Privacy policy

This privacy policy (hereinafter the "Policy") is published by Proteiform' Productions, a single-member limited liability company, registered with the Paris Trade and Companies Register under number 495277659, whose registered office is located at 225, rue du Faubourg Saint-Honoré – 75008 Paris, tel: +33 (0)6 60 23 47 22, e-mail: info@privatechoice.fr (hereinafter "Private Choice", also referred to hereinafter as "we", "our", "us").

When you browse our website and/or when you register for our events and/or when you reserve a work on our site, we may collect and process some of your personal data, as data controller (hereinafter "Data Controller") within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").

As such, in its capacity as Data Controller, Private Choice is mindful of respecting the privacy of its customers and protecting their personal data. Private Choice is committed to ensuring that its processing of personal data complies with the applicable provisions of the GDPR and Law No. 78-17 of 6 January 1978 on data processing, files and freedoms.

The purpose of this Policy is to inform you about Private Choice's practices regarding the collection, use, and sharing of information and personal data that you may provide to us.

I. Collection and processing of personal data carried out by Private Choice

I.1 Contact form on the Private Choice website

When you contact Private Choice via the contact form available online at the following address www.privatechoice.fr/contact, or by sending an e-mail, Private Choice collects some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number.

This data is stored and used exclusively for the purpose of responding to your request and contacting you.

The legal basis for the processing of this data is Private Choice's legitimate interest in responding to your request in accordance with Article 6.1 (f) of the GDPR.

The purposes of the data processing carried out are:

• To respond to your requests;
• To communicate with you: making contact.

The data collected is stored for a period of three years, after which it will be deleted or archived.

At the end of this period, all of your collected data will be automatically deleted, unless you exercise your right to delete it before this deadline, or a longer retention period is required under a legal or regulatory provision.

I.2 Registration for a Private Choice event

When you register online for an event organised by Private Choice via the following web page: www.privatechoice.fr/reservation, we collect and process some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number, professional status.

The legal basis for processing this data is the conclusion of a contract with the person concerned, in accordance with Article 6.1 (b) of the GDPR.
The data processing carried out is for the purpose of delivering invitations to Private Choice events, a free service provided by Private Choice.

After your last participation in an event organised by Private Choice or after your last contact with Private Choice, your data will be kept for three years, after which it will be deleted or archived.

After your participation in the Private Choice event, we may also send you promotional communications for similar events, by post and/or by e-mail. This processing of personal data is based on our legitimate interest within the meaning of Article 6.1 (f) of the GDPR, without it being obligatory to obtain your prior consent for this. If you no longer wish to receive such communications, you can object at any time, following the instructions provided in each of these communications. As soon as we receive your request, we will no longer send you promotional communications.

I.3 Subscription to the Private Choice Newsletter

When you subscribe to our newsletter by e-mail, we will send you e-mails to keep you informed of our events, news and offers. In this context, Private Choice collects some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number.

This data is stored and used exclusively for the purpose of sending you our Newsletters.

The legal basis for processing this data is your consent, in accordance with Article 6.1 (a) of the GDPR.

You can withdraw your consent at any time via the link provided for this purpose in each of the newsletters or by sending us an e-mail to the address specified in the « contact us » section of this Policy.

The data collected is stored for a period of three years, after which it will be deleted or archived.

At the end of this period, all of your collected data will be automatically deleted, unless you exercise your right to delete it before this deadline, or a longer retention period is required under a legal or regulatory provision.

I.4 Reservation of a work on the Private Choice website

When you reserve a work or art object on our website, we collect and process some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number, professional status, bank details. We process and collect this data to respond to your request, process your order, and inform you about the status of this order.

The legal basis for processing this data is compliance with our contractual obligations, in accordance with Article 6.1 (b) of the GDPR.
The data processing carried out is for the purpose of managing your reservation.

After your last reservation of a work or art object with Private Choice or after your last contact with Private Choice, your data will be kept for three years, after which it will be deleted or archived.

After your reservation of a work or art object with Private Choice, we may also send you promotional communications for similar events, by post and/or by e-mail. This processing of personal data is based on our legitimate interest within the meaning of Article 6.1 (f) of the GDPR, without it being obligatory to obtain your prior consent for this. If you no longer wish to receive such communications, you can object at any time, following the instructions provided in each of these communications. As soon as we receive your request, we will no longer send you promotional communications.

I.5 Visiting our Private Choice website

If you visit our website to obtain simple information about Private Choice, without subscribing to an invitation and without contacting us directly, in this context, we collect the personal data that your browser transmits to our server (the « server log files »). Private Choice collects the following data, which is necessary to display the website:

• Browser used;
• Operating system used;
• IP address;
• Date and time of access;
• Quantity of data sent in bytes;
• Source from which you came to the page.

This data is stored and used exclusively for the purpose of ensuring access to and the functionality of our website.

The legal basis for processing this data is our legitimate interest in providing access to our website, in accordance with Article 6.1(f) of the GDPR.

You can consult our cookie policy to manage your settings and obtain detailed information on this subject.

II. Retention period of personal data

In accordance with the GDPR, we will use your personal data for specified purposes for which it was collected (as described in Article I above) or to comply with any regulations (e.g., commercial or tax regulations), and for limited periods.

The following table summarises the periods for which we retain your personal data:

Category of personal data	Retention period
Personal data related to a contact request	Three (3) years from the collection of the data and/or the last contact with the prospect
Personal data related to registration for a Private Choice event	For the entire duration of the contract and three (3) years from the last active contact with the customer/prospect
Personal data related to the reservation of a work on the Private Choice site	Three (3) years from the collection of the data and/or the last contact with the prospect
Personal data related to the promotion of Private Choice (for example, sending the newsletter)	Three (3) years from the collection of the data and/or the last contact with the prospect
Cookies and log files	13 months from the deposit of the cookie

In addition, unless more specific information is provided in this Policy, Private Choice archives or deletes all stored personal data when it is no longer necessary for the purposes for which it was collected and processed.

III. Obligations of Private Choice

For the processing of personal data carried out in particular via the website, Private Choice is the Data Controller.

As Data Controller, Private Choice undertakes to:

Process your personal data fairly and lawfully for specified purposes;

Process your personal data only for the purposes described in Article I of this Policy;

• Implement all appropriate technical and organisational measures necessary to ensure the security, confidentiality, integrity, availability and resilience of process systems and services;
• Limit access to your personal data to individuals duly authorized to do so;
• Raise awareness and train employees in the processing of personal data;
• Notify the competent supervisory authority of any security breach that poses a serious risk to the rights and freedoms of users of our website within 72 hours of such a breach occurring;
• Ensure that subcontractors, as defined by the GDPR, have implemented all the necessary technical and organizational measures to guarantee the security, confidentiality, integrity, availability, and resilience of processing systems and services.

IV. Recipients of the data collected

The personal data collected and processed by Private Choice is only accessible to individuals duly authorized for administrative, commercial, or maintenance purposes related to the website and the organization of Private Choice events.

The collected data may be transmitted to our service providers, IT providers, and hosting providers in compliance with the provisions of this Policy. These service providers are external companies that may be called upon to assist us in ensuring our activities.

Subcontractors and service providers, as well as their personnel, are subject to an obligation of confidentiality and may only use the data, on our behalf, for the specific tasks entrusted to them, based on our instructions, in accordance with the aforementioned purposes and in compliance with the provisions of the GDPR.

Private Choice's service providers are:

• For the operation of the Private Choice website: OVH, a simplified joint-stock company registered with the Lille Trade and Companies Register under number 424 761 419, with its registered office located at 2 rue Kellermann – 59100 Roubaix – France. All data collected on our website is stored on OVH's servers.
• For sending e-mailing campaigns and newsletters: Mailchimp, a limited liability company registered in Georgia, USA, whose legal name is The Rocket Science Group LLC d/b/a Mailchimp.

Private Choice may share personal data with third parties when required by law, or if such communication is necessary to respond to any claim made against it, to comply with any legal request, in the event of an emergency involving public health or the physical integrity of a person, as part of investigations, or to guarantee the rights, property, and safety of Private Choice.

V. Your rights

Under the GDPR, you have several rights.

You have the right to access and receive a copy of the personal data concerning you that Private Choice holds.

You have the right to access your personal data in order to rectify, modify, or erase any errors or incorrect information.

You also have the possibility to request the deletion and erasure of all data held by Private Choice.

You also have the right to object at any time to the processing of your personal data for marketing purposes or to the processing carried out.

You have the right to request the suspension of the processing of your personal data.

You have the right to data portability, that is, the right to receive the data we hold in a structured, commonly used, and readable format, and the right to transmit this data to another data controller.

You have the right to define guidelines regarding the fate of your personal data after your death.

All of these rights can be exercised by simply sending a written request, accompanied by a copy of a valid and signed proof of identity, by email to the following email address legal@privatechoice.fr or by post to the following address:
Proteiform’ Productions – Monsieur Tristan Candet – 225, rue du Faubourg Saint-Honoré – 75008 Paris.

To ensure Private Choice can respond to you within a reasonable timeframe, your request must be clear, precise, and justified. Private Choice reserves the right not to respond to any request that does not meet these criteria.

You also have the right to contact and lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (https://www.cnil.fr) and the right to obtain compensation from the competent courts.

VI. Security

Your personal data is processed securely.

Private Choice has implemented IT security measures and technical measures to limit any data leaks, loss, damage, or theft, and to protect data against any cyberattack and viruses.

Private Choice ensures that subcontractors and external service providers implement appropriate security measures that comply with the requirements of the GDPR.

VII. Data Transfer

Private Choice retains the personal data it collects within the European Union.

Private Choice may use services provided by specialized companies, acting as subcontractors as mentioned above. When these companies transfer data outside the European Union, Private Choice has taken care to verify that these companies ensure a high level of protection that complies with the requirements of the GDPR.

VIII. Cookies

A cookie (hereinafter referred to as "Cookie") is a string of information, generally small in size, and identified by a name, which can be transmitted to your browser by a website to which you connect. Your web browser will keep it for a certain period of time, and send it back to the web server each time you reconnect to it. Cookies have multiple uses: they can be used to remember your customer ID with a merchant site, the current contents of your shopping cart, an identifier to track your browsing for statistical or advertising purposes, etc.

Browsing the Private Choice website may result in the installation of Cookies on your browsing device.

Refusing the placement of Cookies on your browser may prevent you from accessing certain services available on the Private Choice website.

You can configure your browser to refuse the installation of Cookies by going to the settings menu.

Please consult our Cookie Policy.

IX. Modification of the Privacy Policy

Private Choice reserves the right to modify this Policy at any time.

X. Contact Private Choice

For any questions relating to the management of personal data at Private Choice, or relating to this Policy, you can contact us by email at the following address: legal@privatechoice.fr or by post to the following address:
Proteiform’ Productions – Monsieur Tristan Candet – 225, rue du Faubourg Saint-Honoré – 75008 Paris.