Data management policy

Updated in April 2019

The SHOAH MEMORIAL is committed to respecting the privacy of Internet users accessing the Site. The purpose of the Data Management Policy is to inform the user about the ways in which his personal data will be processed during browsing on the Site and about his rights regarding respect for his privacy and protection of his personal data.

As part of the management of the Site, we process the data in compliance with the General Data Protection Regulation 2016/679 of 27 April 2016 ("GDPR") and the amended French Data Protection Act of 6 January 1978, and under the conditions set out below. This Policy may be updated, and users are invited to consult it regularly.

WHO PROCESSES THE DATA AND WHY?

The controller of the personal data processed in connection with our website is the MEMORIAL DE LA SHOAH.

One particularity concerns personal data collected by clicking the icons of our partners or social networks such as Facebook and Twitter. In this case, the controller is the third party whose site or social network is consulted.

While users are browsing the Site, we may collect data about them. No data will be collected without their knowledge. We only collect data for the specified, explicit and legitimate purposes:

  • Provision of news about the SHOAH MEMORIAL,
  • Management of donations,
  • Management of questions asked on our site,
  • Management of research applicants,
  • Maintenance and optimization of the site in order to check/improve the quality of service, availability and performance of the service, solving any problems or functional anomalies, and securing the site against fraud.

We are required to share data with third-party subcontractors assisting us with our missions.

WHERE ARE THE DATA AND HOW LONG ARE THEY KEPT FOR?

The data are located in France or within the European Union. If the data were to be exceptionally located in a country outside the European Union, the recipient would guarantee an adequate level of protection regarding the processing of data in accordance with the Data Protection Regulation.

We keep the data for a period not exceeding the required period. Once a piece of data is no longer useful for the purpose for which we collected it, we either destroy it or archive it as proof of a right or contract.

WHAT IS OUR POLICY ON THE USE OF COOKIES?

The site may automatically collect information that will only be used to monitor the volume, type and configuration of traffic using this site, to develop its design and layout, for other administrative and planning purposes, and more generally to improve the service that the site offers.
The site relies on certain services offered by third-party sites, including sharing buttons (Facebook, Twitter, LinkedIn). These features use third-party cookies directly placed on the site by these services. At any time, and without altering the user experience, it is possible to disable the collection of these data by adjusting the browser settings. To learn more, users can refer to our cookie policy.

WHAT RIGHTS DO USERS HAVE AND HOW CAN THEY EXERCISE THEM?

In accordance with the Data Protection Regulation, users have rights over their personal data. Thus, under the conditions and within the limits laid down by the Data Protection Regulation and after having provided proof of their identity (for example by sending a copy of their identity card):
– Users have the right to request from us access to, or rectification or erasure of, their data.
– Users have the right to decide the post-mortem fate of their data and to obtain the erasure of data collected when they were minors at the time of collection, as soon as possible;
– Users also have the right to object to and limit the processing of data.

Users can contact our Services to exercise their rights at the following email address: webmestre@memorialdelashoah.org indicating "DPO – MY DATA" (my data) in the subject line, or by writing to the postal address of the MEMORIAL DE LA SHOAH head office, attaching a copy of the proof of identity to the request.

In addition, they can unsubscribe from our news at any time by clicking on the unsubscribe link at the bottom of every email. They can also unsubscribe by sending a message to webmestre@memorialdelashoah.org indicating "UNSUBSCRIBE" in the body of the email.

If consent to the processing of personal data has already been given, it may be withdrawn at any time, without prejudice to the lawfulness of processing before withdrawal.

QUESTIONS AND COMPLAINTS

The MEMORIAL DE LA SHOAH has appointed a Data Protection Officer who can be contacted with any queries relating to personal data protection, at the following address: dpo@marvellavocats.com
Likewise, for any complaints, the SHOAH MEMORIAL reminds users that they can contact the Data Protection Officer at the following address: dpo@marvellavocats.com. If the response is not satisfactory, they can also contact the French National Commission on Computing and Freedom on its website, https://www.cnil.fr.