G.D.P.R

PRIVACY POLICY AND DATA PROTECTION OF THE D-DAY EXPERIENCE MUSEUM General Data Protection Regulation (GDPR)

The privacy and security of your information are very important to SARL Musée Carentan Historical Center. We want you to have confidence in how we manage your information. This policy aims to inform you of your rights and provide transparency on how we use your data to organize your visit to our Museum and manage your online purchases.

This policy complements and is an integral part of the General Terms and Conditions of Sale.

As part of our activities, we are committed to protecting our customers’ privacy by ensuring the protection, confidentiality, and security of data in accordance with current legislation.

Each data processing activity implemented by the Data Controller has a legitimate, determined, and explicit purpose. For each processing activity, our Museum undertakes to collect and use only adequate, relevant, and limited data necessary for the purposes for which they are processed.

We ensure that data is kept up to date and implement procedures to allow the deletion or correction of inaccurate data.

Legitimacy of Processing

Musée Carentan Historical Center and each of its employees refrain from processing data that has been collected unlawfully.

Data processing is considered lawful if at least one of the following conditions is met:

The data subject has given consent for one or more specific purposes.
The processing is necessary for the performance of a contract to which the data subject is a party or for pre-contractual measures requested by the data subject.
The processing is necessary to comply with a legal obligation to which the Museum is subject.
The processing is necessary for the legitimate interests pursued by the Museum.

What Personal Data Do We Use?

On the Site, we may collect, directly or indirectly, the following personal data from you:

Your first and last name,
Title (optional),
Country of residence (optional),
Your email address,
Your postal address for parcel shipping,
Your phone number (optional),
Your password,
Your age group,
Date and time slot of your visit,
Your ticket number,
Ticket-related information,
Navigation data,
IP address,
Any personal data you voluntarily share when contacting us.

For What Purposes Do We Process Your Personal Data?

The data collected is used in the following situations:

For information requests via a contact form

• Manage and process online bookings: https://dday-experience.com/
• Process online purchases on the museum’s store site: https://www.paratrooper.fr/en/
• Manage your online account
• Respond to your complaints
• Send marketing emails based on your prior consent
• Send promotional offers and information about special sales, including newsletters with an option to unsubscribe at any time

Retention Period and Limitation

We are committed to not retaining personal data longer than necessary to achieve the purposes for which it was collected or beyond the duration specified by data protection regulations.

Your Rights Over Your Data

In accordance with Law No. 78-17 of January 6, 1978, on data processing, files, and freedoms, and Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 (General Data Protection Regulation or GDPR), we ensure the implementation of data subjects’ rights.

Data subjects have the following rights, subject to any legal obligations:

Right to information
Right of access
Right of rectification
Right to erasure (“right to be forgotten”)
Right to data portability
Right to object
Right to restrict processing

For any questions or requests related to the processing of personal data, individuals are invited to contact the D-DAY Experience Museum Management:

SARL Musée Carentan Historical Center

2 Village de l’Amont

50500 Carentan les Marais

FRANCE

Store and Online Purchases: contact@paratrooper.fr

DDAY EXPERIENCE Museum Bookings: contact@dday-experience.com

You also have the right to contact the National Commission for Information Technology and Civil Liberties (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

Data Recipients

Our Team Members

Your personal data is only accessible to those working within the Memorial who are authorized to process it, such as our commercial, communication & marketing, accounting, or customer service teams. Where necessary, website management personnel may also have access to your data.

Our Subcontractors

Your data is also transmitted to external service providers acting on our behalf, such as those responsible for data hosting. We ensure that they provide adequate guarantees for the security and confidentiality of your data.

Our Payment Provider

Payment-related data is collected directly by our payment service provider through a dedicated interface accessible from our website. This provider collects and processes your data under its responsibility to provide payment services when you order products from the Site. Your payment data will be handled by our provider according to the strictest security and confidentiality standards in e-commerce.

The D-DAY EXPERIENCE Museum does not collect or retain any payment method data at any time.

Other Organizations

We may also transfer your personal data to an administrative authority or public body when required by law.

Protection and Security of Your Information

We are committed to ensuring the confidentiality and security of the information you provide. To do this, we implement technical, physical, and organizational security measures to prevent unauthorized access, disclosure, alteration, or loss of your information. Although the security of information collection, transmission, and storage cannot be guaranteed, we take steps to ensure adequate security measures are in place. All individuals with access to data are bound by confidentiality obligations and are subject to disciplinary measures and/or other sanctions if they fail to comply.

Privacy Policy Update: November 3, 2023

Glossary:

“Personal Data” refers to any information relating to an identified or identifiable person, as defined by applicable law. When you contact us, book online, or use our site and its applications, we may collect certain personal data about you.

“Processing” refers to any operation or set of operations performed on personal data, whether automated or not, including collection, access, recording, copying, transfer, storage, structuring, modification, availability, communication, recording, destruction, whether automated, semi-automated, or otherwise. This list is not exhaustive.