Abbreviations:
- DCP: Personal Data
- GDPR: General Data Protection Regulation
- CNIL: National Commission for Information Technology and Civil Liberties
- DPD/DPO: Data Protection Delegate / Data Protection Officer
This Personal Data Management Policy (DCP) describes how your data is processed when using the website of the Jules Chéret Fine Arts Museum “www.musee-beaux-arts-nice.org” and other websites owned by the City of Nice, in compliance with European Regulation 2016/679 of April 27, 2016 on data protection (known as “GDPR”) and Law No. 78-17 of January 6, 1978 as amended, relating to Information Technology, Files, and Liberties (known as the “Information Technology and Liberties Act”).
The City of Nice, as the data controller, is committed to protecting the privacy of individuals and undertakes to take all necessary measures to ensure a high level of protection for your Personal Data. It determines the purposes and means of the processing it implements.
Compliance with Personal Data protection rules is a true factor of transparency and trust towards you.
I. Commitments of the City of Nice regarding the protection of personal data
The City of Nice undertakes to ensure that the processing of your Personal Data, carried out through its website “www.musee-beaux-arts-nice.org” and other websites owned by the City of Nice, complies with the GDPR and the Information Technology and Liberties Act.
The City of Nice undertakes to guarantee a high level of protection for your Personal Data. The City of Nice undertakes to process your Personal Data lawfully, fairly, and transparently.
Each electronic form or online service limits the collection of Personal Data to what is strictly necessary for the purposes for which it is processed and clearly indicates:
- the purpose of collecting your data;
- the legal basis for processing;
- whether this data is mandatory or optional for managing your request, and the possible consequences of not responding;
- who may have access to it;
- the retention period for this data;
- your rights over your data and how to exercise them with the City of Nice.
Collecting your data for specific, explicit, and legitimate purposes
Your Personal Data is collected for specific, explicit, and legitimate purposes, always related to the public service missions pursued by the City of Nice, and is not subsequently processed in a manner incompatible with these purposes.
Obtaining your prior consent
In the context of using the Jules Chéret Fine Arts Museum website and other websites owned by the City of Nice, the processing of your Personal Data is based on your consent, which you can withdraw at any time by sending an email to the Data Protection Officer (DPO) of the City of Nice: dpd@nicecotedazur.org.
Before collecting your data, the City of Nice ensures that your consent is freely given, specific, informed, and unambiguous.
Minimizing collected data
Your Personal Data is collected adequately and relevantly for the purposes pursued.
Your Personal Data is limited to what is necessary for the accomplishment of the purposes for which it is processed.
Limiting access to and recipients of your data
Only authorized staff of the City of Nice have access to your Personal Data strictly within the scope of their duties. They can only access the Personal Data necessary for the performance of their tasks.
Where applicable, only authorized recipients (natural or legal person, public authority, service, or other organization), authorized third parties, and subcontractors of the City of Nice (processing Personal Data on behalf of the City of Nice, under its instructions and authority) may be recipients of your Personal Data, strictly in compliance with Personal Data protection rules.
Limiting the retention of your data
Your Personal Data is kept for as long as necessary to achieve the purposes pursued (purposes for which your data was collected).
Your Personal Data is kept in a manner compliant with data protection rules.
Ensuring appropriate security
The City of Nice implements appropriate technical and organizational measures:
- to ensure a level of security adapted to the inherent risk of its Personal Data processing operations;
- to meet regulatory requirements for Personal Data protection;
- to protect your rights and your data from the design stage of processing operations.
Where applicable, strong clauses regarding Personal Data protection and confidentiality are put in place in contracts/agreements/commitments entered into with recipients and subcontractors of the relevant Personal Data.
Personal Data concerning you is processed in France, or at least in the European Union territory. If Personal Data were to be processed in a third country, the City of Nice undertakes to ensure that the concerned third country provides guarantees to ensure an adequate and appropriate level of data protection, in compliance with the GDPR and in particular the provisions relating to the transfer of Personal Data to third countries.
Respecting your rights
In accordance with the GDPR and the Information Technology and Liberties Act, you have the right to access data concerning you and to request its rectification and erasure.
You also have the right to data portability, the right to limit the processing of your data, and the right to organize the fate of your data after death.
II. Exercising your rights regarding Personal Data concerning you
To exercise your rights or for any questions about the processing of your data in the context of using the Jules Chéret Fine Arts Museum website and other websites owned by the City of Nice, we invite you to contact our DPO: dpd@nicecotedazur.org.
You can submit a complaint – online or by post – to the CNIL if you believe – after contacting our DPO – that your rights are not respected or that the processing implemented is not compliant with data protection rules.
National Commission for Information Technology and Civil Liberties (CNIL):
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07