Logo de Puzzling Biodiversity

Privacy policy

This policy sets out in a single document clear and simple information about the data processing carried out by the Museum on its "Puzzling Biodiversity" website. It will help you to better understand what personal data we collect and how we use it, while respecting your rights.

The Museum undertakes, in accordance with current legislation, to protect your privacy by ensuring the protection, confidentiality, non-alteration, availability and security of the personal data you entrust to us.

The data controller is the “Muséum National d'Histoire Naturelle”, represented by its President. It is a public establishment of a scientific, cultural and professional nature, with its registered office at 57, rue Cuvier, Paris 05.

The Privacy Policy can be accessed directly from the site when you register and subsequently via a link visible in the footer of every page of the site.

This policy may be updated at any time. Consequently, users are invited to refer to the latest version in force.

 

 

1          The main principles

The Museum is committed to the following essential principles in order to guarantee respect for fundamental rights:

·         Transparency: we provide you with all relevant information on the processing of your data, in particular the purposes for which it is used and the recipients;

·         Data minimisation: we collect and process only data that is adequate, relevant and not excessive in relation to the purposes for which it was collected;

·         Confidentiality and integrity: we implement all reasonable technical and organisational measures to protect your personal data against disclosure, loss, alteration or access by unauthorised third parties;

·         Retention: we keep your personal data only for as long as is necessary for the purposes of the specific processing or service;

·         Respect for your rights: we offer you the possibility of accessing, modifying and objecting to the processing of your data, either directly via your personal areas, or via customer service or our Data Protection Officer. Where permitted by law, we also offer you the possibility of exercising your right to limit the processing of your data, as well as your right to data portability;

·         Commitment of our partners: operations for which we call on specialist partners are subject to a contract to ensure that your data is protected and that your rights are respected.

 

1.1         When do we process your personal data?

Your Data may be collected and processed when :

·         Collected when registering on the website ;

·         Processed when checking reliability[AP1]  of your answers ;

·         Processed when checking that the people entered are real;

·         Processed when we report on the breakdown of sociological criteria;

·         Processed when we define groups of respondents ;

 

 

1.2         What personal information does the Museum collect?

Personal data is information relating to a natural person who can be identified directly or indirectly.

The Museum collects information that is strictly necessary for the provision of its services. This information is indicated by an asterisk and generally concerns your surname, first name and e-mail address.

In accordance with the law, the Museum does not collect Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.

 

2          How does the Museum use your data?

The personal data collected directly from you is that which is communicated on the forms placed online on the website. It is collected for the purposes detailed below.

Certain information is essential in order to benefit from the service concerned (indicated by an asterisk). If you do not provide this information, we will not be able to offer you this service.

The time limits for storing your data are defined by the Museum in the light of legal and contractual constraints. These time limits are set according to the purposes for which the data is collected. Once these periods have elapsed, the data is either deleted or kept after being anonymised, i.e. modified in such a way as to make it impossible to link it to a specific person.

In accordance with the French legislation (“code du Patrimoine”), we may need to keep certain documents relating to you that are of administrative use or of scientific, statistical or historical interest beyond the retention period.

As a user, you guarantee that the information you provide is accurate, complete and up to date.

[Registration on the website]

Goals Creating and managing a user account
Legal basis Necessary for the performance of a contract
Data processed and retention period User name*, Email address*. This data is kept for a period of 5 years from the date of the User's last connection.
Recipients The relevant departments of the Muséum national d'Histoire naturelle

[Attribution of observation data to its authors].

Purpose Ensuring the reliability and usability of the observation data collected
Legal basis Public interest mission
Data processed and retention period User name, email address* (if applicable)The identification data is kept for as long as the observation data is used.The email address is kept for a period of 5 years, then placed in an intermediate archive so that it can only be consulted in the event of a problem with the observation data.
Recipients The relevant departments of the Muséum national d'Histoire naturelle.

 

[Distribute information].

Goals Distribute information to participants who have agreed to receive it
Legal basis Legitimate interest
Data processed and retention period Email address, You can tick a box on the registration form and/or in the profile area if you agree to receive newsletters.
Recipients The Mosaic departments concerned

[Administrative and technical management of the site]

Purpose To enable US[AP2]  Mosaic to develop, operate and maintain the site
Legal basis Legitimate interest of the controller
Data processed and retention period Nominative connection statistics This data is kept for a maximum of 6 months.
Recipients The US Mosaic from the Muséum national d'Histoire naturelle.

Management of requests for access, rectification, opposition, deletion, limitation and portability rights

Goals Enable you to exercise your rights with regard to your personal data
Legal basis Legal obligation
Data processed and retention period Content of exchanges, surname*, first name*, e-mail address, proof of identity (exceptionally if we have no other means of identifying you), copy of requested data (1 year)
Recipients The relevant departments of the DPO of the Muséum national d'Histoire naturelle

 

Legal or regulatory requirement

The Museum may be required to communicate your personal data in the event of legitimate requests from public authorities, in particular to meet requirements in terms of national security, the fight against fraud or another legal obligation.

 

 

3          Transfer of data outside the European Union

No data is transferred outside the European Union.

 

 

4          Security and confidentiality of personal data

The Muséum National d'Histoire Naturelle undertakes to take all measures to guarantee the security and confidentiality of personal data and in particular to prevent it from being damaged, deleted or accessed by unauthorised third parties.

 

 

5          Rights of individuals whose data is collected and processed

It is expressly agreed that the personal data collected by the Muséum National d'Histoire Naturelle is used in accordance with the purposes described in this personal data protection policy.

In accordance with the regulations applicable to the protection of personal data, and subject to fulfilling the conditions, all users have the right to access, rectify, oppose for a legitimate reason (except in the case of canvassing, where it is not necessary to give a reason), withdraw their consent at any time, and where permitted by law, to limit, port and delete their personal data. They may also at any time formulate instructions concerning the storage, deletion, and communication of their personal data after their death.

These rights may be exercised at any time, subject to proof of identity by means of an authentication space where possible, or by means of a copy of a valid identity document. Users may also modify their personal data themselves from their Account, selected when their Account is created.

If you would like further information about these rights, please contact the Museum's Data Protection Officer at .dpo@mnhn.fr

The Museum will respond to your requests to exercise your rights as soon as possible and in any event within one month of receipt of the requests.

In the event of difficulty in the management of their personal data, Users may lodge a complaint with the “Commission Nationale de l'Informatique et des Libertés” (CNIL).

 

 

6          Cookie management

Our site uses cookies and other related technologies (for simplicity, all these technologies are referred to as "cookies"). Cookies are also placed by third parties engaged by the Museum.

6.1         What is a cookie?

Cookies are computer files that are automatically deposited on the hard drive of your computer, tablet or mobile phone when you browse our Site. They are managed by your web browser (Internet Explorer, Firefox, Safari or Google Chrome).

Our cookies have many uses: they can be used to remember your visitor ID on our site, to determine the language in which the page is displayed, to track your browsing for statistical or advertising purposes, etc.

According to the Commission Nationale de l'Informatique et des Libertés (CNIL), there are several types of cookies:

Cookies that do not require your consent:

·         Necessary", internal cookies, which are used to record information between two visits to the same website on the same device (e.grecording login details or interface customisation elements). They do not require your consent.

·         Statistics" cookies are used to track your interactions with the site and to compile statistics in order to optimise your browsing experience. As the statistics are anonymous (i.e. they do not allow you to be identified), your consent is not normally required.

Cookies requiring your consent:

·         First-party" cookies are placed by the site. They may be deposited in addition to the necessary cookies and may be used to collect personal data, track user behaviour and serve advertising purposes.

For this reason, your consent is required before any data is stored.

·         Third-party" cookies are cookies placed on our site by (or on behalf of) site B: this enables site B to see which pages you have visited on the said site, and thus to collect information about you.

For these reasons, their submission is also subject to your consent.

 

6.2         Cookies placed

Technical cookies

The Museum must use these cookies in order to operate certain web pages. This is why they do not require your consent.

RememberMe

Name Services Conservation Function
Functional
REMEMBER User service 7 days Keeping the connection

For more information, please read the privacy policy [XXXXX].

Tarteaucitron

Name Services Conservation Function
Functional
Tarteaucitron User service 1 year Retention of cookie preferences

For more information, please read the privacy policy [XXXXX].

Analytical cookies

The Museum uses analytical cookies solely for internal research purposes on how it can improve the service it offers to all its users. These cookies simply make it possible to evaluate the way in which you interact with its site - as an anonymous user (the data collected does not make it possible to identify you personally).

Matomo

Name Services Conservation Function
Statistics (anonymous)
_pk_ref* web analytics service 6 months Store referrer IDs
_pk_testcookie* web analytics service Session Counting and tracking page views
_pk_id* web analytics service 13 months Store a unique user ID
_pk_ses* web analytics service 30 minutes Store a unique session ID

This data is not shared with third parties.

 

6.3         Consent

When you visit this site for the first time, the Museum will show you a pop-up window with an explanation about cookies. As soon as you click on "Save preferences" you authorise the Museum to use the categories of cookies and extensions that you have selected in the pop-up window, as described in this cookie policy. You can deactivate the use of cookies via your browser, but please note that our site may no longer function correctly.

 

6.4         Activating/deactivating and deleting cookies

You can use your web browser to delete cookies automatically or manually. You can also specify that certain cookies cannot be placed. Another option is to modify the settings of your Internet browser so that you receive a message each time a cookie is set. For more information on these options, please refer to the instructions in the Help section of your browser.

If you delete cookies from your browser, they will be placed again with your consent when you revisit our website.

 

6.5         Block cookies

Most modern browsers can be configured to prevent cookies being saved on your device, but you may then have to enter some of your preferences each time you visit a site/page. In addition, certain services and functionalities may not be available (logging in using a profile, for example).