Privacy policy

Privacy policy

SAEM Lille Grand Palais is committed to protecting the personal data and privacy of everyone who accesses its website. We are also aware of the need to enable everyone to retain control over their personal data.

This policy for the protection of personal data on the Internet (hereinafter the “Policy”) describes the types of personal data that Lille Grand Palais may collect via its website, its forms, its blog or its pages on social networks. It also provides you with important information about your rights and the protection of your personal data.

This Data Protection Policy, as well as the processing of personal data that is implemented within this framework, is subject to French law, and in particular to the French law known as loi informatique et liberté (LIL), no. 78-17 of January 6, 1978, amended by the law of August 6, 2004 and any subsequent amendments. It is also subject to the General Regulation on the Protection of Personal Data n°2016/679 (RGPD) of April 27, 2016, which came into force on May 25, 2018.

1.data controller: who collects personal data ?

The data controller is the Lille Grand Palais operating company, a semi-public limited company with share capital of 2,700,000.00 euros located at 1 Boulevard des Cités Unies 59 777 Euralille – LILLE, registered in the Lille Trade and Companies Register under no. 401 713 920 – VAT no. FR 95 401 713 920.

2. Personal data: what types of data are collected and for what purposes?

The term “personal data” refers to any information relating to a natural person who is identified or can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to that person.

Lille Grand Palais may collect personal data from you, or receive such data from you, when you fill in the online forms (i) to register for the diary, (ii) to request a quote for the organization of events, (iii) to request contact details, or (iv) to apply for a job, or when you send us these requests directly by email.

Lille Grand Palais may collect, among other things, your surname, first name, title, e-mail address, telephone number and browsing data.

More specifically, when using the quote request form for the organization of events, Lille Grand Palais collects the identity of the organizer, the type of event you are interested in and the desired date. When completing the online form, you are also invited to add to your request by leaving a message in the free comment area provided for this purpose. In doing so, you undertake to comply with all applicable laws and regulations, and to refrain from making any defamatory, invasive of privacy, insulting or racially inflammatory comments, etc., which may be subject to criminal law. Such comments cannot be tolerated under any circumstances.

When using the application form, Lille Grand Palais may also collect other information such as the department you are interested in, your CV and cover letter.

When Lille Grand Palais collects your personal data, this collection is carried out in a fair and transparent manner, thanks to the presence of information notices or references to this Policy.

Mandatory information is marked with an asterisk. Some of these fields are essential for us to be able to process your request. If you do not fill in the fields marked with an asterisk, we will not be able to reply or process your request.

3. Purposes of processing: why are your personal data used?

Lille Grand Palais undertakes to collect your personal data only for precise, explicit and legitimate purposes and not to subsequently process this data in a manner incompatible with these purposes.

Lille Grand Palais may, on the basis of your consent, which you may withdraw at any time, process your personal data for the following purposes:

• Manage your calendar entries ;
• Processing contact requests sent by email ;
• Processing of quotation requests sent via the form provided or by email;
• Processing of applications submitted via the form provided or by email.

In other cases, Lille Grand Palais may, on the basis of its legitimate interests, collect data through the use of cookies, which are deposited on your computer after you have accepted them, to understand how you use our website and to ensure that it functions correctly (statistical analysis cookies and operating cookies). To find out more and manage your cookie settings, visit our Cookie Management page. Also on the basis of its legitimate interest, Lille Grand Palais is likely to collect personal data concerning you as part of the management of litigation and the management of requests to exercise rights.

The processing of data on behalf of customers (organization of events) is the subject of agreements directly concluded with the latter and is not the subject of this Policy.

4. Recipients of personal data: who has access to your information?

Only Lille Grand Palais staff members have access to and process your personal data, in particular for CVs and job applications.

Lille Grand Palais may, in exceptional circumstances, use its in-house technical department or French technical service providers for maintenance operations on its IS (Information System) and data servers. The latter are contractually bound to respect data confidentiality and security.

Lille Grand Palais shares your personal data with other third parties only if it is obliged to do so by virtue of its legal obligations or at the request of public authorities (e.g. judicial authorities). Lille Grand Palais may also communicate your personal data to certain regulated professions such as lawyers, notaries and auditors as part of the execution of their mandate or directly to judicial or administrative authorities in application of legal provisions.

Lille Grand Palais will not sell, rent or transfer your personal data to third parties without your consent.

5. Retention period: how long is your personal data kept?

In accordance with Article 5 of the RGPD, the personal data collected is kept, by Lille Grand Palais, in a form that allows the identification of the persons concerned for no longer than is necessary with regard to the purposes for which they are processed.

In the case of a request for a quotation by email (BtoB) or a request for contact by email or a diary entry, the information is kept for a period of 3 years from the date of collection or the last contact from the person concerned.

For job applications, CVs and cover letters are kept for a maximum of 1 year from receipt. For unsolicited applications, information is kept for a maximum of 1 year from receipt.

Customer database data is kept for 3 years following the end of the contractual relationship, then in an intermediate database within the limits of the legal statute of limitations.

Data required to comply with a legal obligation is stored in accordance with the provisions in force (in particular, but not exclusively, those set out in the French Commercial Code, the French Civil Code and the French Consumer Code). Cookies deposited on your computer during your visit to the www. lillegrandpalais.com site (after acceptance on your part), are automatically deactivated 13 months after the date of deposit.

6. Data transfers outside the EU: are they carried out?

Lille Grand Palais does not plan to transfer any personal data outside the EU.

In the event that Lille Grand Palais decides to use technical service providers who are likely to receive your personal data and who are located outside the European Economic Area, Lille Grand Palais undertakes to demand the same level of protection for your data as well as sufficient protection of your data as required by all laws and regulations applicable on European territory and ensures that these service providers are either bound by the European Commission’s standard clauses, are bound by BCR(binding corporate rules) within their international group and have been duly authorized by a data protection supervisory authority established on EU territory, or have adhered to any program allowing the recognition of equivalent protection within their country (eg: Privacy Shield in the US).

7. Individual rights: what rights do you have in relation to the processing of your personal data and how can you exercise them?

In accordance with Regulation (EU) 2016/679 on the protection of personal data, you have the following rights over your data: right of access, right of rectification, right to erasure (right to be forgotten), right of opposition, right to limitation of processing, right to portability, right to withdraw your consent at any time if processing is based on this basis. You can also define directives concerning the conservation, deletion and communication of your personal data after your death.

In particular, you may object at any time to the processing of your personal data:

• for canvassing purposes without any particular reason,
• for any other purpose, for reasons relating to your particular situation, unless Lille Grand Palais can demonstrate that there are legitimate and overriding reasons which prevail over your interests and rights and freedoms, or for the establishment, exercise or defence of legal claims.

In general, to exercise your rights, please send your signed request in writing to the attention of the DPO, Lille Grand Palais, 1 Boulevard des Cités Unies 59 777 Lille or by email to dpo@lillegp.com, enclosing a copy of your ID (to prove that you are the beneficiary of the right).

If you no longer wish to receive the Lille Grand Palais agenda, you can simply unsubscribe by clicking on the link provided in each email.

Subject to a breach of the above provisions, you have the right to lodge a complaint with the CNIL.

8. Protection of minors’ personal data

The Lille Grand Palais website is not intended for minors under the age of 15. For this reason, we do not collect or store personal data from minors under 15 years of age, although parents or guardians may object to this by contacting us at the following address: dpo@lillegp.com.

A child who was a minor at the time of collection of his or her personal data may have it deleted as soon as possible at the same address.

If it appears that data from minors under the age of 15 has been transmitted to us, we will not be able to process the data.

9. Changes to the Privacy Policy

If Lille Grand Palais modifies this Policy, or if required by law, it will be published on our website www.lillegrandpalais.com and will be effective as soon as it is published. Consequently, we invite you to refer to it each time you visit our website so that you are aware of the latest version, which is permanently available on our website. For further information on the protection of personal data, please consult the website of the Commission Nationale de l’Informatique et des Libertés (CNIL) www.cnil.fr