Privacy policy

PERSONAL DATA PROTECTION POLICY

The FIMALAC ENTERTAINMENT Group attaches great importance to respecting your privacy and is committed to building strong and lasting relationships with you.

The protection of your personal data is of paramount importance to us.

This data protection policy aims to inform you as clearly as possible of our commitments and the measures we have taken to ensure that your personal data is protected in accordance with applicable European and French regulations. It is supplemented by the cookies charter accessible at the bottom of the Site's pages.

This policy applies to all services offered on the https://www.offstage.fr/ website, owned by OFFSTAGE, a company in the FIMALAC ENTERTAINMENT Group (hereinafter referred to as "the Site").

This policy is subject to the amended French Data Protection Act no. 78-17 of January 6, 1978 (hereinafter "Loi Informatique et Libertés") and to the European Regulation on the Protection of Personal Data of April 27, 2016 (hereinafter "RGPD"). It may evolve according to the legal and regulatory context and the doctrine of the Cnil.

For any information on the protection of personal data, you can also consult the website of the Commission Informatique et Liberté: www.cnil.fr.

Who processes your personal data?
The data controller who defines the purposes and means of personal data processing on the Site is: OFFSTAGE : 10 place du Général Catroux - 75017, PARIS, RCS n948715206.

 

Why do we use your personal data?
We may use your personal data for the following purposes and in accordance with the following legal bases:

Sending newsletters, commercial communications following registration on the Site or subscription to a newsletter: we may send you personalized emails or recommend products and/or services similar or analogous to those already ordered that correspond to your centers of interest or keep you informed of our latest news. If you have subscribed, we may also send you newsletters.

Category of data concerned: identification data (surname, first name, email address).

Legal basis :

consent: to receive electronic communications informing you of news from the Site, the FIMALAC ENTERTAINMENT Group. You may withdraw your consent at any time by using the unsubscribe link provided in all communications.
Legitimate interest: for products and services similar to those you have ordered. You have the right to object to this.
Management of orders and customer relations: we need your personal data to manage your orders and subsequent processing (deliveries, invoices, accounting, customer relations, etc. (satisfaction surveys, claims management, after-sales service, etc.)). It enables us to send you your Products and, where possible, to contact you in the event of temporary or permanent unavailability of the Product(s) you have ordered, or in the event of cancellation or modification of the date, time or place of delivery of the Product(s) you have ordered.

Category of data concerned: personal identification data (surname, first name, e-mail address, telephone number, postal address), personal data on purchases made, personal data on your complaints.

Legal basis: the contract you have signed.

Payment of your orders: when you pay on the Site, your payments are secure. We do not collect your bank details. Your bank details are only collected by our payment service provider (subcontractor) Shopify Payment, which is PCI-DSS (banking security standard) certified to guarantee payment security.

Category of data concerned: banking data (data relating to payment method(s) (credit card number, IBAN number, RIB etc.).

Legal basis: the contract you have signed.

Improving the quality of the Site and services offered: we use personal data to analyze visitor activity on the Site and thus improve our services. For example, we measure the number of visits. For these audience measurements, we use tracers such as cookies. Visitors may modify their preferences at any time by clicking on the "Manage your cookie preferences" link located at the bottom of each page of the Site.

Type of data concerned: IP address of connected terminal, mobile advertising identifiers, etc.

Legal basis: consent.

Targeted advertising: we may use personal data for advertising profiling purposes. Profiling is the automated processing of browsing data on the Site. In this context, it enables us to analyze your behavior and predict your preferences. In this way, we can offer you a better user experience by providing you with personalized advertisements. At any time, you can deactivate the advertising trackers used to personalize the advertisements displayed by clicking on the "Manage your cookie preferences" link at the bottom of each page of the Site. Please note that deactivating this personalization service does not prevent the display of advertising on the Site.

Category of data concerned: personal data on purchases made; on reactions to commercial communications.

Legal basis: consent.

Management of complaints or requests for rights and to respond to any requests from third parties authorized by law to ask us to communicate your browsing data and/or your personal data.

Category of data concerned: personal identification data (in particular, surname, first name, physical address, e-mail address, telephone number), content of complaint/request, identification (where necessary).

Legal basis: our legal obligations.

 

When is your data collected?
We collect the information you provide when you :

create your Customer Account on the Site;
place an order for one or more Products on the Site;
browse the Site and consult offers;
take part in a game or competition;
contact Customer Service;
access the various forms available on the Site (contact form, etc.);
subscribe to newsletters and communications;
consult advertisements.
The compulsory or optional nature of the data is indicated at the time of collection by an asterisk. Some data is collected automatically as a result of your actions on the Site.

What happens when you buy a product on the Site?
When you browse the Site, you may have the opportunity to purchase one or more Products.

Your personal data is then collected by OFFSTAGE and its subcontractors.

This data is necessary for the management of your order (invoicing, delivery of the Product, etc.) and for commercial relations. It is also kept for security purposes, in particular to prevent fraud, and to comply with legal and regulatory obligations. It is also used to improve and personalize the services we offer you.

Personal data enables us to contact you, where possible, in the event of temporary or permanent unavailability of the Product(s) you have ordered, or in the event of cancellation or modification of the date, time or place of delivery of the Product(s) you have ordered. In the context of your order, personal data may also be communicated to partners (Product rights holders, Product manufacturers, producers of artists related to the Products, carriers, logisticians, etc.) on whose behalf OFFSTAGE acts.

Your payment details, such as your credit card or your bank details in the case of deferred payment, are encrypted and only processed by a secure payment service provider (subcontractor).

 

What about minors' personal data?
The Merchant Site is not intended for minors. Consequently, we do not process personal data concerning minors.

What communications are you likely to receive?
Service emails: following an order, you will receive an email to enable you to track your order or the execution of your contract (order confirmation, delivery information, etc.). These service messages are necessary for the proper execution of the orders and services you have requested. Receipt of this information is not linked to any choice you may have made to receive newsletters and other commercial communications and offers.

Commercial communications for similar products and/or services: Following an order placed on the Site and if you have not objected, you may receive our commercial communications and offers by electronic communication (email, sms...). These communications enable us to keep you informed of our latest news and offers on products and/or services similar to those you have already ordered.

You have the right to object to this:

by clicking on the unsubscribe link provided in the communications;
by contacting: dpo@offstage.fr
Newsletters (news and special offers) from the Site or the FIMALAC ENTERTAINMENT Group: If you have agreed to receive newsletters, news and special offers from the Site or the FIMALAC ENTERTAINMENT Group, you may receive by electronic communication (email, sms...), news and offers from the Site or the FIMALAC ENTERTAINMENT Group, which groups together companies that produce shows and manage certain venues in Paris and the regions.

Alerts concerning events and/or artists: By entering your email address, you agree to :

to receive a message alerting you to the opening of sales for events that interest you when the time comes;
to receive recurring information on an artist's latest news.

How long is your data kept?
We have established rules concerning the length of time we keep personal data, which does not exceed the time required to achieve the processing purposes for which it was collected:

If you are already a customer and have placed orders, your customer account information (order history, etc.) is kept for as long as you are an "active" customer and for no longer than is necessary for the purposes for which it is to be processed.
On information relating to the Customer Account without any act of purchase: 3 years from the date of account creation.
For Newsletter subscribers: 3 years from the last positive and explicit contact from the user (for example, a request for documentation or a click on a hypertext link contained in an e-mail, etc.).
The identification documents you provide to us to exercise your rights are kept for 1 year from the date of the request.
Pseudonymous data associated with payment cards is kept by financial partners for the duration of the transaction (for a single payment), then archived for 13 months from the date of debit, or 15 months for deferred debit payment cards, as evidence in the event of a disputed transaction.
At the end of these periods, your data is either deleted or archived with restricted access for a further period for limited purposes authorized by law (payment, billing, warranty, disputes, etc.).

What are your rights and how can you exercise them?
You have the right to access, delete and rectify your personal data.

You may also exercise your right to object to, limit or delete the processing of your data, or to data portability. It is also possible to ask not to be the subject of an automated individual decision.

You can send us your instructions concerning the retention, deletion and communication of your personal data after your death. Such instructions may be general or specific. You will be asked to provide documentary evidence.

If you wish to unsubscribe from the Site's newsletters, you may do so at any time directly by clicking on the unsubscribe link on each e-mail you receive or by contacting us at bonjour@offstage.fr or at FIMALAC ENTERTAINMENT, OFFSTAGE, 10 place du Général Catroux 75017 PARIS.

To access your data and exercise your other rights, please write to: dpo@offstage.fr or to FIMALAC ENTERTAINMENT - OFFSTAGE- 10 place du Général Catroux -75017 PARIS.

In the event of an unsatisfactory response, you may refer the matter to the CNIL: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

Please note that these rights are not absolute. There are sometimes reasons (legal obligations, compliance with our contractual commitments to you, etc.) that prevent us from responding favorably to your request. If this is the case, we will inform you of the reason(s) for our refusal.

In order to identify your Customer Account, please provide us with the e-mail address by which you created your Customer Account.

In addition, to enable us to respond quickly, please provide us with your surname, first name, e-mail address and, if possible, your customer reference number. Certain requests to exercise your rights (right of access) must be accompanied by a photocopy of an identity document bearing your signature in order to verify your identity and specify the address to which the reply should be sent.

A reply will be sent to you within 1 month of receipt of the request, which may be extended to 2 months depending on the complexity and number of requests.

If your telephone number is collected when you create an account or place an order, we inform you that your telephone details will only be used to process your orders. In accordance with legal provisions, you are informed that you can, if you wish, register free of charge on a list of opposition to telephone canvassing, which is compulsory for all professionals except those with whom you have already concluded a contract. You can therefore oppose telephone canvassing by companies with which you are not a Customer by registering on www.bloctel.gouv.fr.

 

DPO contact details
If you have any questions or complaints regarding the protection of your personal data, please contact OFFSTAGE's Data Protection Officer (DPO): dpo@offstage.fr.

Who receives your data?
Sharing of data within the FIMALAC ENTERTAINMENT Group: intended for FIMALAC ENTERTAINMENT departments required to manage the Site (digital department, ticketing department, customer relations department, etc.).

Transmission of data to subcontractors: The data we collect may be transmitted to service providers (subcontractors) of the FIMALAC ENTERTAINMENT Group that our company OFFSTAGE uses to perform its services for the purposes mentioned above and for example:

for the management, execution, processing and payment of your orders;
for marketing purposes (sending information emails and newsletters, participation in quizzes, satisfaction questionnaires, event registration);
for technical services.
Partner companies: Any company with which we have concluded a contract governing the provision of data or a data protection agreement. These include, for example, partner companies that enable donations to be made when you purchase one or more Products. In this case, the partner company is solely responsible for processing the personal data collected during said donations.

Third parties: In limited cases governed by law, such as judicial and/or administrative authorities, your Internet service provider, etc.

Is your data sent outside the European Union?
In order to fulfill the purposes defined above, your personal data may be transferred to companies located in countries outside the European Union which do not offer a level of personal data protection equivalent to the regulations in force in the European Union.

Prior to any transfer outside the European Union, and in accordance with current regulations, we implement all procedures required to obtain the necessary guarantees to secure such transfers (standard contractual clauses, European Commission adequacy decision, etc.).

Transfers outside the European Union may be carried out in the context of the following activities, in particular with our subcontractors: IT services, fraud prevention, etc.

How do we protect your data?
We take various technical and organizational measures to ensure the security of your data against loss, misuse, unauthorized access, disclosure, alteration or destruction. In particular

Access to databases is strictly reserved to persons authorized to access them in the course of their duties (authentication procedures for persons having access to data).
In compliance with the French Data Protection Act and the RGPD, we have ensured that subcontractors undertake to respect data security and confidentiality.
All our employees are made aware of personal data protection through training courses, corporate social networks and team meetings.

 

Updating and modification of the data protection policy
We reserve the right to update and modify this data protection policy at any time. In the event of a substantial change, such as the introduction of a new purpose for processing personal data, we will provide all persons who have identified themselves to us with an email about this new purpose. This is to ensure that you have a reasonable time to exercise your rights under current legislation.

Nevertheless, we encourage you to consult the data protection policy regularly so that you are aware of how your personal data is protected on this Site.

This policy was last updated on the date shown on the first page.