The Etablissement public du musée du quai Branly - Jacques Chirac (“the museum”) may collect certain personal information concerning users of its website. As the controller of this data processing, the museum located at 222, rue de l’Université - 75343 Paris cedex 07, FRANCE, is committed to the protection of personal data and privacy. With this in mind, the museum has appointed a Data Protection Officer to respond to any requests for the exercise of rights concerning the processing of personal data put in place.

This Policy sets out the way in which the museum collects and processes your personal data. It applies to all of the services proposed on the official website (http://www.quaibranly.fr/ and http://m.quaibranly.fr) and on the associated websites (https://recrutement.quaibranly.fr/, https://quaibranly.tickeasy.com/, http://marches.quaibranly.fr/) and to any other online initiative belonging to the museum and carrying out personal data collection (“website”). Solely the museum’s online store (http://boutique.quaibranly.fr/) is excluded from its scope of application, as the museum is not responsible for the processing of this data.

This Policy may be amended in accordance with legal and regulatory changes as well as with regard to the doctrine of the French Data Protection Authority (CNIL).

Data collection  

While browsing the museum Website, you may be asked to provide personal data when completing online forms: creation of a customer account, membership applications, newsletter subscription, customer service (order tracking, information request, etc.), recruitment forms, etc.

Each form contains an information statement concerning your rights in particular, as set out under the amended Act of 6 January 1978, the French Data Protection and Privacy Act, and Regulation (EU) 2016/679 of 27 April 2016, General Data Protection Regulation (GDPR).

In some cases, the museum uses  cookies which correspond to text files that are placed on your computer when you access the museum Website. This makes it possible to collect your IP address and related information (browser type, geographic location, terminal used, browser language, service provider, etc.) in order to draw up statistics without directly identifying you.

Furthermore, the use of social networks on the museum Website (Facebook, Instagram, Twitter, YouTube “share” buttons, etc.) may result in data exchanges between the museum and these social networks.

Furthermore, the use of social networks on the museum Website (Facebook, Instagram, Twitter, YouTube “share” buttons, etc.) may result in data exchanges between the museum and these social networks. You may also use the browser functions that prevent tracking (or download an extension that does the same).

Most Internet browser default settings are configured to accept cookies, but these settings can be modified. For more details on these files, the museum invites you to consult its cookie handling policy.

Purposes of data processing  

The museum  collects  and processes your personal data for specified, explicit and legitimate purposes, which are as follows:

On the legal grounds of the execution of a contract

On the legal grounds of your consent

You may withdraw your consent to this processing at any time by sending your request to our Data Protection Officer (see contact details at the end of this page).

On the legal grounds of our legitimate interests

Your personal data is not subsequently processed in any way incompatible with the purposes set out above.

Data recipients

The recipients of your personal data are the museum departments concerned:

The museum may only share the information collected with its service providers and subcontractors if this is necessary to the above-mentioned processing. In this case, rectifications and/or cancellations of personal information shall be notified to said service providers and subcontractors.

The subcontractors used by the museum are involved, under the latter’s instructions, in the following operations in particular:

Data storage

In accordance with the GDPR, your data is stored in a form which permits identification for no longer than the time required for the purpose for which it was collected and/or processed.

Your personal data is stored either in the museum databases or in those of its service providers.
As such, customer data is retained for 2 years following the end of the contractual relationship (date of last purchase or last contact with the museum). Data concerning prospective customers is also retained for 2 years as of the last incoming contact.

With regard to recruitment data, this is retained for a maximum of 2 years as of the last contact with the applicant.

Data security

As the data controller, the museum takes suitable precautions to ensure the security and confidentiality of your data, and notably to prevent such data from being deformed, damaged or transmitted to any unauthorised parties.

The museum’s IT department is also bound by the French government Information Systems Security Policy (PSSI) which sets out the minimum security measures applicable to government information systems.

Your rights

In accordance with the French Data Protection Act and the GDPR, you have the right to access, correct limit, and delete any or all of your data and the right to its portability.

You also have the right to oppose, at any moment, the use of your data for commercial prospecting.

Furthermore, you can establish the advance directives regarding the processing of your personal data post mortem.
If you wish to exercise your rights, please contact the museum’s Data Protection Officer by writing to the following addresses:

In the event of an unsatisfactory reply, you may lodge a complaint with the CNIL, the authority responsible for overseeing compliance with data protection obligations.