établissement Public du Musée du Louvre (EPML), 75058 Paris Cedex 01, in its capacity as data controller, may collect, use, transfer, store or in some other way process your personal data for the management of its website.

The Data Protection Officer (DPO) for the EPML, appointed since March 13, 2019, is the Alain Bensoussan Selas law firm, 58 boulevard Gouvion-Saint-Cyr, 75017 Paris.

The EPML processes these data in accordance with its legitimate interests to encourage both individual and corporate donations to its patronage projects, and particularly to carry out the following operations:

  • managing and tracking donations;
  • issuing and sending donation receipts;
  • providing donors with perks and acknowledgements;
  • sending information, requests and invitations;
  • managing donor relations (answering questions made through the ‘contact’ form);
  • conducting studies and compiling statistics.

The registered data are reserved for the use of the EPML External Relations Department and accounting agency and may be shared with its subcontracted service providers: iRaiser (in charge of the online donation platform), and the companies B&C, Dolist and Edeal for the management of donor relations and dissemination of the newsletter.

Except in the case of tax data covered by Article 102B of the Book of Tax Procedures, the personal data thus collected are kept for a period of 3 years from the last contact with the donor.

The collected data are not transferred across borders.

In accordance with the French Data Protection Act of 6 January 1978 and the General Data Protection Regulation (EU GDPR) of 27 April 2016, you have the right to access, amend, correct or remove data concerning you. You may thus request to have any inaccurate, incomplete, ambiguous, or outdated information about you corrected, completed, clarified, updated, or erased. You may also exercise your rights to oppose and limit the processing of data, as well as your right to the portability of personal data.

The right to data portability applies to:

  • your personal data only, and therefore excludes anonymised personal data or data that do not concern you;
  • declarative personal data and any personal data relating to the functioning of the EPML;
  • personal data that do not infringe upon third-party rights and freedoms, such as those protected by an obligation of professional secrecy.

This right is limited to processing based on consent or on a contract, as well as to the personal data that you have generated yourself. This right does not include derived or inferred data, these being personal data created by the Data Controller.

You have the right to provide instructions related to the storage, deletion, and communication of your personal data following your death. You may provide post-mortem instructions and exercise your aforementioned rights by writing to the Musée du Louvre, 75058 Paris Cedex 01 or by email at donneespersonnelles@louvre.fr.

We reserve the right to ask you to justify your identity. Should there be any doubt regarding your identity, the EPML may ask for further evidence, such as the photocopy of a piece of identification bearing your signature.

You have the right to lodge a complaint with the CNIL (the French Data Protection Authority): 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07.