Privacy Policy

This privacy policy (hereinafter the “Policy”) is published by Proteiform’ Productions, a limited liability company, registered with the Paris Trade and Companies Register under number 495277659, having its registered office at 225, rue du Faubourg Saint-Honoré – 75008 Paris, tel: +33 (0)6 60 23 47 22, e-mail: info@privatechoice.fr (hereinafter “Private Choice”, hereinafter also referred to as “we”, “us”, “our”).

During your browsing of our website and/or when you register for our events and/or when you book an artwork on our website we may collect and process some of your personal data, as a data controller (hereinafter “Data Controller”) within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free circulation of such data (hereinafter “GDPR”).

As such, as the Data Controller, Private Choice is sensitive to the privacy of its users and the protection of their personal data. Private Choice is committed to ensure the compliance of its personal data processing with the applicable provisions of the GDPR and French law n°78-17 of January 6, 1978 relating to data processing, files and liberties.

The purpose of this Policy is to inform you of Private Choice’s practices regarding the collection, use and sharing of information and personal data that you may provide to us.

I. Collection and processing of personal data by Private Choice

I.1 Contact form on Private Choice website

When you contact Private Choice through the online contact form available at the following address www.privatechoice.fr/contact, or by sending an e-mail, Private Choice collects some personal data, namely: name, first name, postal address, e-mail address, telephone number.

These data are stored and used the exclusive purpose of responding to your request and contacting you.

The legal basis of this process is the legitimate interest in answering your request, according to article 6.1 (f) of the GDPR.

The purpose of the data processing carried out is to:

• Responding to your requests;
• Communicating with you: first contact.

Data collected are kept for a three-year period and will then be erased or archived.

At the end of this period, your collected data will be automatically erased, unless you exercise your right of erasure before this deadline, or if a longer retention period is imposed under a legal or regulatory provision.

I.2 Registration for a Private Choice event

When you register online for an event organized by Private Choice through the following address: www.privatechoice.fr/reservation, we collect and process some of your personal data, namely: name, first name, postal address, e-mail address, telephone number, employment status.

The legal basis of this process is the conclusion of a contract with the person involved, according to article 6.1 (b) of the GDPR.

The purpose of data processing is to issue invitations to Private Choice events, a free service provided by Private Choice.

After your last participation to an event organized by Private Choice or after your last contact with Private Choice, your data are kept for a three-year period and will then be erased or archived.

After your last participation to an event organized by Private Choice, we may send you some promotional communications for similar events by post and/or e-mail. The legal basis of this process is the legitimate interest in answering your request, according to article 6.1 (f) of the GDPR, without the need to obtain your prior consent to do so. If you no longer wish to receive such communications, you may opt-out at any time, following the instructions provided in each such communication. Upon receipt of your request, we will no longer send you promotional communications.

I.3 Subscription to Private Choice Newsletter

When you subscribe to our newsletters by e-mail, we will send you e-mails to keep you inform of our events, our news and our offers. In this framework, Private Choice collects some of your personal data, namely: name, first name, postal address, e-mail address, telephone number.

These data are stored and used exclusively for the purpose of sending you our newsletter.

The legal basis of this process is your consent, according to article 6.1 (a) of the GDPR

You may withdraw your consent at any time via the link provided in each newsletter or by sending us an e-mail to the address specified in the “contact us” section of this Policy

Data collected are kept for a three-year period and will then be erased or archived.

At the end of this period, your collected data will be automatically erased, unless you exercise your right of erasure before this deadline, or if a longer retention period is imposed under a legal or regulatory provision.

I.4 Booking an Artwork on Private Choice website

When you book an artwork or a piece of art on our website, we collect and process some of your personal data, namely: name, first name, postal address, e-mail address, telephone number, employment status, bank details.

We process and collect these data for the purpose of answering your request, process your order, inform you on the status of the order.

The legal basis of this process is to fulfil our contractual obligations, according to article 6.1 (b) of the GPRD.

The purpose of data processing is to manage your reservation.

After your last reservation of the artwork of the piece of art with Private Choice or after your last contact with Private Choice, your data are kept for a three-year period and will then be erased or archived.

After your last reservation of the artwork or of the piece of art with Private Choice we may send you some promotional communications for similar artworks by post and/or e-mail. The legal basis of this process is the legitimate interest in answering your request, according to article 6.1 (f) of the GDPR, without the need to obtain your prior consent to do so. If you no longer wish to receive such communications, you may opt-out at any time, following the instructions provided in each such communication. Upon receipt of your request, we will no longer send you promotional communications.

I.5 Visit of our website Private Choice

If you visit our website to obtain some information about Private Choice, without subscribe to an invitation and without contacting us directly, in this framework, we collect personal data that your browser transmits to our server (“server log files”). Private Choice collects the following data which are necessary to display the website:

• Browser used;
• Operating system used;
• IP address;
• Date and time of access;
• Amount of data sent in bytes;
• Source from which you came to the page.

Data are stored and used exclusively for the purpose of ensuring access to and functionality of our website.

The legal basis of this process is the legitimate interest to provide access to our website, according to article 6.1 (f) of the GDPR.

You may check our Cookie Policy to manage your settings and obtain detailed information about cookies.

II. Storage time of personal data

According to GDPR, we only keep your personal data for the specific purposes for which they were collected (as described in Article I above) or to comply with any regulations (e.g. trade or tax) for limited time-periods.

The following table summarizes the period of time during which we store your personal data:

Data category	Data storage
Data related to a contact request	Three (3) years from the collection of the data and/or the last contact with the prospect
Data related to registration to a Private Choice event	For the duration of the contract and three (3) years from the last active contact with the customer/prospect
Data related to the booking of an artwork on Private Choice website	Three (3) years from the collection of the data and/or the last contact with the prospect
Data related to Private Choice promotion (such as sending the newsletter)	Three (3) years from the collection of the data and/or the last contact with the prospect
Cookies and logfiles	Thirteen (13) months maximum from the drop of the cookie

Furthermore, unless more specifically indicated in this Policy, Private Choice archives or erases all stored personal data when they are no longer necessary for the purposes for which they were collected and processed.

III. Private Choice’s obligations

For the processing of personal data carried out in particular through the website, Private Choice is the Data Controller.

In its capacity of Data Controller, Private Choice commits to:

• Process your personal data fairly and lawfully for specified purposes;
• Process your personal data only for the purposes described in Article I of this Policy;
• Implement all appropriate technical and organizational measures necessary to ensure the security, confidentiality, integrity, availability and resilience of systems and process services;
• Restrict access to your personal data to persons duly authorized for this purpose;
• Raise awareness and train employees in the processing of personal data;
• Notify the competent supervisory authority of any security breach that presents a serious risk to the rights and freedoms of users of our website within 72 hours of the occurrence of such breach;
• Ensure that subcontractors within the meaning of the GDPR have implement all the necessary technical and organizational measures to guarantee the security, confidentiality, integrity, availability and resilience of processing systems and services

IV. Recipients of the data collected

Data collecting and processing by Private Choice are only available to the competent and authorized recipients for administrative, commercial or maintenance purposes of the website and the organization of Private Choice events. 

The data collected may be transmitted to our service providers, IT providers and hosting companies in accordance with this Policy. These service providers are external companies that may be used to help us carry out our activities.

Subcontractors and service providers and their staff are subject to an obligation of confidentiality and may only use the data on our behalf for the specific tasks entrusted to them, based on our instructions, in accordance with the aforementioned purposes and in compliance with the provisions of the GDPR.

Private Choice’s providers are:

• For the exploitation of Private Choice website: OVH, simplified joint stock company registered with the Lille Trade and Companies Register under number 424 761 419, having its registered office at 2 rue Kellermann – 59100 Roubaix – France. All data collected on our website is stored on OVH servers.
• For the sending of e-mail campaigns and newsletters: Mailchimp, limited liability company registered in Georgie USA whose legal name is The Rocket Science Group LLC d/b/a Mailchimp.

Private Choice may be required to share personal data with third parties when a legal obligation imposes it, or if this communication is necessary in order to respond to any claim made against it, to comply with any legal request, in the event of an emergency involving public health or the physical integrity of a person, within the framework of enquiries and investigations, or in order to guarantee the rights, property and security of Private Choice.

V. Your rights

According to GDPR, you have rights over your data.

You have the right to access and receive a copy of your personal data held by Private Choice.

You have the right to access your personal data to correct, amend or erase any errors or incorrect information.

You also may request the erasure of all data held by Private Choice. 

You also have the right to oppose at any time to the processing of your personal data for marketing purposes or to the carried out processing.

You have the right to request the suspension of the processing of your personal data.

You have the right to portability, i.e. the right to receive the data we hold in a commonly used and readable structured format and the right to transmit these data to another data controller.

You have the right to specify what happens to your personal data after your death.

All of these rights may be exercised upon written request from you, accompanied by a copy of a valid and signed proof of identity, sent by e-mail to the following address: legal@privatechoice.fr or by post to the following address: Proteiform’ Productions – Monsieur Tristan Candet – 225, rue du Faubourg Saint-Honoré – 75008 Paris.

For Private Choice to be able to reply within a reasonable time, your request must be clear, precise and justified. Private Choice reserves the right not to respond to any request that does not meet these criteria.

You may also contact the competent supervisory authority in France, the “CNIL” (Commission Nationale de l’Informatique et des Libertés) located at 3 Place de Fontenoy – TSA 80715, 75334 PARIS CEDEX 07 – FRANCE.

VI. Security

Your data are processed securely.

Private Choice has implemented computer security and technical measures to limit any leakage, loss, deterioration, theft of data and to protect the data against any computer attack and against any virus.

Private Choice ensures that subcontractors and external service providers implement appropriate security measures that comply with the requirements of the GDPR.

VII. Data transfer

Private Choice keeps the personal data it collects in the European Union.

Private Choice may use services provided by specialized companies, acting as subcontractors and mentioned above. When these companies transfer data outside the European Union, Private Choice takes care to ensure that these companies provide a high level of protection in accordance with the requirements of the GDPR.

VIII. Cookies

A cookie (hereinafter a « Cookie ») is a piece of information, usually small in size and identified by a name, that may be transmitted to your browser by a website that you use. Your web browser will keep it for a certain period of time and will send it back to the web server each time you reconnect. Cookies have many uses: they can be used to memorize your customer ID with a commercial website, the current contents of your cart, an ID allowing to track your browsing for statistical or advertising purposes, etc.

Browsing Private Choice website is likely to result in the installation of cookies on your browser terminal.

Opposition to the deposit of Cookies on your navigation terminal may result in an inability to access to certain services available on Private Choice website.

You can set your browser to refuse the installation of cookies by going to the settings menu.

You can find more information about the cookies used in our Cookies Policy.

IX. Changes of the Privacy policy

X. Contact Private Choice