Privacy policy

This privacy policy (hereinafter the "Policy") is published by Proteiform' Productions, a société à responsabilité limitée unipersonnelle, registered in the Paris Trade and Companies Register under number 495277659, whose registered office is located at 225, rue du Faubourg Saint-Honoré - 75008 Paris, tel: +33 (0)6 60 23 47 22, e-mail: info@privatechoice.fr (hereinafter " Private Choice ", also referred to hereinafter as "we", "us", "our(s)").

When you browse our website and/or register for our events and/or book a work on our website, we may collect and process some of your personal data, as a data controller (hereinafter "Data Controller") within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").

As such, in its capacity as Data Controller, Private Choice is sensitive to the privacy of its customers and the protection of their personal data. Private Choice undertakes to ensure the compliance of the processing of personal data that it carries out in accordance with the applicable provisions of the RGPD and Law n°78-17 of January 6, 1978 relating to data processing, files and freedoms.

The purpose of this Policy is to inform you about Private Choice 's practices regarding the collection, use and sharing of information and personal data that you may provide to us.

I. Collection and processing of personal data by Private Choice

I.1 Contact form on the Private Choice website

When you contact Private Choice via the contact form available online at www.privatechoice.fr/contact, or by sending an e-mail, Private Choice collects some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number.

This data is stored and used exclusively to respond to your request and to contact you.

The legal basis for processing this data is Private Choice 's legitimate interest in responding to your request in accordance with Article 6.1 (f) of the GDPR.

Data is processed for the following purposes:

• Responding to your requests ;
• Communicating with you: getting in touch.

The data collected will be kept for a period of three years, after which it will be deleted or archived.

At the end of this period, all your collected data will be automatically deleted, unless you exercise your right to deletion before this deadline, or a longer retention period is imposed by virtue of a legal or regulatory provision.

I.2 Registering for a Private Choice event

When you register online for an event organized by Private Choice via the following web page: www.privatechoice.fr/reservation , we collect and process some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number, professional status.

The legal basis for the processing of this data is the conclusion of a contract with the data subject, in accordance with Article 6.1 (b) of the RGPD.
The data processing carried out is for the purpose of issuing invitations to Private Choice events, a free service provided by Private Choice.

After your last participation in an event organized by Private Choice or after your last contact with Private Choice, your data will be kept for three years and then deleted or archived.

After your participation in the Private Choice event, we may also send you promotional communications for similar events, by post and/or e-mail. This processing of personal data is based on our legitimate interest within the meaning of Article 6.1 (f) of the GDPR, without the need to obtain your prior consent to do so. If you no longer wish to receive such communications, you may object at any time, by following the instructions provided in each such communication. Upon receipt of your request, we will no longer send you promotional communications.

I.3 Subscribing to the Private Choice Newsletter

When you subscribe to our e-mail newsletter, we will send you e-mails to keep you informed of our events, news and offers. In this context, Private Choice collects some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number.

This data is stored and used exclusively for the purpose of sending you our newsletter.

The legal basis for processing this data is your consent, in accordance with Article 6.1 (a) of the RGPD.

You may withdraw your consent at any time via the link provided in each newsletter or by sending us an e-mail to the address specified in the "contact us" section of this Policy.

The data collected will be kept for a period of three years, after which it will be deleted or archived.

At the end of this period, all your collected data will be automatically deleted, unless you exercise your right to deletion before this deadline, or a longer retention period is imposed by virtue of a legal or regulatory provision.

I.4 Reserving a work on the Private Choice website

When you reserve a work of art or an objet d'art on our website, we collect and process some of your personal data, namely: surname, first name, postal address, e-mail address, telephone number, professional status, bank details. We process and collect this data in order to respond to your request, process your order and inform you of the status of your order.

The legal basis for processing this data is compliance with our contractual obligations, in accordance with Article 6.1 (b) of the RGPD.
The data processing carried out is for the purpose of managing your booking.

Your data will be kept for a period of three years after your last reservation with Private Choice or after your last contact with Private Choice, and will then be deleted or archived.

After your reservation of artwork or art object with Private Choice, we may also send you promotional communications for similar events, by post and/or e-mail. This processing of personal data is based on our legitimate interest within the meaning of Article 6.1 (f) of the GDPR, without the need to obtain your prior consent to do so. If you no longer wish to receive such communications, you may object at any time, by following the instructions provided in each such communication. Upon receipt of your request, we will no longer send you promotional communications.

I.5 Visit to our Private Choice website

If you visit our website to obtain simple information about Private Choice, without subscribing to an invitation and without contacting us directly, we collect the personal data that your browser transmits to our server ("server log files"). Private Choice collects the following data, which is required to display the website:

• Browser used ;
• Operating system used ;
• IP address ;
• Date and time of access ;
• Amount of data sent in bytes ;
• Source from which you came to the page.

This data is stored and used exclusively to ensure the accessibility and functionality of our website.

The legal basis for processing this data is based on our legitimate interest in providing access to our website, in accordance with Article 6.1 (f) of the GDPR.

You can consult our cookie policy to manage your settings and obtain detailed information on this subject.

II. Retention period for personal data

In accordance with the GDPR, we will use your personal data for the specified purposes for which it was collected (as described in Article I above) or to comply with any regulations (e.g. commercial or tax) and for limited periods of time.

The following table summarizes the periods for which we store your personal data:

Category of personal data	Shelf life
Personal data related to a contact request	Three (3) years from data collection and/or last contact with the prospect
Personal data related to a Private Choice event registration	For the duration of the contract and three (3) years from the last active contact with the customer/prospect
Personal data relating to the reservation of a work on the Private Choice website	Three (3) years from data collection and/or last contact with the prospect
Personal data used to promote Private Choice (e.g. newsletter)	Three (3) years from data collection and/or last contact with the prospect
Cookies and log files	13 months from cookie deposit

Furthermore, unless more specifically indicated in this Policy, Private Choice archives or deletes all stored personal data when it is no longer necessary for the purposes for which it was collected and processed.

III. Private Choice's obligations

Private Choice is the Data Controller for the processing of personal data carried out in particular via the Internet site.

As Data Controller, Private Choice undertakes to:

To process your personal data fairly and lawfully for specific purposes;

Process your personal data only for the purposes described in Article I of this Policy;

• Implement all appropriate technical and organizational measures necessary to ensure the security, confidentiality, integrity, availability and resilience of process systems and services;
• Restrict access to your personal data to persons duly authorized for this purpose;
• Educate and train employees in the handling of personal data;
• Notify the competent supervisory authority of any security breach presenting a serious risk to the rights and freedoms of users of our website within 72 hours of the occurrence of such a breach;
• Ensure that processors within the meaning of the RGPD have implemented all the technical and organizational measures necessary to guarantee the security, confidentiality, integrity, availability and resilience of processing systems and services.

IV. Recipients of collected data

The personal data collected and processed by Private Choice is only accessible to duly authorized persons for administrative, commercial or maintenance purposes of the Private Choice website and event organization.

The data collected may be transmitted to our service providers, IT service providers and hosts in compliance with the provisions of this Policy. These service providers are external companies that may be called upon to help us carry out our activities.

Subcontractors and service providers and their staff are subject to an obligation of confidentiality and may only use the data, on our behalf, for the specific tasks entrusted to them, on the basis of our instructions, in accordance with the aforementioned purposes and in compliance with the provisions of the RGPD.

Private Choice providers are :

• For the operation of the Private Choice website: OVH, a simplified joint stock company registered in the Lille Trade and Companies Register under no. 424 761 419, whose registered office is located at 2 rue Kellermann - 59100 Roubaix - France. All data collected on our website is stored on OVH servers.
• For e-mailing campaigns and newsletters: Mailchimp, a limited liability company registered in Georgia, USA, whose legal name is The Rocket Science Group LLC d/b/a Mailchimp.

Private Choice may share personal data with third parties when required to do so by law, or if this communication is necessary to respond to any claim made against it, to comply with any legal request, in the event of an emergency involving public health or the physical integrity of a person, as part of inquiries and investigations or in order to guarantee the rights, property and safety of Private Choice.

V. Your rights

Under the RGPD, you have several rights.

You have the right to access and receive a copy of your personal data held by Private Choice.

You have the right to access your personal data in order to rectify, modify or delete any errors or incorrect information.

You also have the option of requesting the deletion of all data held by Private Choice.

You also have the right to object at any time to the processing of your personal data for marketing purposes or to the processing carried out.

You have the right to request the suspension of the processing of your personal data.

You have the right to portability, i.e. the right to receive the data we hold in a commonly used and readable structured format and the right to transmit this data to another data controller.

You have the right to define directives concerning the fate of your personal data after your death.

All these rights may be exercised upon written request, accompanied by a copy of a valid, signed proof of identity, sent by e-mail to the following address legal@privatechoice.fr or by post to the following address:
Proteiform' Productions - Monsieur Tristan Candet - 225, rue du Faubourg Saint-Honoré - 75008 Paris.

In order for Private Choice to reply within a reasonable time, your request must be clear, precise and justified. Private Choice reserves the right not to respond to any request that does not meet these criteria.

You also have the right to contact and lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (https://www.cnil.fr) and the right to obtain redress from the competent courts.

VI. Security

Your personal data is treated with the utmost security.

Private Choice has implemented IT security and technical measures to limit data leakage, loss, deterioration and theft, and to protect data against computer attacks and viruses.

Private Choice ensures that subcontractors and external service providers implement appropriate security measures and comply with the requirements of the RGPD.

VII. Data transfer

Private Choice stores the personal data it collects in the European Union.

Private Choice may have recourse to services provided by specialized companies, acting as subcontractors and mentioned above. When these companies transfer data outside the European Union, Private Choice has taken care to verify that said companies ensure a high level of protection that complies with the requirements of the RGPD.

VIII. Cookies

A cookie (hereinafter "Cookie") is a piece of information, generally small in size and identified by a name, which may be transmitted to your browser by a web site to which you connect. Your web browser will store it for a certain period of time, and send it back to the web server each time you reconnect. Cookies have many uses: they can be used to memorize your customer ID with a merchant site, the current contents of your shopping cart, an identifier enabling your browsing to be traced for statistical or advertising purposes, etc.

Browsing the Private Choice website may result in the installation of cookies on your browser.

Opposition to the deposit of Cookies on your navigation terminal may make it impossible for you to access certain services available on the Private Choice website.

You can set your browser to refuse the installation of cookies by going to the settings menu.

Please consult our Cookie Policy.

IX. Changes to the Privacy Policy

Private Choice reserves the right to modify this Policy at any time.

X. Contact Private Choice

If you have any questions about the management of personal data at Private Choice, or about this Policy, you can contact us by e-mail at the following address: legal@privatechoice.fr or by post at the following address:
Proteiform' Productions - Mr Tristan Candet - 225, rue du Faubourg Saint-Honoré - 75008 Paris.