Privacy policy
This policy sets out in a single document clear and simple information about the data processing carried out by the Museum on its "Puzzling Biodiversity" website. It will help you to better understand what personal data we collect and how we use it, while respecting your rights.
The Museum undertakes, in accordance with current legislation, to protect your privacy by ensuring the protection, confidentiality, non-alteration, availability and security of the personal data you entrust to us.
The data controller is the “Muséum National d'Histoire Naturelle”, represented by its President. It is a public establishment of a scientific, cultural and professional nature, with its registered office at 57, rue Cuvier, Paris 05.
The Privacy Policy can be accessed directly from the site when you register and subsequently via a link visible in the footer of every page of the site.
This policy may be updated at any time. Consequently, users are invited to refer to the latest version in force.
1 The main principles
The Museum is committed to the following essential principles in order to guarantee respect for fundamental rights:
· Transparency: we provide you with all relevant information on the processing of your data, in particular the purposes for which it is used and the recipients;
· Data minimisation: we collect and process only data that is adequate, relevant and not excessive in relation to the purposes for which it was collected;
· Confidentiality and integrity: we implement all reasonable technical and organisational measures to protect your personal data against disclosure, loss, alteration or access by unauthorised third parties;
· Retention: we keep your personal data only for as long as is necessary for the purposes of the specific processing or service;
· Respect for your rights: we offer you the possibility of accessing, modifying and objecting to the processing of your data, either directly via your personal areas, or via customer service or our Data Protection Officer. Where permitted by law, we also offer you the possibility of exercising your right to limit the processing of your data, as well as your right to data portability;
· Commitment of our partners: operations for which we call on specialist partners are subject to a contract to ensure that your data is protected and that your rights are respected.
1.1 When do we process your personal data?
Your Data may be collected and processed when :
· Collected when registering on the website ;
· Processed when checking reliability[AP1] of your answers ;
· Processed when checking that the people entered are real;
· Processed when we report on the breakdown of sociological criteria;
· Processed when we define groups of respondents ;
1.2 What personal information does the Museum collect?
Personal data is information relating to a natural person who can be identified directly or indirectly.
The Museum collects information that is strictly necessary for the provision of its services. This information is indicated by an asterisk and generally concerns your surname, first name and e-mail address.
In accordance with the law, the Museum does not collect Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.
2 How does the Museum use your data?
The personal data collected directly from you is that which is communicated on the forms placed online on the website. It is collected for the purposes detailed below.
Certain information is essential in order to benefit from the service concerned (indicated by an asterisk). If you do not provide this information, we will not be able to offer you this service.
The time limits for storing your data are defined by the Museum in the light of legal and contractual constraints. These time limits are set according to the purposes for which the data is collected. Once these periods have elapsed, the data is either deleted or kept after being anonymised, i.e. modified in such a way as to make it impossible to link it to a specific person.
In accordance with the French legislation (“code du Patrimoine”), we may need to keep certain documents relating to you that are of administrative use or of scientific, statistical or historical interest beyond the retention period.
As a user, you guarantee that the information you provide is accurate, complete and up to date.
[Registration on the website]
Goals | Creating and managing a user account |
Legal basis | Necessary for the performance of a contract |
Data processed and retention period | User name*, Email address*. This data is kept for a period of 5 years from the date of the User's last connection. |
Recipients | The relevant departments of the Muséum national d'Histoire naturelle |
[Attribution of observation data to its authors].
Purpose | Ensuring the reliability and usability of the observation data collected |
Legal basis | Public interest mission |
Data processed and retention period | User name, email address* (if applicable)The identification data is kept for as long as the observation data is used.The email address is kept for a period of 5 years, then placed in an intermediate archive so that it can only be consulted in the event of a problem with the observation data. |
Recipients | The relevant departments of the Muséum national d'Histoire naturelle. |
[Distribute information].
Goals | Distribute information to participants who have agreed to receive it |
Legal basis | Legitimate interest |
Data processed and retention period | Email address, You can tick a box on the registration form and/or in the profile area if you agree to receive newsletters. |
Recipients | The Mosaic departments concerned |
[Administrative and technical management of the site]
Purpose | To enable US[AP2] Mosaic to develop, operate and maintain the site |
Legal basis | Legitimate interest of the controller |
Data processed and retention period | Nominative connection statistics This data is kept for a maximum of 6 months. |
Recipients | The US Mosaic from the Muséum national d'Histoire naturelle. |
Management of requests for access, rectification, opposition, deletion, limitation and portability rights
Goals | Enable you to exercise your rights with regard to your personal data |
Legal basis | Legal obligation |
Data processed and retention period | Content of exchanges, surname*, first name*, e-mail address, proof of identity (exceptionally if we have no other means of identifying you), copy of requested data (1 year) |
Recipients | The relevant departments of the DPO of the Muséum national d'Histoire naturelle |
Legal or regulatory requirement
The Museum may be required to communicate your personal data in the event of legitimate requests from public authorities, in particular to meet requirements in terms of national security, the fight against fraud or another legal obligation.
3 Transfer of data outside the European Union
No data is transferred outside the European Union.
4 Security and confidentiality of personal data
The Muséum National d'Histoire Naturelle undertakes to take all measures to guarantee the security and confidentiality of personal data and in particular to prevent it from being damaged, deleted or accessed by unauthorised third parties.
5 Rights of individuals whose data is collected and processed
It is expressly agreed that the personal data collected by the Muséum National d'Histoire Naturelle is used in accordance with the purposes described in this personal data protection policy.
In accordance with the regulations applicable to the protection of personal data, and subject to fulfilling the conditions, all users have the right to access, rectify, oppose for a legitimate reason (except in the case of canvassing, where it is not necessary to give a reason), withdraw their consent at any time, and where permitted by law, to limit, port and delete their personal data. They may also at any time formulate instructions concerning the storage, deletion, and communication of their personal data after their death.
These rights may be exercised at any time, subject to proof of identity by means of an authentication space where possible, or by means of a copy of a valid identity document. Users may also modify their personal data themselves from their Account, selected when their Account is created.
If you would like further information about these rights, please contact the Museum's Data Protection Officer at .dpo@mnhn.fr
The Museum will respond to your requests to exercise your rights as soon as possible and in any event within one month of receipt of the requests.
In the event of difficulty in the management of their personal data, Users may lodge a complaint with the “Commission Nationale de l'Informatique et des Libertés” (CNIL).
6 Cookie management
Our site uses cookies and other related technologies (for simplicity, all these technologies are referred to as "cookies"). Cookies are also placed by third parties engaged by the Museum.
6.1 What is a cookie?
Cookies are computer files that are automatically deposited on the hard drive of your computer, tablet or mobile phone when you browse our Site. They are managed by your web browser (Internet Explorer, Firefox, Safari or Google Chrome).
Our cookies have many uses: they can be used to remember your visitor ID on our site, to determine the language in which the page is displayed, to track your browsing for statistical or advertising purposes, etc.
According to the Commission Nationale de l'Informatique et des Libertés (CNIL), there are several types of cookies:
Cookies that do not require your consent:
· Necessary", internal cookies, which are used to record information between two visits to the same website on the same device (e.grecording login details or interface customisation elements). They do not require your consent.
· Statistics" cookies are used to track your interactions with the site and to compile statistics in order to optimise your browsing experience. As the statistics are anonymous (i.e. they do not allow you to be identified), your consent is not normally required.
Cookies requiring your consent:
· First-party" cookies are placed by the site. They may be deposited in addition to the necessary cookies and may be used to collect personal data, track user behaviour and serve advertising purposes.
For this reason, your consent is required before any data is stored.
· Third-party" cookies are cookies placed on our site by (or on behalf of) site B: this enables site B to see which pages you have visited on the said site, and thus to collect information about you.
For these reasons, their submission is also subject to your consent.
6.2 Cookies placed
Technical cookies
The Museum must use these cookies in order to operate certain web pages. This is why they do not require your consent.
RememberMe
Name | Services | Conservation | Function |
Functional | |||
REMEMBER | User service | 7 days | Keeping the connection |
For more information, please read the privacy policy [XXXXX].
Tarteaucitron
Name | Services | Conservation | Function |
Functional | |||
Tarteaucitron | User service | 1 year | Retention of cookie preferences |
For more information, please read the privacy policy [XXXXX].
Analytical cookies
The Museum uses analytical cookies solely for internal research purposes on how it can improve the service it offers to all its users. These cookies simply make it possible to evaluate the way in which you interact with its site - as an anonymous user (the data collected does not make it possible to identify you personally).
Matomo
Name | Services | Conservation | Function |
Statistics (anonymous) | |||
_pk_ref* | web analytics service | 6 months | Store referrer IDs |
_pk_testcookie* | web analytics service | Session | Counting and tracking page views |
_pk_id* | web analytics service | 13 months | Store a unique user ID |
_pk_ses* | web analytics service | 30 minutes | Store a unique session ID |
This data is not shared with third parties.
6.3 Consent
When you visit this site for the first time, the Museum will show you a pop-up window with an explanation about cookies. As soon as you click on "Save preferences" you authorise the Museum to use the categories of cookies and extensions that you have selected in the pop-up window, as described in this cookie policy. You can deactivate the use of cookies via your browser, but please note that our site may no longer function correctly.
6.4 Activating/deactivating and deleting cookies
You can use your web browser to delete cookies automatically or manually. You can also specify that certain cookies cannot be placed. Another option is to modify the settings of your Internet browser so that you receive a message each time a cookie is set. For more information on these options, please refer to the instructions in the Help section of your browser.
If you delete cookies from your browser, they will be placed again with your consent when you revisit our website.
6.5 Block cookies
Most modern browsers can be configured to prevent cookies being saved on your device, but you may then have to enter some of your preferences each time you visit a site/page. In addition, certain services and functionalities may not be available (logging in using a profile, for example).